Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
File: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft (raw, json)
Hash identifier: yN5jEb4zwZNdjpBonIFWRoRmF+sRcuEPM6MhmC/4O9c=
Subject key identifier: 25:D1:55:7E:F4:5A:09:42:F2:94:F5:D2:AD:0C:B4:6A:50:BB:82:E6
Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
Certificate issuer: /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Certificate serial: 01974A0CF2147D66ADB652178690521D8AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
Manifest number: 1589
Signing time: Sat 07 Jun 2025 11:00:51 +0000
Manifest this update: Sat 07 Jun 2025 11:00:51 +0000
Manifest next update: Sun 08 Jun 2025 11:00:51 +0000
Files and hashes: 1: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl (hash: I9tD1C9OPXYCownoABijLJElgxJC1C4xDH6cNXnj/hU=)
2: SRL2XQIBoKefODwi32v5f2eOog8.roa (hash: Dn7L+HcQU8DFcaAaO+5zWbM9Yhm50QvkCe2vCWCUn7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:f2:14:7d:66:ad:b6:52:17:86:90:52:1d:8a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Validity
Not Before: Jun 7 11:00:51 2025 GMT
Not After : Jun 8 11:00:51 2025 GMT
Subject: CN=25d1557ef45a0942f294f5d2ad0cb46a50bb82e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:bd:af:e7:9e:3e:8c:30:7b:a5:3f:20:a4:
7e:46:eb:8c:be:7d:67:da:d8:d1:bb:bc:ef:09:bb:
48:26:59:d4:c4:76:de:28:15:19:72:ab:52:f8:cb:
47:89:f1:91:12:e0:12:02:56:5c:c1:7d:cf:7a:49:
25:fb:2d:cf:18:61:23:63:1f:8c:5e:3b:16:84:7e:
f3:d3:3d:f5:15:8a:23:6c:59:3f:83:d3:f8:1a:73:
fc:fc:7c:9a:43:c6:40:6f:8c:7c:bb:b1:44:fe:f5:
7e:57:59:ce:e2:c6:c1:c1:3c:9a:c3:e9:a2:28:da:
96:b9:44:d8:a6:93:8a:b0:94:51:b1:a0:60:bb:31:
53:25:d1:dc:f0:cb:72:63:d2:00:3e:d0:43:e1:21:
41:0d:50:78:ff:e0:99:f7:19:77:ba:4a:a5:1a:2d:
6d:5d:44:dd:98:e8:49:69:50:b2:45:2d:27:ca:a9:
6a:22:b7:f5:3b:ae:1e:5a:d4:d2:89:24:0c:cf:31:
f2:2e:be:16:51:be:06:f2:6c:c7:31:45:29:1f:5e:
76:54:d2:2b:f9:3f:84:85:6a:e5:83:f8:fe:3a:60:
a4:3b:c9:02:92:7e:b4:62:91:3d:f2:53:83:09:fb:
2c:3a:70:70:26:58:1b:06:bb:bb:38:fd:4e:fa:c8:
c3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D1:55:7E:F4:5A:09:42:F2:94:F5:D2:AD:0C:B4:6A:50:BB:82:E6
X509v3 Authority Key Identifier:
keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e5:11:50:d1:bf:9c:84:04:ef:61:ca:97:cf:63:60:60:34:
a3:d1:c1:f5:bc:de:3d:c1:82:d4:9c:b7:57:85:66:7e:25:2e:
80:a4:ab:fb:6e:69:57:04:8b:7d:af:65:20:31:06:62:51:cc:
67:c7:a2:d5:d1:a8:42:96:e5:eb:f8:0e:fb:7b:21:ce:67:ec:
78:15:cd:ce:2f:cb:55:da:bf:3a:0f:f8:76:fa:31:60:c3:27:
89:b9:67:0a:fb:c3:20:c7:8c:32:4d:9c:4f:26:5a:cc:b0:bc:
09:e3:1a:bd:78:c4:77:87:49:38:4a:e2:eb:7b:40:7e:8c:bf:
36:86:13:01:aa:82:30:0d:10:c8:d5:b7:a2:17:3f:c7:52:51:
ec:22:c6:9a:29:b3:ef:53:1c:8a:0b:53:3e:80:53:c5:33:ea:
a8:76:09:c5:ab:fd:3c:7a:09:51:43:c0:12:df:48:3b:d2:59:
08:1b:ec:e3:a4:ef:95:2c:a6:5d:51:c2:3d:a3:18:0c:ca:f4:
27:81:77:d4:6f:ec:f9:c6:d4:7b:b3:c4:3d:09:1c:fb:42:ec:
ac:26:a9:da:8e:82:cc:51:d7:00:2c:4c:27:77:61:a1:9e:fd:
e5:28:68:19:72:f8:cd:05:0e:c3:69:41:dd:ba:6f:59:b7:b0:
18:4a:e4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:37:21 2025 by rpki-client