Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
File: 1sHCRltPlz-0sMtmKKmLO1iJbUg.mft (raw, json)
Hash identifier: ek390dzSR+28xU4QzVULNuD14odwIBPblCx+vMb4kOg=
Subject key identifier: 92:06:10:02:70:48:D8:AF:FF:F5:D8:72:A0:48:B4:77:EB:70:F5:78
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Certificate issuer: /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial: 01974AE85AD2B793DF60C53CDB6184439CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 15:00:30 +0000
Manifest this update: Sat 07 Jun 2025 15:00:30 +0000
Manifest next update: Sun 08 Jun 2025 15:00:30 +0000
Files and hashes: 1: 1sHCRltPlz-0sMtmKKmLO1iJbUg.crl (hash: BaPP8KnG1F8dyc1DUj/BptXRFRmj5NWBDYKM29GdIBM=)
2: 6LgX5MehzRAabFx-kl7-VX8WvGI.roa (hash: wiQ+g/d9+jLtiOR7pk9wrMApI0W1PUh3CexN4Wm3rM0=)
3: b4DuszRvCuY1HNLPnYT0Co3AUUg.roa (hash: Se60NV9pecSqSW5M0t+IF1TsZ0uCtpO4LnPo+ovkM6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:5a:d2:b7:93:df:60:c5:3c:db:61:84:43:9c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Validity
Not Before: Jun 7 15:00:30 2025 GMT
Not After : Jun 8 15:00:30 2025 GMT
Subject: CN=920610027048d8affff5d872a048b477eb70f578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:dc:66:9a:6a:ac:4d:ef:39:8d:b5:c1:df:
2d:de:66:e2:6d:35:ec:f9:c2:44:9f:bd:27:5c:0b:
bf:99:5f:c3:f8:d3:a0:a7:36:70:0b:d1:e6:c9:b6:
87:ea:09:ed:fd:78:79:be:a1:b6:cf:dc:d0:f9:1e:
5e:f1:36:99:51:c0:f1:e0:d1:b1:63:e4:dc:81:66:
71:81:be:93:88:89:65:ff:e0:da:a9:8c:01:8d:0c:
ed:a9:47:56:f5:36:ed:5d:2b:e4:09:97:8c:00:9d:
47:44:70:42:2c:c5:91:55:cb:83:bf:32:ea:b6:cf:
0c:26:fe:92:48:80:e0:70:e5:54:1a:60:63:7a:ca:
62:6f:43:cd:cc:c6:f7:cf:a2:95:1c:55:5d:22:21:
5b:05:8e:b6:c3:35:09:51:e1:7f:d7:83:df:a8:fa:
68:7c:fd:fb:d7:73:6a:fc:1d:1f:43:3a:d2:0f:fb:
b3:e4:c4:cb:e2:96:9b:f5:2f:1f:51:8e:9c:05:f0:
16:b0:de:35:2a:e6:82:89:f9:86:58:0e:b9:81:d2:
f5:92:e5:53:84:08:7c:0c:53:c6:4a:a2:c2:99:90:
a2:16:66:6e:5b:1b:31:22:c8:d3:8f:1a:ec:81:54:
96:50:ff:1a:3a:62:3e:47:a5:9a:61:1f:e9:ff:84:
55:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:06:10:02:70:48:D8:AF:FF:F5:D8:72:A0:48:B4:77:EB:70:F5:78
X509v3 Authority Key Identifier:
keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e7:70:fd:12:dc:e0:7f:e2:f9:0f:59:96:df:d4:a0:ea:9f:
08:01:02:f2:d6:16:33:df:a8:11:45:05:1f:06:12:39:13:1d:
6b:48:92:7c:bb:96:44:a6:97:18:ab:5c:04:f5:b0:43:5f:28:
1e:b3:f4:8c:c9:cf:bc:2a:d1:0d:47:f0:da:97:e1:a5:6e:44:
9c:30:ab:c2:2a:94:29:5e:58:13:08:2d:4f:ec:b7:40:21:52:
f3:41:a3:0a:6f:ed:9b:e5:a0:b4:94:cb:e9:1a:27:2b:97:82:
2a:a3:7d:c8:fd:de:a4:c4:aa:57:bb:fc:e8:e1:b3:75:07:ad:
13:0c:c8:ac:25:46:d0:f5:37:d6:55:c2:d0:bc:27:d4:7c:89:
de:fb:66:6f:78:89:0f:48:6d:f8:0e:c3:71:a6:30:01:cf:72:
b1:d5:9e:cf:6a:0e:e7:0e:59:29:a8:a6:3e:3a:dc:07:c4:5a:
7d:69:1e:90:2a:71:4a:88:54:a3:37:9a:91:55:69:b2:ba:40:
ed:db:27:91:84:f2:54:ef:0e:24:e3:b3:9c:49:bb:53:73:1a:
6b:75:e7:f2:01:b4:e3:be:b8:9a:2b:0d:25:ab:1c:ae:42:09:
35:78:4b:2a:f3:45:62:8b:55:3a:5f:57:1c:53:ef:8a:ee:2d:
6d:2b:bd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:16:03 2025 by rpki-client