Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
File: 1nXJVO45yR5SX2izBxygV41qW64.mft (raw, json)
Hash identifier: 0amAW7J+Lk6GJ3+8Hh1P5mdAFwu1RMCW7kASgKssf6w=
Subject key identifier: 05:89:6E:2C:E9:E7:34:2F:70:0C:1E:1C:AC:3A:50:0E:28:7E:8D:B9
Authority key identifier: D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
Certificate issuer: /CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Certificate serial: 0197488C0ABC0ABCA1B980F6482E044EE927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
Manifest number: 1578
Signing time: Sat 07 Jun 2025 04:00:26 +0000
Manifest this update: Sat 07 Jun 2025 04:00:26 +0000
Manifest next update: Sun 08 Jun 2025 04:00:26 +0000
Files and hashes: 1: 1nXJVO45yR5SX2izBxygV41qW64.crl (hash: N/9PLHYpVZ+H5imPdf3QIX9+AuJWhZf4TUn+cQUxfIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:0a:bc:0a:bc:a1:b9:80:f6:48:2e:04:4e:e9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Validity
Not Before: Jun 7 04:00:26 2025 GMT
Not After : Jun 8 04:00:26 2025 GMT
Subject: CN=05896e2ce9e7342f700c1e1cac3a500e287e8db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:ec:58:3f:11:8e:0d:84:90:18:49:6e:e7:
4d:eb:e2:0a:e8:e3:d3:00:b0:55:f7:47:72:0c:ab:
ca:01:d1:9c:6a:55:4c:22:44:e8:7c:18:48:1f:c7:
97:c0:0a:9e:a7:eb:49:c9:65:77:ac:db:82:86:42:
2f:cc:57:1e:81:e8:65:e2:76:39:d3:53:2c:a7:f6:
57:64:d2:d5:7a:98:e0:f8:05:93:b8:e9:2c:39:cd:
6a:e8:63:11:6f:e7:a1:c1:f5:65:4c:17:47:40:f5:
6e:78:5c:32:ac:bf:02:b4:7a:4d:f8:9a:55:54:41:
05:67:fb:db:d6:97:8d:0a:cf:d4:4a:78:8e:28:a3:
c8:b7:fc:83:64:b1:d9:03:15:a2:9f:ae:75:75:c6:
35:39:93:fb:ac:b7:20:5d:b8:14:0f:67:92:cc:bf:
c6:29:51:8a:77:50:e0:50:1c:dc:58:b3:95:2f:13:
12:42:d1:61:9c:96:f0:3f:06:e9:54:75:58:33:34:
39:9b:7f:db:a9:49:8b:11:c3:0f:e8:b6:82:78:39:
f1:88:02:d1:76:b6:4c:c5:e6:0f:fa:33:64:16:d3:
0a:ae:97:e5:ae:73:bd:ce:fd:f0:da:b4:7b:29:01:
e3:eb:50:56:bf:33:64:f2:5f:6c:e2:dc:72:a5:54:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:89:6E:2C:E9:E7:34:2F:70:0C:1E:1C:AC:3A:50:0E:28:7E:8D:B9
X509v3 Authority Key Identifier:
keyid:D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8b:02:02:e6:55:ee:38:d4:b2:f8:9f:e8:3d:d4:3d:b8:37:
0a:cc:73:fa:2c:2f:41:b4:2d:ff:b3:79:f8:d9:67:f8:9c:76:
25:90:41:e7:37:83:94:a5:70:94:cb:e8:23:96:49:8d:db:1d:
93:40:03:19:44:43:19:fe:40:ed:bf:77:92:42:dd:fb:30:ff:
53:99:6f:9a:7c:2a:4e:99:14:e7:31:0c:8a:6e:a0:17:20:a1:
20:29:57:b5:ad:26:04:5e:ca:d1:91:28:69:6f:e3:11:24:d7:
69:6c:99:24:4d:0f:28:95:7a:5f:1a:00:df:0f:98:7b:05:d5:
00:7a:1a:76:07:93:38:b3:15:06:2d:21:8a:76:f8:ca:16:85:
92:4e:93:38:3b:41:ca:4f:55:f8:62:ce:e0:25:61:46:c6:f6:
6c:e7:59:cc:a6:66:e3:e7:c6:2c:12:e9:24:00:2a:bf:72:ab:
42:cd:52:96:5b:e8:d6:0a:5a:0f:5d:38:58:ff:ba:aa:5d:73:
89:6a:0d:dc:ec:45:0a:47:b7:2f:a6:b9:35:7d:2f:c2:f3:83:
3f:a4:9b:62:94:32:6e:2b:85:75:0c:63:8c:26:e7:88:84:ac:
15:9b:5a:ef:cc:be:1f:07:0d:d7:74:e9:02:46:cf:98:ab:ee:
56:c4:c8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:42:58 2025 by rpki-client