
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft
File: 1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft (raw, json)
Hash identifier: 9JskC60aJuAemYZ0Ncjej6ydhvW2xXTUu4AwJcCbmUk=
Subject key identifier: D8:F1:7F:3E:BA:AC:88:29:97:BC:70:DC:50:13:25:1F:FC:E1:7E:96
Authority key identifier: D6:6B:F5:00:48:40:C3:3B:6B:1F:21:09:DC:24:9B:F5:B3:90:F3:19
Certificate issuer: /CN=d66bf5004840c33b6b1f2109dc249bf5b390f319
Certificate serial: 0197CE3BB0E6BA2A6686C8C1BECF8B51071A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft
Manifest number: 4B
Signing time: Thu 03 Jul 2025 03:01:47 +0000
Manifest this update: Thu 03 Jul 2025 03:01:47 +0000
Manifest next update: Fri 04 Jul 2025 03:01:47 +0000
Files and hashes: 1: 1mv1AEhAwztrHyEJ3CSb9bOQ8xk.crl (hash: BvF4WjIpmgd3DwV4ZRMwOqbbhofOJCeLDcd0rG3NdYI=)
2: B0-8lZYraEx150X3g22rWD-3L8I.roa (hash: 6NnoqG71xZV/7Tl4SVNDBKlXoHQBrNWRbnGwKyVzpAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:3b:b0:e6:ba:2a:66:86:c8:c1:be:cf:8b:51:07:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66bf5004840c33b6b1f2109dc249bf5b390f319
Validity
Not Before: Jul 3 03:01:47 2025 GMT
Not After : Jul 4 03:01:47 2025 GMT
Subject: CN=d8f17f3ebaac882997bc70dc5013251ffce17e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:84:f0:ab:4e:5a:e6:8e:f9:04:9c:88:0b:
22:50:bf:53:38:d7:dd:1d:9c:cd:fa:e0:4f:29:84:
32:3f:c8:b6:13:0d:e5:ac:2e:20:fd:ab:08:25:4f:
66:51:37:47:c7:f1:64:bf:db:f2:38:9a:fb:63:48:
de:84:a7:cd:6a:73:c2:24:04:5a:30:19:fc:59:3e:
57:d6:27:50:df:82:41:56:c6:d0:62:cf:da:5e:db:
11:0a:04:00:c7:2d:3b:c1:b9:cd:04:60:17:94:cf:
0e:b8:6c:33:73:57:bb:91:ed:18:40:f5:a6:2d:4f:
d0:ce:27:69:57:ad:73:40:ed:51:5e:26:14:90:f7:
64:f2:0f:a0:05:1a:cb:56:96:88:a4:18:57:6e:6b:
db:95:d6:7e:77:a9:04:a0:e0:4f:fb:bd:fb:2d:21:
53:e8:fe:f5:82:0b:cd:b4:56:30:27:38:7b:7b:91:
13:9c:6d:60:ef:7d:ca:e3:28:80:e3:d1:14:9f:e6:
cb:f8:2a:33:2e:cd:8e:8b:42:b8:2d:b1:6a:8c:4e:
d2:bf:89:da:9c:08:60:7f:b9:52:ba:6c:fb:42:b4:
76:c2:4f:dd:9f:d8:8e:e4:65:c6:37:7a:3f:3e:0b:
f4:94:ae:aa:f5:b6:5f:bf:89:02:40:99:75:a5:b6:
00:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F1:7F:3E:BA:AC:88:29:97:BC:70:DC:50:13:25:1F:FC:E1:7E:96
X509v3 Authority Key Identifier:
keyid:D6:6B:F5:00:48:40:C3:3B:6B:1F:21:09:DC:24:9B:F5:B3:90:F3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f4:29:2c:54:26:b8:d1:a8:a4:ac:c3:31:76:af:d3:59:5d:
84:59:c5:40:ac:a2:24:6f:78:65:68:5e:f8:75:02:69:af:d2:
c0:e5:c4:32:2a:a4:ac:9a:de:fb:33:12:fd:68:be:2b:b4:ab:
f0:47:62:f2:ff:60:e3:16:14:45:79:c0:7d:ae:4a:e2:5b:59:
a4:2a:5d:ca:a4:a3:ce:5b:7e:b1:ea:6a:d0:e8:cc:ad:7c:f6:
67:e7:f6:2a:6a:af:59:06:ce:2d:d0:8c:3d:0f:3b:ee:6b:de:
ae:5e:c3:92:06:b4:d7:9d:55:cc:2a:91:89:7c:13:fc:95:b1:
d6:67:4f:40:1c:e7:df:0d:5b:c4:64:1e:05:c8:77:f3:80:59:
ce:d0:51:16:10:19:47:86:b4:cc:24:2e:d9:59:a6:c9:0e:a0:
ad:05:98:41:a7:14:26:8f:a6:4e:0c:38:c7:c8:84:49:36:aa:
b6:df:2b:f9:2c:7c:72:e9:92:2a:25:b3:cd:6b:f6:c2:b3:35:
80:b6:56:cf:43:e0:25:be:9a:e3:2f:12:98:ab:45:7f:1a:d9:
f6:90:ec:a5:5f:0c:cd:18:78:f9:2e:d0:de:14:d0:57:a5:c9:
b5:0b:6a:fc:77:76:d3:36:3f:df:00:7e:97:0d:25:23:ca:a0:
cc:82:f5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:57:13 2025 by rpki-client