Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
File: 1sJp-ek7D7i8SxyUerxbIfIfIwU.mft (raw, json)
Hash identifier: ZTzc0uc4psSP1HkcTrRCgNrQr+Q1iRX3nMz1oSeTKFQ=
Subject key identifier: ED:D6:31:59:90:20:AD:52:6D:E8:04:B7:A8:0C:AC:13:F0:46:95:1A
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Certificate issuer: /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial: 019749D5F82281232E1209705647AC8BB056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
Manifest number: 04BC
Signing time: Sat 07 Jun 2025 10:00:48 +0000
Manifest this update: Sat 07 Jun 2025 10:00:48 +0000
Manifest next update: Sun 08 Jun 2025 10:00:48 +0000
Files and hashes: 1: 1-4EUUJ60y6tCuL7fMYLuUTMussI.roa (hash: ZCZ3I6CzJy+9WHfI/N/oUofNXCUICsdPSdQOOtiTJMs=)
2: 1sJp-ek7D7i8SxyUerxbIfIfIwU.crl (hash: NvuvJ9E5qZppcGv/s7d0D90h77IDty+nW0mLsQ0z6zM=)
3: AJ8BcEY-DdXcTmxMdYHCmI3RxoU.roa (hash: 3dzyfVQpkuELs7hezXS9c0EUIsSeRiw+pnrqw/PWP6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:f8:22:81:23:2e:12:09:70:56:47:ac:8b:b0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Validity
Not Before: Jun 7 10:00:48 2025 GMT
Not After : Jun 8 10:00:48 2025 GMT
Subject: CN=edd631599020ad526de804b7a80cac13f046951a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:80:5a:06:48:39:40:e9:ee:4c:ab:5c:60:0f:
31:5f:b1:17:9a:81:7a:ea:5f:a0:88:b0:ca:26:8e:
6c:ee:45:f3:0b:64:c5:24:06:d8:53:97:20:ba:c3:
98:1e:ca:8d:2a:af:82:4d:3d:54:0e:83:83:80:37:
7e:2d:e1:96:a4:f5:ba:da:88:6b:18:2b:07:bb:67:
69:76:61:c2:ae:6c:ba:3c:e5:d0:6c:f3:14:cc:cf:
90:80:68:1d:0a:82:3b:60:b3:e0:72:a5:a8:e6:2b:
10:1e:6e:6d:fa:88:db:38:a1:06:f0:9d:bf:53:e1:
c8:6d:c3:50:97:f3:a2:67:51:09:2c:ae:f9:96:66:
55:6b:35:52:e8:05:c6:06:71:f7:ee:e3:d4:bc:6a:
34:a1:3e:a5:e6:d0:c1:3a:06:a1:33:6b:9c:82:72:
90:0c:1b:f5:e3:c2:4b:c9:e0:ab:6d:d5:49:62:de:
80:ef:c1:30:73:9b:31:b0:0f:45:bb:9b:bc:4b:52:
1a:cb:01:18:27:e9:22:71:cd:08:d7:05:30:5e:a4:
cd:4e:db:be:4c:6d:95:99:91:00:fa:04:63:21:9b:
1d:c7:ff:eb:08:1b:42:a2:fa:cc:0b:4c:f9:41:49:
c3:6f:3f:8a:44:50:67:23:e8:fb:4a:57:8b:2f:86:
54:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D6:31:59:90:20:AD:52:6D:E8:04:B7:A8:0C:AC:13:F0:46:95:1A
X509v3 Authority Key Identifier:
keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:44:13:01:32:c9:99:c1:00:17:09:cb:a9:b0:82:53:ef:e9:
be:96:8a:b7:8f:1f:02:ca:d1:0c:48:af:35:e1:4a:08:6a:50:
77:79:24:12:1d:7e:eb:40:a6:e3:4e:78:47:1f:b6:9b:22:5c:
ec:10:e8:ce:d2:9b:28:d6:18:74:e7:3a:31:8a:49:11:3d:6c:
b1:e2:86:56:53:51:a2:59:0e:a3:98:9e:55:83:72:c8:c3:4b:
e7:49:29:d1:93:a7:4b:54:c7:29:06:02:b9:19:ca:ec:49:82:
68:ba:9f:73:52:a7:d4:92:63:1d:6a:75:9b:a2:1b:d0:1d:0b:
65:5d:84:a9:0e:45:b8:00:72:b8:56:83:34:a7:70:f5:67:5b:
e1:43:07:48:54:57:bf:ee:c4:3a:ce:59:03:cf:51:c2:f5:ca:
aa:6a:ce:3f:88:d3:1f:9c:4c:66:c4:b6:d9:41:8d:ef:cd:98:
98:82:3e:02:f7:a1:34:3d:d5:92:5e:5c:58:4e:c0:6c:59:2f:
08:da:9d:51:f0:d2:90:d8:93:3f:e1:65:9d:f1:e9:92:f4:cb:
de:c8:2f:48:e0:39:da:8b:ed:20:1f:71:ee:84:24:48:ae:7d:
46:dd:b1:f7:a1:eb:cd:5d:5e:74:8b:64:f7:b9:8f:93:c4:b8:
50:0f:81:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:51:49 2025 by rpki-client