Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
File: 1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json)
Hash identifier: bwY2zuDkjjntOmX728BdWP5hMjTqD+bOcwM+HN2KJ7M=
Subject key identifier: 1D:EE:92:28:CE:9D:BF:FD:39:05:AB:31:30:D8:8D:E8:F4:61:B7:85
Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
Certificate issuer: /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Certificate serial: 019749311BD3F1EE77D6CFDB69EFAA16788C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
Manifest number: 1014
Signing time: Sat 07 Jun 2025 07:00:44 +0000
Manifest this update: Sat 07 Jun 2025 07:00:44 +0000
Manifest next update: Sun 08 Jun 2025 07:00:44 +0000
Files and hashes: 1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: e0xi42fT/Tbqzo33h/Fi/OzPRtShsB3UlyiuWhrdb5I=)
2: D-kvzPrAwGbNDxb_KzLw4lsFxes.roa (hash: JU5Ry1WiWCRnSvWFUZ6oaKSDfbBv9sPRmk3mHwJb9y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:1b:d3:f1:ee:77:d6:cf:db:69:ef:aa:16:78:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Validity
Not Before: Jun 7 07:00:44 2025 GMT
Not After : Jun 8 07:00:44 2025 GMT
Subject: CN=1dee9228ce9dbffd3905ab3130d88de8f461b785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1d:56:fa:d9:fd:ab:ab:de:2d:6b:dc:99:77:
ed:d4:af:0e:b9:f0:38:19:0a:9f:1b:1b:98:fb:52:
a2:c5:12:25:9d:47:26:af:42:23:92:17:fb:21:eb:
f2:df:41:3a:d6:62:a2:8f:3b:5b:37:25:65:2f:ad:
f6:e7:17:d9:9f:40:8d:54:db:4e:05:b6:9e:98:f0:
5b:4d:4c:1f:a9:82:71:02:0f:92:01:9d:cf:c0:91:
1c:7f:dd:2c:a1:71:66:b5:0b:9f:01:68:38:a6:d9:
3b:e1:76:82:58:df:af:83:6e:24:7a:b0:c1:98:a7:
8b:a3:b7:08:0f:43:2c:c2:b5:aa:79:ee:1a:ce:d4:
2f:4c:e1:4b:cb:47:e6:3e:7c:e6:e0:ec:82:5d:ab:
43:c6:20:fa:ed:45:3a:58:a5:7c:26:e4:33:84:0a:
2a:d0:48:87:53:b8:df:b0:f3:1d:fd:11:5f:a0:43:
cc:29:3e:88:f3:91:e1:9f:09:8e:d7:fb:b6:7c:e1:
5d:27:62:a7:7f:78:86:c4:dc:22:ee:55:36:88:ac:
30:b6:02:1a:0c:7d:19:cf:46:84:42:98:bf:db:f8:
87:a5:7a:60:30:a4:97:e2:6c:70:42:99:50:0b:97:
17:db:d8:c8:aa:e6:d1:e0:b6:64:ef:1f:04:1c:38:
2f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EE:92:28:CE:9D:BF:FD:39:05:AB:31:30:D8:8D:E8:F4:61:B7:85
X509v3 Authority Key Identifier:
keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e1:77:ff:a9:94:aa:c0:1a:09:bc:24:7a:d4:ac:7c:a7:44:
d5:9c:38:76:02:2f:18:04:57:da:13:7a:3b:7f:6b:92:65:07:
32:d3:36:fd:cd:1d:4a:46:34:bc:fb:d3:9f:24:55:9c:4b:b4:
1f:b5:3f:eb:43:01:71:33:e2:1d:6e:ca:49:67:9e:7d:e1:88:
19:cc:59:42:a8:61:16:c7:ca:1a:32:3a:cc:70:e6:8a:f7:3f:
9d:f6:2c:72:70:4c:0d:4b:68:68:8d:1f:98:9a:4a:30:53:8e:
a8:d8:cb:b1:cb:67:0c:0d:93:80:60:8f:af:d2:09:fd:d8:6e:
e2:56:55:c8:d5:7a:57:d2:fd:58:cb:21:5c:f3:fe:49:36:c8:
2b:6d:92:af:33:56:f7:8e:1f:30:5e:37:af:aa:b0:6c:22:0c:
01:ca:fb:56:f5:e9:d5:c3:a0:67:b5:15:9a:9c:4a:9e:58:f1:
29:23:48:eb:69:d3:ea:90:0e:b1:99:f4:44:aa:65:6f:a8:99:
48:34:11:c7:cd:d7:ad:66:43:32:61:f2:d6:b7:b0:90:11:02:
c1:f2:c8:c2:55:66:2e:06:48:fb:69:cd:64:39:44:46:3e:16:
1c:3e:55:c0:a7:70:b8:31:e1:e0:38:6c:88:29:a2:0a:0a:c7:
26:69:72:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:51:33 2025 by rpki-client