Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
File: 1PvHTNH4egvxbEgvYgHJueskTqI.mft (raw, json)
Hash identifier: qFRQnVb3O5Y4F3JBw2heQrvudvG3jFQUnaHfy+9//08=
Subject key identifier: 0B:03:84:0B:74:A9:9B:FD:25:2D:AB:3A:66:3C:31:2F:C8:32:82:A2
Authority key identifier: D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
Certificate issuer: /CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Certificate serial: 0197470BFD34E76D0697E8CFC1EC7E9D45AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 21:00:57 +0000
Manifest this update: Fri 06 Jun 2025 21:00:57 +0000
Manifest next update: Sat 07 Jun 2025 21:00:57 +0000
Files and hashes: 1: 1PvHTNH4egvxbEgvYgHJueskTqI.crl (hash: RlXoWP10MJ+/O1MaorLTRdb8bs36WjXwnCBxjrUgnz0=)
2: Lf04Gu4CGxYLcQBclc4AN9VDJLA.roa (hash: dSOlHoyFZA5kqNN/4PjLQn10doJUzZFyYe2NTurY+0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:fd:34:e7:6d:06:97:e8:cf:c1:ec:7e:9d:45:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Validity
Not Before: Jun 6 21:00:57 2025 GMT
Not After : Jun 7 21:00:57 2025 GMT
Subject: CN=0b03840b74a99bfd252dab3a663c312fc83282a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c1:ee:34:07:cf:cf:27:d2:2e:87:8f:0b:06:
fa:ab:e1:a2:3b:e2:63:8d:ee:9f:a1:e2:06:e2:90:
72:5a:94:29:03:89:9c:0f:81:1b:fc:55:e9:99:b4:
3b:27:1b:36:74:7c:6e:c1:af:14:3c:b8:66:e8:ae:
b8:c4:f2:87:ff:3e:a9:b4:a7:68:5f:6e:c6:09:20:
08:fe:08:e4:30:17:0b:5f:e7:97:68:f1:d5:9d:ae:
fb:e9:a1:b4:eb:21:bc:c6:97:43:fe:5c:ae:eb:0d:
b2:2e:c0:88:92:da:46:48:2b:7e:94:78:4d:24:f5:
a3:38:bb:76:67:b8:89:29:46:e0:2b:74:f3:08:d9:
3b:82:65:af:0f:82:fb:d0:43:bc:36:59:a4:65:a0:
74:da:50:cd:54:23:6c:87:43:2b:93:1b:65:dc:bf:
2f:78:00:fb:fc:53:5e:7a:75:d1:fb:31:40:43:f4:
08:ee:82:70:74:70:35:28:93:7a:db:28:3c:4a:ce:
7d:9c:9d:0f:00:54:3e:2b:cb:60:03:b6:73:a1:06:
60:8e:75:34:51:42:b7:9a:62:97:dc:c5:9b:2e:f9:
9c:81:92:be:35:dd:81:e5:03:65:f1:21:a8:61:21:
ed:84:d4:75:f6:f8:9e:24:55:94:ea:1c:95:b1:7c:
a2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:03:84:0B:74:A9:9B:FD:25:2D:AB:3A:66:3C:31:2F:C8:32:82:A2
X509v3 Authority Key Identifier:
keyid:D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:60:87:f0:8e:67:98:f3:c2:1b:dc:7e:6b:f8:f6:ab:f2:98:
90:a1:2e:9b:b1:ad:53:22:9d:c7:ce:e6:8a:44:02:8a:41:74:
ec:cf:33:54:0f:b3:f0:32:04:8c:bc:ea:fe:4a:c4:31:3b:8e:
08:64:8a:07:fc:bf:f3:6b:d2:c7:96:05:68:b8:fe:fe:14:4a:
00:85:9e:57:9f:a9:a0:c7:21:f0:8a:e9:1d:a6:4d:f9:71:30:
7c:69:a5:88:b4:99:0f:2a:43:6b:c2:af:98:03:d3:84:0e:c2:
d0:b9:3b:b1:19:87:26:29:8f:0a:f0:73:4d:89:2f:70:f3:e7:
65:86:21:4c:dd:1b:5e:1f:d6:21:46:7a:23:f5:e2:25:04:25:
89:09:e6:52:b8:01:a4:73:43:02:50:c1:65:d2:38:f2:07:29:
ad:6a:51:4b:b0:70:13:94:59:4c:dd:c1:94:4a:19:93:74:54:
f2:75:a7:c5:e2:a6:09:e5:d2:a6:52:14:ef:ff:e9:c8:17:42:
90:e8:f4:79:d0:88:bd:90:ae:92:e7:34:79:27:3b:81:2f:a3:
3b:f5:4a:61:70:fd:67:63:0d:89:d5:3d:b0:3f:41:43:24:a6:
05:f6:c8:cb:42:88:ff:7b:ae:bc:d0:d3:e5:34:cf:9a:85:16:
3a:62:f5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:41:40 2025 by rpki-client