Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File: 1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier: UC4EMEaGTc0qYoJoX9ETNzgsjZlril3A0SJaMkyVYyM=
Subject key identifier: 62:DD:6D:6B:2E:32:13:98:B8:6D:0E:AD:1C:44:6E:6D:A8:31:A2:8F
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 019762F0F4C8E1749D1AD16619B20FEEB118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number: 0CFB
Signing time: Thu 12 Jun 2025 07:00:47 +0000
Manifest this update: Thu 12 Jun 2025 07:00:47 +0000
Manifest next update: Fri 13 Jun 2025 07:00:47 +0000
Files and hashes: 1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: LvoT7dGhVPbvnEZJhfINJwpTNHYi0JmN45rPFUOSWuo=)
2: X106OsUC0FAl9jkdnlr5gWlzbbQ.roa (hash: JYZSAqgEH1ZLu6PBGCZjtxMtu36xGzGi2+VOR9jTAy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:f0:f4:c8:e1:74:9d:1a:d1:66:19:b2:0f:ee:b1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: Jun 12 07:00:47 2025 GMT
Not After : Jun 13 07:00:47 2025 GMT
Subject: CN=62dd6d6b2e321398b86d0ead1c446e6da831a28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e2:ee:17:f6:b1:df:38:c8:3f:4a:17:e0:8d:
7c:90:a5:8f:f0:41:70:10:02:6d:60:f9:a7:c2:14:
25:60:76:00:1f:a8:be:fe:5f:53:56:fd:8b:e4:e7:
17:83:f7:0b:6f:d3:c2:9a:66:0f:7e:fe:12:6e:42:
dc:0a:e4:67:93:13:98:a6:b8:72:3c:dd:03:ed:a7:
40:7e:c0:43:06:28:71:a8:69:f4:a1:f3:ba:3c:4f:
e9:60:ce:33:42:57:02:2a:94:4d:72:3e:3a:e0:1c:
67:5a:f2:a1:47:c2:f8:96:ec:06:ac:34:fe:34:f3:
cd:98:14:4a:7a:2a:de:c4:90:9d:cd:83:ca:78:a3:
bb:d5:db:9a:ef:ac:fb:00:19:9f:73:89:53:6f:c1:
57:bf:b6:e8:e9:01:a2:35:5a:06:46:84:ba:77:fe:
b9:c5:24:fa:4c:34:db:2b:ce:67:cc:50:bb:86:ef:
41:86:39:f4:df:74:0f:73:2c:62:14:86:d1:06:98:
29:a1:35:da:2a:ba:44:c5:14:be:a0:6a:eb:bb:28:
67:56:d3:ff:6a:6b:ac:11:55:51:24:7d:e8:0d:c9:
7b:6e:0a:33:62:fc:33:88:5b:a1:74:e9:5a:ad:b7:
44:ad:0f:26:b8:ae:c7:ae:eb:42:38:75:cd:5e:4d:
56:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DD:6D:6B:2E:32:13:98:B8:6D:0E:AD:1C:44:6E:6D:A8:31:A2:8F
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:89:ac:a5:d2:26:d1:31:5d:58:6e:e4:7a:94:51:e3:93:90:
84:43:6c:b7:9d:1b:dc:31:df:ac:7e:af:14:77:59:42:2d:36:
86:0a:0d:0e:b6:fd:20:9b:db:d2:d5:ae:a9:29:a5:f9:f1:34:
1e:76:69:0f:86:76:d6:a2:25:97:3a:0a:f7:51:96:f2:94:0a:
e9:51:2f:48:a9:b9:fa:e0:28:24:d8:10:d7:f7:45:92:9c:a6:
9f:47:1b:d8:ee:9f:a6:01:fd:60:ee:a2:7e:ae:3b:7d:74:95:
bb:fe:0c:0f:49:03:d2:a7:46:93:1c:14:dd:b8:2a:7a:3a:87:
07:7e:a2:70:9a:13:e6:f4:7b:46:3c:69:b8:03:2b:f1:58:f4:
3b:13:76:ed:8a:09:85:a3:1a:39:28:45:99:97:8d:b1:a0:55:
0b:ff:ca:c2:83:27:7c:00:ed:fb:51:4a:4f:ea:e1:ee:8c:ee:
63:30:f4:93:fe:f0:50:dd:1c:4f:3e:da:67:b8:c6:db:b5:8f:
21:0c:18:4a:72:12:06:87:de:d6:f0:37:99:86:11:97:10:ea:
7b:97:5d:ad:0f:24:5c:03:93:fd:14:28:1c:5f:09:95:c1:43:
de:f2:94:82:0a:94:68:b6:ef:94:8b:9d:a2:a5:cb:18:ab:c8:
f6:d8:00:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:04:45 2025 by rpki-client