Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
File: 1COlvl4hykYHMq5I84Wj6hUKK-E.mft (raw, json)
Hash identifier: 6pjSESHQfDrKkvw6ynvCfYeyJXpH941nvKUB78ojOeU=
Subject key identifier: 15:C5:B6:62:AC:27:64:39:AE:B9:9A:7C:2D:9C:C5:2B:60:33:F4:ED
Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
Certificate issuer: /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Certificate serial: 01974AE8C0E75395E3AF7AC537901C3CBF76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
Manifest number: 084A
Signing time: Sat 07 Jun 2025 15:00:57 +0000
Manifest this update: Sat 07 Jun 2025 15:00:57 +0000
Manifest next update: Sun 08 Jun 2025 15:00:57 +0000
Files and hashes: 1: 19PHc6AFoWW7kX-AfoCW2EsOypY.roa (hash: jP0qljmQA166BWIelGIYbLrJ64dNp9/gZUG1aTwRX4M=)
2: 1COlvl4hykYHMq5I84Wj6hUKK-E.crl (hash: ksAcGUAlBO5ypzy8YJpeunc0yQq+I13+PtIYUYp/t8o=)
3: 9daFy4ycHpLHixMJ58Jv9Mkn38s.roa (hash: OvltHgXCMbI42VwzzAwlJz6b+0BZqitij458IanSoJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:c0:e7:53:95:e3:af:7a:c5:37:90:1c:3c:bf:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Validity
Not Before: Jun 7 15:00:57 2025 GMT
Not After : Jun 8 15:00:57 2025 GMT
Subject: CN=15c5b662ac276439aeb99a7c2d9cc52b6033f4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:2e:db:9d:77:6d:4d:53:1e:49:d6:aa:8b:
78:5f:c1:f6:e3:98:e3:3c:32:20:11:07:51:38:61:
f2:7c:1c:0c:4c:70:55:4b:1a:7b:c7:d6:8f:c2:f1:
12:19:5a:c2:d0:41:70:51:91:bc:7d:ea:6b:cc:ae:
8a:dc:2e:57:13:b1:49:85:6e:ed:06:0d:2c:c0:72:
ec:7b:43:30:61:20:3c:f6:c0:1b:69:5d:02:6b:e7:
dd:2e:d0:74:b3:e1:6d:b3:0f:72:3e:1f:55:91:59:
2c:ef:a9:cd:90:72:15:94:b8:53:ec:29:15:ad:3a:
3d:ca:2b:d8:ab:ae:6b:ea:6b:a2:c8:b5:5c:e2:a8:
a1:a1:56:dd:ad:db:c4:fd:1c:1e:18:a5:54:88:cf:
7e:39:35:ac:76:a8:91:70:9c:9b:f6:db:58:e3:d6:
0e:3d:a6:75:11:12:66:07:98:44:e5:5e:6a:c4:94:
5d:7e:45:0d:ff:50:c9:34:67:36:30:69:de:db:54:
d0:05:76:04:30:d9:02:46:b3:05:5a:44:f9:29:bd:
37:24:03:16:a5:af:2b:e6:1c:19:40:54:f7:9c:e5:
14:af:92:78:82:28:61:18:1c:22:09:0e:48:3c:01:
28:34:00:02:c2:4c:66:bb:7b:65:40:0f:2e:ae:8a:
25:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C5:B6:62:AC:27:64:39:AE:B9:9A:7C:2D:9C:C5:2B:60:33:F4:ED
X509v3 Authority Key Identifier:
keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b6:af:c3:ac:4f:9b:2f:12:df:00:a9:cf:5f:c8:f7:82:60:
72:3f:28:b8:77:fd:10:5c:5e:aa:a4:9f:58:29:28:8f:b0:bd:
fe:99:5a:a1:01:12:f6:6d:74:88:05:48:81:a4:24:be:ea:eb:
73:e5:24:77:14:9a:97:7e:9f:68:9a:f4:72:e2:02:50:64:38:
c7:8c:31:f3:82:c6:65:2a:2f:6c:ca:72:37:19:f2:47:79:75:
e4:a2:44:e8:a5:7e:9a:55:5d:91:a2:e3:34:fe:19:57:7f:c6:
81:46:7d:85:9d:cb:c5:68:28:54:40:2a:e0:93:38:3b:e9:ca:
a6:10:9d:dd:30:46:0a:32:04:ae:7c:0d:54:9c:fe:05:61:8f:
13:59:9a:3b:02:91:2c:03:a1:1c:e9:c1:57:5f:74:2d:e5:c9:
71:8f:44:07:bc:f1:66:cb:4a:d4:67:94:ed:c5:9a:bd:89:9b:
dd:4c:8c:de:77:27:6a:10:86:3d:da:0a:1f:d7:4c:0c:55:98:
24:c4:1e:f4:11:5e:14:7a:9d:26:a2:9e:e7:52:c5:32:0c:38:
59:79:1e:7d:15:84:fc:73:49:35:71:d7:d2:e2:34:ba:ee:24:
4e:97:07:ed:3a:66:12:c8:73:c4:be:61:b5:00:16:47:3e:aa:
79:f8:7a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:56:04 2025 by rpki-client