Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
File: 1-VA8B1ppBVa9RiEiskaZ4baxkng.mft (raw, json)
Hash identifier: y+J6bd4oPygZqaH4+gYTqEI0R3IDJWMEYkr8dPr4bUU=
Subject key identifier: 74:27:2B:90:2E:BC:82:1E:99:98:C9:00:0E:10:55:C1:B3:AC:86:42
Authority key identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
Certificate issuer: /CN=f9503c075a690556bd462122b24699e1b6b19278
Certificate serial: 01975C139C122E5E2770D471C6125C315E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
Manifest number: 158E
Signing time: Tue 10 Jun 2025 23:01:18 +0000
Manifest this update: Tue 10 Jun 2025 23:01:18 +0000
Manifest next update: Wed 11 Jun 2025 23:01:18 +0000
Files and hashes: 1: 1-VA8B1ppBVa9RiEiskaZ4baxkng.crl (hash: tRnYYKCyYIJN8DEjdoBxI2UL7/mxzQLTLOPxulcvbEY=)
2: p2SVo4qsSiAegswh4Tt4B2CgnX0.roa (hash: ZR7WcDeaKIDHi9EqUsqBzkr/KcnAMrpHKscQ/Pybjlk=)
3: q2ZLX08w7-Dcrgr57h1hgcnfkXY.roa (hash: uFC0sIXPmgIMFYS0E5zDcKQoPca0pnQPm/3b/35uS2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:13:9c:12:2e:5e:27:70:d4:71:c6:12:5c:31:5e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9503c075a690556bd462122b24699e1b6b19278
Validity
Not Before: Jun 10 23:01:18 2025 GMT
Not After : Jun 11 23:01:18 2025 GMT
Subject: CN=74272b902ebc821e9998c9000e1055c1b3ac8642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8d:f8:96:11:e9:82:60:fb:df:b0:b5:99:9d:
40:6d:41:14:d4:6a:1c:ef:94:66:e3:a5:c9:64:86:
bd:21:90:a9:54:26:44:ea:38:51:68:f1:b6:fd:43:
ee:b5:82:5b:ca:59:9b:2e:1d:1e:7f:e2:66:5e:62:
a3:9d:c8:b2:2b:0b:62:49:fe:6b:6b:d6:c6:81:d5:
c9:f3:12:1d:8f:b2:0e:0d:8c:de:b1:da:1f:dc:d5:
73:36:5b:a4:bf:34:4e:91:ab:ae:b7:4c:c3:55:64:
bb:86:6e:62:2a:51:b1:b7:60:99:30:75:ea:8d:c2:
90:df:db:2e:4f:a1:fd:3b:3a:66:b2:8c:3f:43:82:
1f:d9:4f:62:ee:d3:3f:8f:24:f8:2e:28:d9:71:0e:
c4:82:a0:bb:8b:3c:20:16:71:2a:13:1a:e7:26:84:
2a:8b:d2:4b:3e:ad:65:72:80:f4:ef:83:26:7a:7e:
c9:5e:01:ec:8d:29:c0:4a:3c:17:9a:1f:02:bb:5e:
77:94:f5:a3:cc:8c:ce:5f:3f:1d:96:db:ab:43:87:
07:fd:24:27:5f:b9:75:6c:40:50:24:be:b7:05:8e:
f6:5f:25:ee:3f:d7:3f:8a:eb:6b:7e:fb:e6:8b:53:
dc:fe:09:2d:02:d4:f7:59:8f:62:9c:62:5d:c8:f3:
7b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:27:2B:90:2E:BC:82:1E:99:98:C9:00:0E:10:55:C1:B3:AC:86:42
X509v3 Authority Key Identifier:
keyid:F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:df:4d:1f:80:85:2c:60:33:e2:20:48:02:2a:3c:a3:ca:ce:
b3:15:e9:00:96:38:d3:82:bf:a0:ec:49:54:4e:9b:cf:69:3c:
7c:04:28:a8:e8:09:eb:62:75:6e:ee:a4:ff:b2:17:f2:85:35:
03:01:9d:74:58:c0:2f:e7:20:b8:3d:88:2f:ea:15:1a:a4:50:
0a:95:7c:58:2b:6b:7d:f2:c7:c7:f3:07:62:15:46:bc:a2:da:
b2:ca:18:23:1a:7a:55:53:ac:61:e5:ca:69:70:ab:57:c1:49:
67:89:a0:b5:bc:81:eb:c9:64:3e:d1:63:ce:41:36:13:3b:d4:
e2:0d:71:a0:bf:de:c4:99:c8:57:af:88:1c:f4:ec:e9:ab:90:
bf:5c:15:4d:4f:19:30:80:5b:e7:4a:d2:e2:bc:cb:47:66:f0:
c6:87:b3:a6:54:3c:cb:ba:fd:db:ef:8d:b7:f2:05:1e:34:e8:
5f:b8:ae:e7:78:66:14:d6:fd:b8:d6:3c:7a:6e:3d:5d:ab:2e:
75:b8:0f:92:d1:fc:df:81:92:54:00:5a:5f:98:c5:32:d7:6c:
57:57:f4:27:cd:1a:bb:3d:ec:50:45:59:04:eb:66:0f:92:63:
85:a6:a6:f8:5b:60:2f:d1:be:eb:cb:c9:cd:ef:31:3a:bc:f2:
6c:e0:ae:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:45:41 2025 by rpki-client