Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
File: _1l7QMbURp-bkUp43I7EOTI7D7g.mft (raw, json)
Hash identifier: Iox+JGWzzehYyPDpoq+5tlHfo4LRExST4lR9PQmL2wg=
Subject key identifier: 29:2E:CB:33:70:36:4C:CD:EE:DF:8F:C2:74:AF:E5:E4:99:A2:B1:EC
Authority key identifier: FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
Certificate issuer: /CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Certificate serial: 019741E58321AF9C947572EA6E0BCB0ABED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
Manifest number: 0F1B
Signing time: Thu 05 Jun 2025 21:00:49 +0000
Manifest this update: Thu 05 Jun 2025 21:00:49 +0000
Manifest next update: Fri 06 Jun 2025 21:00:49 +0000
Files and hashes: 1: EpQcDDhQK8-WOhYfBO3A-z572b8.roa (hash: tX6xd7XfEe5I+QgttvkH+DOkKR0i0R1ahT4BEMwpPug=)
2: KV_nG_kmH633ZUe-9L97LnA29yw.roa (hash: sb05Z/GuWAjUIqo0R3Yca51uKGMc6MwqIkHeJF92vO8=)
3: _1l7QMbURp-bkUp43I7EOTI7D7g.crl (hash: 3FKyVqZVLQR+Q5lSxZbOVn+oi1SgGIki8mC6yvLDi2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:41:e5:83:21:af:9c:94:75:72:ea:6e:0b:cb:0a:be:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Validity
Not Before: Jun 5 21:00:49 2025 GMT
Not After : Jun 6 21:00:49 2025 GMT
Subject: CN=292ecb3370364ccdeedf8fc274afe5e499a2b1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:5c:a1:00:27:77:d0:9b:5f:63:51:bf:a8:
4d:2a:94:70:d6:d3:94:d7:c9:e1:3e:2a:9e:3a:90:
41:7c:fd:93:37:61:4c:4e:54:07:ba:b4:31:f1:5e:
08:e1:e7:d2:04:7c:dc:cd:e0:ed:63:86:d3:1f:18:
f0:19:81:eb:15:fa:e5:26:cc:10:e3:74:00:da:4d:
1b:e2:ea:4e:dc:2c:8c:cd:c0:c6:60:0c:73:1f:25:
f2:e0:7e:9a:35:47:40:53:8b:31:36:a7:29:3c:ed:
3d:11:b5:85:d4:fe:17:04:05:60:22:ce:d1:d2:68:
23:86:a1:e9:03:83:8c:b1:8a:71:1e:85:27:58:9b:
a3:5b:47:f7:9e:37:3f:16:99:30:64:0b:dc:e7:fe:
7f:a3:d3:7f:cd:21:bd:32:63:b8:a8:b2:59:78:bd:
2d:fe:ce:a5:b0:3b:c5:c9:22:ce:7f:2c:9c:a0:b1:
01:56:2d:22:ee:d6:08:de:b3:95:95:bd:db:26:a5:
53:3a:f1:83:1b:00:51:32:36:ff:ed:61:27:33:3a:
af:ca:98:19:7a:7c:a0:f1:43:e9:48:4b:0d:bb:38:
40:6e:b1:84:7d:ce:6a:ff:10:59:d2:ac:0c:d6:4e:
9a:82:34:d7:7b:0e:56:3d:16:7f:84:b3:51:04:8d:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2E:CB:33:70:36:4C:CD:EE:DF:8F:C2:74:AF:E5:E4:99:A2:B1:EC
X509v3 Authority Key Identifier:
keyid:FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:bf:3d:5b:e3:35:c4:92:89:fa:a5:b1:d5:a5:34:33:4f:1f:
21:82:3f:d0:1d:0a:51:cc:ac:b2:95:3a:39:01:b5:41:2c:7e:
7e:67:5c:49:a5:41:56:c8:9a:7e:04:27:3c:c2:57:e6:f3:c0:
08:2c:97:8b:38:10:c7:af:a5:80:b7:8b:2d:ea:2d:60:14:70:
a7:79:7f:b8:ab:ce:40:d6:20:8a:7b:6e:8a:15:47:cd:71:bf:
1b:84:6b:a0:ef:96:da:47:ce:a2:33:3a:a8:36:98:e9:1f:65:
70:26:67:2b:88:01:96:3f:cd:e8:53:b9:70:44:bb:7c:c0:2f:
9c:81:07:e0:b0:52:37:6a:ed:09:f0:b4:1a:e1:f2:31:9e:51:
8a:78:bf:be:85:92:1d:53:05:cd:54:0f:d7:66:7a:d4:4e:68:
fe:cd:10:db:00:21:27:c8:7c:54:02:e7:dc:75:6c:ba:14:e6:
53:70:9e:6a:29:3a:db:cd:37:91:73:53:72:1d:8f:6e:26:3d:
e2:35:a4:6d:e7:3e:e7:0f:8e:0d:b9:73:75:ac:a8:88:21:c2:
72:c3:a8:76:d2:64:21:c8:47:09:72:d3:4d:ce:68:07:f1:da:
bc:64:e8:c5:06:62:f1:e9:28:97:70:ef:2b:b8:5a:5a:c5:69:
4e:7e:d5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:30:10 2025 by rpki-client