Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
File: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft (raw, json)
Hash identifier: F9bFjHYbrq9yENUjuk2OXdrrfOgPpb7NVex1omoFg7I=
Subject key identifier: 49:31:14:B9:22:91:2B:4A:52:66:6F:DA:D3:78:EF:7E:CB:4F:ED:DB
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Certificate issuer: /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial: 019749D593EE7DD8DC45D24F7DB102987C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 10:00:23 +0000
Manifest this update: Sat 07 Jun 2025 10:00:23 +0000
Manifest next update: Sun 08 Jun 2025 10:00:23 +0000
Files and hashes: 1: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl (hash: s7i0DJS7eRA009wlWxPVofWE95T+ZzZtUZWyKmlhZ1k=)
2: 621hWvBObU0KbojSBLWUXo4jF5o.roa (hash: bGhGcnNXquYec5H9mQpND+EzafK9SyRlgLrctL4mXdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:93:ee:7d:d8:dc:45:d2:4f:7d:b1:02:98:7c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Validity
Not Before: Jun 7 10:00:23 2025 GMT
Not After : Jun 8 10:00:23 2025 GMT
Subject: CN=493114b922912b4a52666fdad378ef7ecb4feddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:0b:11:b4:ab:56:27:d1:6f:59:bb:81:4f:
da:4d:ee:6c:bd:4e:20:7a:64:0a:06:18:80:00:49:
44:df:ab:44:06:b0:9a:2f:9a:3a:2b:82:e7:af:94:
e2:5e:a2:a7:79:7d:c1:eb:0e:78:f0:78:17:3b:2e:
e8:76:38:c6:f8:ba:6b:44:01:8c:5d:7e:7e:5d:6a:
f5:7b:2f:47:5e:f4:6c:97:94:dd:f1:e3:eb:e6:f5:
ed:1b:53:17:da:a6:e8:82:ac:dd:d6:77:7f:57:cf:
64:52:ae:82:b2:3e:80:95:36:4b:26:bc:3f:bc:8b:
4f:be:f7:26:2a:97:28:57:1d:28:c9:97:7e:e5:ed:
64:85:29:e5:ab:3c:18:d1:9a:e6:e4:1d:5e:6d:e3:
70:2e:f0:12:a5:3a:fd:e6:c9:85:98:9c:0e:b2:46:
19:68:10:1e:74:d4:be:94:11:ac:ef:3b:fa:a9:25:
be:6b:bf:d1:5a:9e:cf:71:a4:33:1e:aa:ab:f7:6d:
a6:cf:4b:f4:ba:65:04:66:74:a7:af:f5:c8:5d:d2:
c2:4e:49:52:50:14:52:7e:78:1b:5b:38:05:87:e7:
d6:f9:32:4f:f2:2f:60:14:ab:4c:e9:23:89:ce:35:
ad:46:5c:c8:75:58:02:4b:22:a3:71:c2:69:23:70:
e8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:31:14:B9:22:91:2B:4A:52:66:6F:DA:D3:78:EF:7E:CB:4F:ED:DB
X509v3 Authority Key Identifier:
keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:48:61:18:28:b2:81:9e:34:43:8b:9a:d6:ab:87:af:34:0a:
ab:f8:92:ef:3d:96:38:37:77:de:a6:21:2c:20:78:d5:26:0a:
3f:da:8b:40:3c:79:ad:3f:7f:7b:8f:27:57:36:39:b6:8b:e5:
ad:a2:d0:5a:3d:7d:eb:e2:b0:5b:b1:44:41:f1:72:3d:39:d8:
12:c1:b3:ef:c0:1e:94:2c:c7:c6:36:d6:e4:78:6f:46:e6:d2:
c0:63:7d:4c:ec:1c:ae:21:9f:96:20:2c:86:99:fc:ad:b2:2d:
cb:e1:37:6d:7c:1a:b1:02:46:2b:ff:ce:be:b2:8d:df:13:7b:
8f:6b:65:5e:1d:bb:ed:6e:a8:35:19:11:88:5b:a0:c2:d1:81:
d7:be:db:e6:b0:c4:4e:7b:f6:ff:bd:94:ce:46:4e:04:00:9e:
da:ad:da:2f:0a:11:88:9d:89:df:6f:4e:03:2d:f5:46:84:b7:
f8:c4:3c:55:02:5c:3a:22:f6:8b:ec:39:ff:3d:a1:b9:d8:3e:
a8:b7:60:16:63:d7:e5:1d:33:45:69:2a:8d:49:21:a8:d5:b2:
2b:f3:3b:e3:00:98:9f:0a:e8:c3:a1:9d:be:8f:61:ae:28:d1:
92:93:78:93:dc:b8:b4:7c:1b:b2:0b:33:c9:6c:2d:a3:c5:94:
ff:18:40:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:15 2025 by rpki-client