Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
File: 1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft (raw, json)
Hash identifier: ZfE2OtmeZOSrA2czFtSvPd/kc3MiMwId7MbV4xmcIno=
Subject key identifier: E4:F1:DE:C9:26:FF:3E:CC:57:01:51:EB:5C:90:D6:33:31:D3:5F:85
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial: 019769CE7C8D7A6CC08AE10BC897D3002B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
Manifest number: 1591
Signing time: Fri 13 Jun 2025 15:00:29 +0000
Manifest this update: Fri 13 Jun 2025 15:00:29 +0000
Manifest next update: Sat 14 Jun 2025 15:00:29 +0000
Files and hashes: 1: 1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl (hash: XbeDg431dvcBlAwBPZJJ1Gw0RHZYLP+NM5YyF4pZhY8=)
2: D2WLBhbXEMdDEu6VoSCBX9kwKxY.roa (hash: L98txIeHFCVTE5FfZdJjhE+NAuboMbn59/Tg8vXNf1Y=)
3: FPWYS5FPdi_36PocHDQv9w20hsM.roa (hash: lc1AFnplH2+Ms7H/N6TFQmmzCrwqddRkrKSWWiBizwU=)
4: GD4Ao9B2cz5WTYzecC-kGpGE8PU.roa (hash: EMPtxZQPJUmcPd6jCs0XXLsuloEWz1y/aD3A32qr1zk=)
5: W1awuHaHMUM8Quc80WAi-XtdIzY.roa (hash: +ggiQE1BpawHqA/zPCH8mung319bbE2FMHPQr3Jv5zk=)
6: dL_cPR3BvEV2FZeLKttQtUtkTJA.roa (hash: sW6C8Oel7oIOAbSvnZNd6R3ZV3AqqC/NBWFrXS1er6s=)
7: jgF2CfkLgJ6QhMF-SdjdJSTJwMg.roa (hash: mvV2l5CpWyu6M49qXSrw0SVIhjTViniokzpN0H6YY+0=)
8: vRRL6lXZDT1QQeeextawYFp6dTk.roa (hash: OGSPwUDB+II0bvau8QxtXKLAR/Lr2UnzedciO1U9Xfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:7c:8d:7a:6c:c0:8a:e1:0b:c8:97:d3:00:2b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Validity
Not Before: Jun 13 15:00:29 2025 GMT
Not After : Jun 14 15:00:29 2025 GMT
Subject: CN=e4f1dec926ff3ecc570151eb5c90d63331d35f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:b4:cc:0b:84:22:c6:df:a9:ae:65:3e:45:
c9:d2:1d:6d:6f:d3:d8:dd:38:56:13:cc:b9:9d:16:
f9:10:8a:49:a3:1a:50:24:dd:7c:25:60:fe:0b:74:
2d:d6:02:39:72:61:87:84:c3:b0:da:2b:99:c9:57:
6e:84:3b:b4:ac:0f:36:23:9a:fd:89:b6:9b:92:5d:
b3:b4:34:ad:63:ca:c5:b1:8b:80:5c:a2:e9:79:3a:
8b:74:58:e7:96:95:2b:f6:94:2a:8b:ae:16:80:1c:
96:3b:b7:6c:92:12:e8:c6:1e:5d:ab:61:cf:bb:2b:
1b:1f:de:57:a9:52:84:ec:cf:c6:c2:de:83:e9:e2:
47:1a:4b:8c:50:c5:b7:aa:84:13:8e:16:ec:04:fc:
8e:11:6d:e5:fe:c3:11:6f:c0:2f:de:56:9b:eb:80:
45:98:1e:b7:0a:24:00:0d:ab:9d:ee:d5:c7:af:9e:
6d:fa:5d:eb:1e:60:6c:16:58:d9:84:09:35:cb:76:
c1:5c:2e:0b:d9:42:31:10:27:4d:c5:94:13:c6:3a:
67:f6:45:99:43:9d:42:35:79:e0:6d:b8:9e:08:cb:
9a:4c:66:bc:48:f4:cb:04:64:82:fb:c0:e6:6c:ba:
9e:04:53:21:df:67:6e:78:f5:97:df:e0:02:96:8d:
8c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F1:DE:C9:26:FF:3E:CC:57:01:51:EB:5C:90:D6:33:31:D3:5F:85
X509v3 Authority Key Identifier:
keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:68:d6:81:98:27:9e:0e:cd:61:a7:f6:49:04:85:84:2d:2c:
02:b0:19:e9:4c:a7:16:30:d9:fd:56:ff:15:ec:da:f1:81:42:
67:01:c0:5f:2e:23:3b:d4:1b:c3:54:ca:74:b1:36:37:4b:2a:
d1:88:11:3d:d5:f4:0f:67:f4:77:60:e9:2d:88:58:50:97:96:
a7:18:3b:80:3b:5c:cd:27:86:0b:3a:78:b8:31:ad:e9:97:e0:
b1:76:d8:9e:fb:c1:53:17:a7:c2:03:2a:03:40:af:d5:c9:69:
67:74:0a:ee:8f:fd:4a:dc:7d:82:13:d1:9e:08:49:57:59:66:
9c:37:76:d0:cc:14:e6:85:42:dc:78:b0:aa:52:90:2b:e1:40:
53:99:c5:a4:c3:22:08:63:e5:dd:4e:5c:6d:25:f6:f5:9b:11:
e0:b8:2d:20:f2:82:37:2e:57:23:05:4c:7e:10:9d:47:d3:1d:
41:51:11:4b:8d:1b:a4:a5:e4:72:4d:5d:97:92:1c:c9:86:dc:
98:13:94:c6:69:70:53:99:20:20:1b:9a:76:4b:40:85:2f:63:
14:5c:88:00:be:dc:a3:8b:35:36:7a:8c:bc:ac:99:56:35:93:
50:74:4f:ca:12:15:44:42:18:35:60:98:f4:52:be:03:c5:7f:
ac:b3:ae:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 17:03:54 2025 by rpki-client