Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
File: md1vCIIq4LpQVFQkVpI_r5BA9dA.mft (raw, json)
Hash identifier: vqKW7sq7KWRhkR3k7PbpGA83MOy8BocDbCLa1FKDj9I=
Subject key identifier: 04:27:9F:A2:66:0A:CF:4F:C6:CC:7B:14:B9:74:E9:72:86:62:04:41
Authority key identifier: 99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
Certificate issuer: /CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Certificate serial: 01974742964EEE7B5973F69566A1200014AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
Manifest number: 0F66
Signing time: Fri 06 Jun 2025 22:00:35 +0000
Manifest this update: Fri 06 Jun 2025 22:00:35 +0000
Manifest next update: Sat 07 Jun 2025 22:00:35 +0000
Files and hashes: 1: NUWfScDSH56OaOCaPfBblPu0Ydg.roa (hash: a4F0KmJ+v3pAeFAh9qDTsIqvwa1PoPI9PowXceZRGfg=)
2: md1vCIIq4LpQVFQkVpI_r5BA9dA.crl (hash: psONVeHlj4fdZTXSQuBA/RY2fPUFCs3nzgyRQ+BnXSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:96:4e:ee:7b:59:73:f6:95:66:a1:20:00:14:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Validity
Not Before: Jun 6 22:00:35 2025 GMT
Not After : Jun 7 22:00:35 2025 GMT
Subject: CN=04279fa2660acf4fc6cc7b14b974e97286620441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:de:b4:b0:54:3c:2a:34:76:5c:f0:c5:39:96:
62:05:7e:dc:7b:25:39:3b:99:53:bd:63:9c:c0:15:
d6:92:62:83:38:ef:38:e5:57:7b:3b:9d:ab:d5:4b:
ef:31:0c:77:27:c7:5e:ce:d5:2d:da:dd:30:96:46:
03:e3:3d:01:a2:29:db:07:9c:71:62:3d:d5:6e:a6:
8a:8c:bd:f3:84:ea:20:18:95:3f:27:33:96:8c:94:
b2:ea:67:c8:a0:05:31:b0:22:f6:db:c6:6c:3e:ee:
e5:af:2a:5c:94:bf:9e:59:49:08:89:02:58:f2:5a:
85:9b:de:39:ee:45:2f:3d:ee:d1:52:ec:f8:b3:33:
a9:fa:50:df:b6:5b:80:67:54:d1:0d:87:c8:1f:1d:
af:d4:39:2d:ff:67:f5:a3:74:b8:af:df:1d:f6:61:
39:9c:25:c8:dd:c6:0a:9e:90:6f:b4:e9:88:3f:b6:
15:27:80:b9:58:0f:48:db:b9:ca:9c:34:4f:ea:ff:
d0:36:59:86:7f:62:ef:fa:8f:10:c1:cb:05:b4:72:
9d:42:25:63:8d:df:e9:ab:54:77:4f:5b:9a:ef:0d:
b9:5c:43:d7:fd:ea:ea:a2:fa:dc:f3:88:fe:aa:d2:
6b:19:3d:fb:70:8b:8c:f4:ff:69:57:85:7b:92:09:
22:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:27:9F:A2:66:0A:CF:4F:C6:CC:7B:14:B9:74:E9:72:86:62:04:41
X509v3 Authority Key Identifier:
keyid:99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b6:ba:91:2a:29:5c:6c:cd:36:62:fe:a0:15:8f:0b:eb:61:
1c:6d:88:2d:55:83:7c:47:d8:41:ac:e7:9b:4f:f2:df:a4:16:
e4:9f:bb:93:71:62:9f:ca:a5:6e:02:4d:23:cd:00:59:90:c6:
80:d9:c4:99:a6:c8:ab:ac:ba:0f:be:1d:f3:1a:28:2a:45:d2:
f7:30:b2:65:d0:e6:0e:07:e9:d9:38:b7:1b:e6:97:4d:99:da:
ba:08:1a:07:ca:ca:27:13:c6:ba:8f:92:58:81:46:67:14:52:
a5:db:8c:1a:ae:2f:8f:65:76:0f:50:ba:22:e6:73:39:a1:26:
f9:09:6a:a6:0f:20:39:83:c6:22:73:a1:2f:05:5e:12:f9:5e:
72:fe:81:53:c0:be:29:74:9c:be:7c:ee:5b:d7:1a:31:75:96:
92:ea:d6:55:d2:85:41:10:dd:bc:a2:14:77:45:12:86:60:27:
be:f5:85:17:fe:7c:c8:00:d6:21:a7:63:d2:cf:f2:37:8b:92:
21:58:09:11:3c:0f:af:8a:93:9f:86:9a:9b:a2:b3:22:13:c6:
32:83:bb:7f:51:2c:53:ad:ca:c3:e7:0b:6b:a2:57:c8:8c:c5:
42:bf:bb:ae:22:2a:8b:97:a4:f4:29:06:c9:b1:76:94:6c:f4:
70:0a:32:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:01:28 2025 by rpki-client