Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier: EmR90dHJvsjxKvtRSoAaAEl9f7mcRZePlHIZs9Oydeo=
Subject key identifier: D7:EC:09:BA:84:A0:E2:7B:CE:47:53:C7:90:31:AA:FB:ED:3D:85:DB
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial: 0197C838C8A52BD1F11F30D7261FB8423E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number: 1551
Signing time: Tue 01 Jul 2025 23:00:53 +0000
Manifest this update: Tue 01 Jul 2025 23:00:53 +0000
Manifest next update: Wed 02 Jul 2025 23:00:53 +0000
Files and hashes: 1: 6wW68rpEYT5imOHdAJC8iqYgH-8.roa (hash: 2OyXhc87+DnhsUi/Ak2VDrIMxn2fa0IaWGuzCLcLykQ=)
2: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: p+I4NnmNDiz9jF84irp25dm8keYoAvePQ17S0l9L3EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:38:c8:a5:2b:d1:f1:1f:30:d7:26:1f:b8:42:3e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
Validity
Not Before: Jul 1 23:00:53 2025 GMT
Not After : Jul 2 23:00:53 2025 GMT
Subject: CN=d7ec09ba84a0e27bce4753c79031aafbed3d85db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:c2:fc:ab:9b:a9:7f:32:0b:34:2b:ed:d0:
ac:f0:b9:8e:4f:51:9f:7f:9c:51:53:c8:07:5d:d2:
19:51:b2:fe:af:06:06:e9:d7:e2:e7:1f:f7:de:b2:
1d:c3:68:37:26:b0:f0:9e:63:0c:84:27:9d:77:6f:
16:76:e6:61:08:e8:43:b1:f5:7d:76:d8:af:c4:34:
d0:83:11:59:d1:48:86:f7:a3:74:d6:40:5b:c3:6c:
93:42:f9:b8:99:f6:c9:de:e2:fd:d5:36:ef:19:a4:
24:9f:68:b2:eb:d4:c0:65:85:93:37:4c:eb:65:aa:
d4:dc:52:6d:71:db:51:6c:86:59:7e:4e:a8:56:65:
bc:d0:96:36:a5:a9:73:f6:e9:ee:5d:6a:64:1d:19:
c9:0d:c6:04:2c:a5:ab:37:df:27:0e:61:c4:0f:4d:
e3:65:d7:d4:a2:f9:30:8f:4a:43:96:49:5c:b0:1c:
13:a8:f7:61:00:b6:22:23:a8:e3:87:af:1c:a0:26:
7e:8d:49:56:a7:5e:26:5f:8e:bd:91:22:6e:d4:53:
4e:2d:89:c2:05:51:0d:ab:87:a3:09:99:d6:c5:f0:
72:c3:d6:47:4e:b3:58:c7:9f:82:df:0a:13:77:c6:
29:65:71:df:bf:fe:4f:3e:f5:53:7e:81:09:16:1f:
e7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EC:09:BA:84:A0:E2:7B:CE:47:53:C7:90:31:AA:FB:ED:3D:85:DB
X509v3 Authority Key Identifier:
keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3d:43:cb:81:02:46:46:c4:c6:8e:15:51:f8:ad:ac:c9:de:
61:b2:71:e5:3f:c5:fb:82:9e:5b:b8:29:fd:a0:01:15:4b:ec:
09:c7:21:38:2f:00:61:c0:8a:f0:7d:63:4b:2e:86:4e:36:21:
82:b5:7a:73:18:10:85:aa:fa:11:1a:a4:f2:a5:fe:e8:36:3e:
20:6b:9e:ec:61:dc:b8:3e:8c:c3:2f:f7:18:dc:9f:c9:ea:19:
ae:6c:49:12:96:26:d3:67:48:a1:2e:db:22:8f:6a:65:6e:13:
fc:14:af:fb:55:d8:4f:4c:69:7b:f6:ba:1e:71:3c:68:09:f7:
61:d1:ff:b6:de:24:03:0e:7c:c4:9c:0d:56:f6:52:3f:f4:85:
f8:8f:b0:85:ac:aa:1b:cb:68:f7:92:e8:c5:96:24:09:ed:6a:
7c:ef:cf:49:1c:73:c2:8a:52:4b:20:5a:6c:66:7b:62:68:3f:
64:39:e0:2f:81:b3:8e:96:db:8e:13:ee:5a:8a:2d:b4:43:35:
29:89:b7:37:67:1f:19:ea:d3:ae:a7:4d:6c:22:4b:97:1a:41:
50:e8:0e:ea:48:91:14:c4:eb:8c:0d:92:3e:14:a3:1d:b1:4c:
ad:de:5f:74:32:aa:c1:28:52:95:a6:f6:6e:ca:88:13:a1:8c:
97:3a:fb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 02:49:50 2025 by rpki-client