Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
File: 1-DJywMMtsATwePh0uZ2poLfmOv0.mft (raw, json)
Hash identifier: RSlttyZRjHgdwUzs+LO9fSQwwFZainP3otshB/GoXGI=
Subject key identifier: BB:E4:70:54:82:42:3D:67:A8:9D:A0:14:09:A9:11:0E:DD:8C:1D:95
Authority key identifier: F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
Certificate issuer: /CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Certificate serial: 01974CD6B675D89B4258CC6DB67E4943C93E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
Manifest number: 0F63
Signing time: Sun 08 Jun 2025 00:00:29 +0000
Manifest this update: Sun 08 Jun 2025 00:00:29 +0000
Manifest next update: Mon 09 Jun 2025 00:00:29 +0000
Files and hashes: 1: 1-DJywMMtsATwePh0uZ2poLfmOv0.crl (hash: boG5/QAe9LG8BccGijyxjGoZVRA2ZAfmGMo26mMlphI=)
2: xkD-bMrKpX5bvRCXR7n2flyNmqg.roa (hash: ANcTIXHVR2iM56VPGUlESg9hA4bfaEVpnPYR7NoEoeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:b6:75:d8:9b:42:58:cc:6d:b6:7e:49:43:c9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Validity
Not Before: Jun 8 00:00:29 2025 GMT
Not After : Jun 9 00:00:29 2025 GMT
Subject: CN=bbe4705482423d67a89da01409a9110edd8c1d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:34:bb:b0:74:60:e3:b6:78:b2:49:be:ec:
08:eb:fd:e1:68:df:40:30:5a:81:05:24:31:4b:fc:
f5:28:80:b7:d0:59:0d:75:d3:a1:c6:4f:69:3a:c5:
4d:9f:7d:ca:61:92:d1:22:bf:29:31:6b:f3:15:8a:
83:fa:d9:27:cb:4e:78:e5:68:96:ef:88:26:70:b7:
15:24:3c:68:2f:5d:be:2e:00:08:b4:5a:1d:8c:75:
42:1b:2e:a8:e3:01:05:51:4a:df:29:c9:c4:6f:8c:
b7:38:6a:1d:1a:80:d9:88:ac:56:00:91:e5:ad:ac:
9c:a4:3f:59:bc:98:9e:4b:49:5a:e8:a6:b4:b6:a3:
13:96:5a:23:48:e2:07:b2:d3:d9:df:ca:bf:cc:71:
ff:dc:d3:1c:0d:28:d9:82:3f:11:68:27:01:1d:73:
4b:6d:9e:11:7e:82:b1:43:02:08:ab:d1:7c:91:f0:
5d:4b:0c:03:3b:3c:99:1a:37:b6:5f:74:2d:89:99:
a9:c4:b9:c2:a7:db:65:e5:e4:81:48:84:d4:88:1d:
f1:ab:3a:63:e1:ec:5d:5e:98:b4:21:2b:f3:e9:dc:
7c:f7:7c:e8:dc:15:9f:1f:d6:aa:f0:bb:46:c4:d1:
50:da:07:fc:93:e5:2d:88:c2:14:fc:31:e5:e1:33:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E4:70:54:82:42:3D:67:A8:9D:A0:14:09:A9:11:0E:DD:8C:1D:95
X509v3 Authority Key Identifier:
keyid:F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7c:4d:cd:26:d9:4c:b2:07:a5:ec:df:4f:d6:18:9d:56:54:
34:24:48:41:bb:e3:ef:04:63:36:5e:7e:97:64:27:22:5b:15:
5f:b0:2a:c7:04:e2:01:77:2e:03:ce:5a:4f:3d:41:59:f7:a1:
e5:2b:7e:9d:49:29:10:08:e1:89:16:f2:7b:33:0b:ee:ff:b9:
1a:f4:a6:76:f9:e8:97:a9:20:db:19:fa:41:09:51:dd:d1:af:
70:94:2f:1f:f1:ce:a7:aa:59:39:1b:80:8a:48:ea:f6:b6:e6:
d0:15:d5:80:92:e6:81:e2:f8:05:fc:04:35:e2:21:0c:c1:a7:
26:00:3a:04:97:a8:58:d0:17:86:cb:3e:3a:c4:54:e0:74:0c:
bb:0a:74:6d:e6:49:b7:e1:af:d4:d0:48:93:dc:f4:1d:82:bb:
b2:51:78:af:9b:c9:c4:76:8d:44:13:70:ce:1c:78:cb:ac:1f:
06:bd:0a:ee:77:8e:1f:4c:e4:2a:a8:9a:fd:5a:fe:3e:cd:6e:
b2:98:16:1c:05:f1:9d:dc:0e:d1:a2:89:79:04:e2:fd:c3:f6:
f9:30:86:94:21:8e:ad:d7:cd:af:09:2d:c7:74:55:0c:e6:a6:
6d:06:e1:cb:2c:67:50:1d:13:e4:06:16:f2:72:9d:ed:11:a9:
48:1f:07:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:11:45 2025 by rpki-client