Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
File: 1pFUReDotwOKo9ekUX6Qtpx_cgo.mft (raw, json)
Hash identifier: BxLt8mCTACFxQX8nFETtea780WFEKcPIsZ42LIZU0zs=
Subject key identifier: 83:32:1F:A3:7E:8A:55:CA:82:E1:66:EE:3B:BE:4E:74:2C:DD:62:F5
Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Certificate serial: 0197499F0272CCAFB99F7287948167B77EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
Manifest number: 07B4
Signing time: Sat 07 Jun 2025 09:00:47 +0000
Manifest this update: Sat 07 Jun 2025 09:00:47 +0000
Manifest next update: Sun 08 Jun 2025 09:00:47 +0000
Files and hashes: 1: 1pFUReDotwOKo9ekUX6Qtpx_cgo.crl (hash: djLJn3hQZtMeC8sTU/FSv5cIXnvBpcC87ALvjgN6TLg=)
2: JAyc3IZZlhE05kFH0gGLLaWCHBs.roa (hash: BPAa+FA4FmMjmalDh9g/vYV5efTsypi7ozqO1bsspFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:02:72:cc:af:b9:9f:72:87:94:81:67:b7:7e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Validity
Not Before: Jun 7 09:00:47 2025 GMT
Not After : Jun 8 09:00:47 2025 GMT
Subject: CN=83321fa37e8a55ca82e166ee3bbe4e742cdd62f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8e:69:c1:77:48:cc:ee:66:25:be:21:8f:ad:
8d:2a:b7:dc:82:b6:22:e5:dd:c5:64:e5:b5:25:ee:
74:6a:85:10:74:bb:0d:a1:ac:f6:63:00:8e:30:88:
aa:10:d0:0c:0d:47:21:d9:d7:8a:bf:c2:f3:29:01:
2d:c1:f3:2c:c1:61:87:97:52:ab:17:e7:65:5b:54:
c8:9f:8c:c6:53:a1:a3:a9:ec:eb:db:ee:bf:92:43:
e2:49:34:d7:b5:0a:fe:a0:6b:19:64:0a:ef:3f:f3:
85:49:d2:d5:bf:52:a4:9a:67:4f:54:7f:21:92:b0:
6c:38:fb:9a:c1:65:6c:05:f6:22:56:92:32:fb:36:
0b:8e:3f:27:80:09:2f:a4:e2:71:c8:77:29:71:eb:
5e:d6:13:44:73:1d:af:1b:b0:81:40:aa:20:0e:26:
15:87:b2:67:31:ea:4b:3a:f4:99:43:ca:bc:e1:33:
45:c4:fc:9b:48:38:8a:cf:d4:56:a0:d5:39:44:e4:
30:1d:7d:41:59:1a:74:de:00:8f:be:7a:8c:80:2e:
38:dd:79:c5:de:ee:9f:f4:9d:13:41:9f:40:2c:0e:
e0:c2:86:91:76:c5:b5:5a:4b:b3:56:18:cb:a2:47:
22:b4:f5:af:8f:4f:14:69:70:93:9a:13:e7:99:62:
58:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:32:1F:A3:7E:8A:55:CA:82:E1:66:EE:3B:BE:4E:74:2C:DD:62:F5
X509v3 Authority Key Identifier:
keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:6e:6c:61:d6:c0:62:84:f2:42:2d:9b:84:02:5b:25:59:00:
e3:95:c3:bb:8d:5f:ad:08:7a:ee:4a:24:26:1c:74:68:79:ba:
9c:59:5e:2e:f8:c3:3b:58:3b:1e:d0:eb:8d:5c:98:9b:47:70:
37:fe:af:58:e0:bf:a7:0e:85:da:78:a9:2c:ff:ab:bc:6d:a0:
ce:a3:85:6b:51:00:3e:26:e2:12:cd:fa:99:d9:e5:66:c4:78:
2a:41:81:25:21:88:f1:c5:85:68:03:8e:56:77:92:ce:89:bd:
44:12:9f:e7:1c:6e:d6:ec:e8:42:6c:57:2d:47:05:5f:88:89:
2e:c8:02:ba:16:f0:ac:d5:0a:e6:03:bd:42:74:b2:e5:1e:82:
dc:bb:26:a6:09:10:fc:8c:70:90:04:d4:50:ee:53:d0:4d:bd:
66:6f:1f:fa:ae:4f:1a:c5:49:a4:8a:ff:b9:73:ef:69:f3:cb:
34:ee:b2:d6:fa:74:ca:e7:3d:28:92:ef:ad:82:bf:5f:50:20:
88:a8:68:5e:c3:37:ba:6f:ef:ee:b3:ee:c7:bf:f2:4b:06:d0:
da:16:50:92:d2:5e:d4:91:50:5a:3e:d1:1a:a0:5d:e0:4b:8b:
fb:df:93:95:84:6c:ca:b4:0a:0b:8a:1a:01:fb:74:89:7a:83:
d6:b1:29:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:29:42 2025 by rpki-client