Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
File: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json)
Hash identifier: /pWvwxo70atINBEaOVGWYxKNMlB5r93cjCG5jykkdt4=
Subject key identifier: FA:95:9E:72:B9:D0:5E:2A:EE:84:85:05:43:BD:C1:0B:D4:68:B8:7D
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial: 019749D61CBA39070916E33C07B9F7C2944C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
Manifest number: 0847
Signing time: Sat 07 Jun 2025 10:00:58 +0000
Manifest this update: Sat 07 Jun 2025 10:00:58 +0000
Manifest next update: Sun 08 Jun 2025 10:00:58 +0000
Files and hashes: 1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: uJlWSCfzfLEBJADqJouo7HYx1ilZPMYfspB1/cfNeKQ=)
2: 9z9dKpnx6EzUcHVGNf_uGpVw9Os.roa (hash: a0dVE6vpgZW3UUjOxu/nfSbGxvoPx4y2RaBLkZkeRbc=)
3: NAkfZdC-lHIooI3gKnWXiaH-HsE.roa (hash: w3/vlIu5NjwEAa3XQiOFjmWkJL3BENVNbQUqUr266qk=)
4: tHjmQ9NOKNWbyApXtXSEVz3gkFM.roa (hash: SBZ1boxaRQZqnvXhV5a0MuSyAE629IVLf7UqxBja6yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:1c:ba:39:07:09:16:e3:3c:07:b9:f7:c2:94:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Validity
Not Before: Jun 7 10:00:58 2025 GMT
Not After : Jun 8 10:00:58 2025 GMT
Subject: CN=fa959e72b9d05e2aee84850543bdc10bd468b87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:06:a9:68:2d:64:84:49:73:f6:c4:c6:17:ab:
2a:29:12:41:63:8a:4e:e8:8b:17:9e:fe:ad:62:e9:
78:82:ef:f7:95:38:ea:19:a9:10:d3:81:b0:d9:2c:
89:ef:ff:92:c5:ac:8a:8f:54:a5:ff:75:fe:bd:7c:
a5:32:76:6a:98:41:f0:78:18:d3:77:a1:f1:92:cf:
22:4e:52:21:fc:14:87:1e:1d:91:37:0e:71:b0:bd:
ae:d6:1b:26:57:3a:24:8a:a9:0e:55:64:3b:95:53:
06:92:df:04:06:3a:10:e1:cc:d3:e0:34:57:6b:33:
3b:43:cd:0c:32:d4:09:5a:c2:16:95:ea:11:4b:34:
22:ae:d8:c8:14:6c:cd:5b:79:41:0b:06:c4:41:17:
07:df:c2:11:f7:c7:55:27:d9:34:52:82:09:b6:4a:
8f:bf:c3:aa:36:0f:3c:0c:4e:74:67:d3:9b:af:f6:
46:15:18:b1:a1:a5:51:5f:51:18:6d:f4:28:53:a5:
71:f7:b0:28:12:75:cb:62:97:b9:bc:8a:b3:aa:b2:
18:14:b3:d4:2b:83:1c:f9:0d:75:93:b0:e1:88:ea:
6e:74:26:53:27:83:74:2a:45:37:be:34:be:b1:41:
7f:87:34:d6:a1:46:da:a8:de:04:b1:95:62:25:2b:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:95:9E:72:B9:D0:5E:2A:EE:84:85:05:43:BD:C1:0B:D4:68:B8:7D
X509v3 Authority Key Identifier:
keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:89:11:a9:3f:d9:d0:3f:c4:19:f2:5b:65:30:e1:5b:7a:4f:
64:d8:39:7d:c2:a0:1a:20:94:b3:c4:b5:25:e6:e8:9a:75:6c:
c8:b1:83:20:93:37:2c:48:c5:02:89:41:13:d8:82:4f:d6:e9:
1b:cb:12:76:68:58:83:f0:c9:59:0b:0b:7c:3e:46:97:16:4c:
09:3a:ce:98:81:a4:26:ea:53:7b:43:2f:25:d2:e5:d8:fe:7d:
da:86:6f:67:d2:77:29:e8:21:b7:c1:fd:93:68:11:68:86:56:
d6:41:39:49:3d:1a:37:6b:67:ec:37:0f:be:81:99:eb:6c:30:
c0:eb:01:e9:74:f3:ce:27:87:97:ef:97:b6:db:5a:d7:fe:2f:
97:2c:3c:8f:01:b0:d2:07:c1:76:60:99:95:77:df:d5:00:04:
47:f9:5a:f2:5f:e8:83:46:68:f4:37:c3:b9:b0:c1:e3:c2:f6:
70:48:7b:a0:ab:42:93:1b:17:7b:f2:fc:db:cb:97:15:b9:40:
a3:81:e5:ea:95:e9:40:f9:a0:81:df:de:43:4d:ab:e5:dd:0b:
22:ce:55:02:78:5f:a8:d1:34:18:9c:92:4b:e1:09:10:38:9c:
81:96:e4:a8:6f:c0:c5:4d:90:3f:d3:37:71:c1:f6:2a:42:fe:
3f:a1:e5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:30:08 2025 by rpki-client