
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
File: 1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft (raw, json)
Hash identifier: wFrv5tTw2XbokRSMwZLRH23kuxalbLpWYcTJMQNJdpk=
Subject key identifier: 7F:FA:F1:46:88:FC:67:BE:54:45:08:F0:80:AE:97:84:20:96:90:DF
Authority key identifier: F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
Certificate issuer: /CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Certificate serial: 01975E0165F592C55A796D943FCDD3F25431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
Manifest number: 1589
Signing time: Wed 11 Jun 2025 08:00:39 +0000
Manifest this update: Wed 11 Jun 2025 08:00:39 +0000
Manifest next update: Thu 12 Jun 2025 08:00:39 +0000
Files and hashes: 1: 1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl (hash: OA4BCvG8Em72u+AD+8mdTtwajOsPfOJNVlYlpZlHIlM=)
2: pnLsiL6edNAl7saH4pXx8QzVPbg.roa (hash: 8OC0V00+GEMst/Tun4ncEnTTBHaJJRqRf9fvQjD99nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:01:65:f5:92:c5:5a:79:6d:94:3f:cd:d3:f2:54:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Validity
Not Before: Jun 11 08:00:39 2025 GMT
Not After : Jun 12 08:00:39 2025 GMT
Subject: CN=7ffaf14688fc67be544508f080ae9784209690df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:93:2d:bc:ed:63:e3:87:cb:55:53:4b:3d:6a:
b8:0a:ff:09:ca:ab:ad:b7:5b:13:dd:1e:ed:02:8d:
4a:df:96:1f:45:0b:95:f8:2b:25:c8:b6:8f:95:5d:
1a:f7:38:8b:87:20:7a:3e:92:5a:bb:e5:09:15:86:
60:b9:97:0d:ee:4d:ea:f9:6a:4a:35:32:e9:99:fa:
e8:23:90:26:5e:a7:78:32:83:18:e2:c2:2a:5d:3a:
1c:a9:ae:9f:a8:40:86:e9:64:7b:b9:84:ee:d1:21:
58:83:84:c5:df:be:bc:c5:48:d4:ae:11:74:83:60:
d7:b1:f0:b4:24:48:79:01:b6:a8:11:77:43:c1:ef:
2a:68:87:14:59:92:cc:e6:26:65:3d:ad:1b:11:1b:
bd:e7:ec:4e:fd:77:91:1d:21:59:01:9a:d2:07:0b:
2a:32:0d:d3:42:b4:10:49:7c:e6:bc:58:48:54:4b:
d0:c7:0b:f5:eb:f1:7e:83:6b:ea:56:13:6a:f6:a0:
45:30:06:fe:20:01:d8:ae:da:41:45:26:a2:0c:fe:
42:e3:1b:cc:7a:25:a5:55:44:c8:db:01:44:2d:33:
a8:f1:f1:a4:fe:46:f0:f6:2a:9b:04:c7:a1:e9:3a:
a1:12:c7:08:e7:9e:5b:17:16:b2:ea:83:72:1a:75:
31:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FA:F1:46:88:FC:67:BE:54:45:08:F0:80:AE:97:84:20:96:90:DF
X509v3 Authority Key Identifier:
keyid:F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e6:0a:5f:22:0b:fd:e5:b8:90:b7:db:70:58:a4:37:ad:b4:
d9:f0:0f:93:5f:f1:7a:d8:da:00:1f:c7:0a:e7:d5:37:68:0c:
7e:1a:a3:29:1e:9a:6f:c0:ac:9a:f4:46:de:5b:2b:06:a3:1a:
96:b4:99:0f:19:41:70:d5:ef:15:05:71:c4:59:d4:5b:aa:3a:
29:1e:79:42:35:e2:40:8b:4a:a4:8e:80:77:93:ce:79:a0:e2:
84:4c:49:26:c6:58:63:2d:b5:90:ac:3c:86:cb:32:44:e2:58:
15:0e:11:b5:c3:5d:76:98:62:b5:25:0e:e1:6e:39:7e:71:16:
a3:22:17:e7:e5:27:85:24:e6:65:39:f4:d8:be:aa:ec:b9:74:
9d:00:5c:db:73:f2:37:2f:d5:90:a2:65:45:96:bc:47:10:b6:
ee:12:9f:a9:fc:6e:1c:7d:7d:70:dc:9b:37:8b:63:88:8b:d3:
09:1c:6a:be:56:24:cb:e8:48:e2:96:3e:30:5a:8f:2e:9f:94:
d6:02:f2:d1:9c:dc:ab:66:bf:43:97:4c:6f:04:34:ca:89:76:
a4:1c:ac:22:a8:47:fc:d6:b6:22:cc:82:c9:d7:89:91:3b:70:
7d:d2:28:6b:c5:35:fd:67:02:5d:ed:36:ae:cc:8c:47:70:de:
95:21:44:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:26:10 2025 by rpki-client