Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
File: 1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json)
Hash identifier: pDSlHlqJaGSNI08I+6LjmqasWGLwDFTxAiFhblq6BBo=
Subject key identifier: 37:4B:2B:04:EB:A1:EA:B2:CE:14:32:62:92:0E:75:FC:71:03:E6:D5
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Certificate issuer: /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial: 01974E204147A886A960EF8A6E1EAA0D9EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
Manifest number: 1585
Signing time: Sun 08 Jun 2025 06:00:26 +0000
Manifest this update: Sun 08 Jun 2025 06:00:26 +0000
Manifest next update: Mon 09 Jun 2025 06:00:26 +0000
Files and hashes: 1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: uLN97BSCc28LvgZKjYl83ojKoZO1xUlcD1FvqSSvvyU=)
2: kXAoycjFnk5ToJYqqTkBxzOraGU.roa (hash: +7rp8yWmgsLGmzgq1w+1h/kN+7iJKvOfloIbj12Qykg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:41:47:a8:86:a9:60:ef:8a:6e:1e:aa:0d:9e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Validity
Not Before: Jun 8 06:00:26 2025 GMT
Not After : Jun 9 06:00:26 2025 GMT
Subject: CN=374b2b04eba1eab2ce143262920e75fc7103e6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9e:76:16:6a:a1:95:68:f6:79:3f:17:c3:16:
5e:6e:da:28:af:7f:01:2d:ff:b3:c9:74:69:32:c7:
db:24:6a:61:79:dc:a2:53:3c:d6:24:b4:05:79:26:
4a:1d:fb:89:5f:e9:18:ad:99:ac:0f:1b:63:66:24:
3f:a1:57:1e:b2:93:f9:f6:8e:8f:07:a3:75:d0:73:
80:4c:ce:3e:49:a7:6c:70:e0:ab:b2:f4:3b:c3:66:
4c:73:54:19:ba:21:f9:a0:7d:87:b7:4d:ca:13:7a:
9f:ac:55:9a:2c:42:af:0e:a6:60:50:b7:ec:aa:02:
34:43:16:55:33:3d:11:49:27:12:6a:90:50:36:f4:
6c:87:52:d3:c7:2c:7a:ab:13:4e:d0:b3:1e:04:bb:
33:21:08:a8:a4:ad:ef:ea:57:73:bc:a4:a2:ae:cf:
2a:72:4c:db:c1:93:f5:5d:31:db:01:bb:29:1d:71:
67:75:43:b7:a0:ea:ba:e0:5b:56:c3:68:94:9e:bc:
84:86:be:32:9d:76:a3:98:1d:f2:48:e5:34:72:04:
7d:83:63:be:c9:3b:ac:35:70:85:94:20:45:d8:c5:
0e:c1:33:49:97:26:eb:56:7e:37:82:f3:33:a8:ec:
7a:39:e2:9c:a1:4c:0b:53:59:02:2c:79:57:ac:a8:
c2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4B:2B:04:EB:A1:EA:B2:CE:14:32:62:92:0E:75:FC:71:03:E6:D5
X509v3 Authority Key Identifier:
keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:19:3c:9e:b3:9f:91:56:fb:b1:ae:3f:d4:07:ba:1a:a6:05:
8e:71:de:89:00:5d:f9:31:e5:38:e5:3d:e2:3e:24:4b:47:25:
4b:b4:78:1e:e8:35:de:e7:f7:1c:f1:29:4e:fc:d7:ec:c5:d4:
b9:6a:2e:f4:d1:a4:f4:ac:13:76:60:5c:b4:a3:6d:bf:d1:ab:
06:b5:69:20:1b:66:06:3d:93:f9:d1:1a:7d:4f:4b:e8:13:4a:
cc:b4:cd:d1:c8:76:3b:e6:92:eb:a2:1b:1d:a6:89:4d:17:7f:
84:55:fb:50:97:2e:0b:ba:e9:ec:39:1a:60:69:6c:71:dc:5e:
cb:55:0c:7a:a9:1d:00:d4:4f:ed:cb:89:d4:5b:11:2d:ba:5b:
88:6a:e5:a1:07:2e:df:29:df:4c:c6:f2:03:35:82:03:2d:4e:
7f:71:0d:e1:db:56:a3:13:b9:a0:e7:f5:9b:a1:03:cb:c9:5f:
9a:50:bd:3d:1a:f7:bb:1a:12:70:83:4b:5a:e9:be:5c:22:06:
4b:c5:2a:96:8d:75:09:40:96:f1:09:62:1f:e7:0e:1d:11:f2:
33:a4:f4:4c:ad:b2:b1:4b:a9:e0:b6:c0:f3:aa:ac:5a:40:e9:
84:19:9d:1a:fb:d9:92:9d:0d:f7:55:2a:8e:80:84:2f:e6:1c:
8f:39:1a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:52:04 2025 by rpki-client