Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
File: a1Y13TgCFaA8kwfaViBsVms4o88.mft (raw, json)
Hash identifier: kmt2y+BFcZhZhjwcZFjn3pOqCjx3IjpbD5fTX7PmzJo=
Subject key identifier: 8D:39:5B:15:70:1D:3F:80:AE:97:4D:2B:33:7D:F8:7E:30:D9:AC:E7
Authority key identifier: 6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF
Certificate issuer: /CN=6b5635dd380215a03c9307da56206c566b38a3cf
Certificate serial: 0197488D31BEB399102D53255268837226D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
Manifest number: 12B7
Signing time: Sat 07 Jun 2025 04:01:41 +0000
Manifest this update: Sat 07 Jun 2025 04:01:41 +0000
Manifest next update: Sun 08 Jun 2025 04:01:41 +0000
Files and hashes: 1: a1Y13TgCFaA8kwfaViBsVms4o88.crl (hash: 5p0kjDmr1JW3elCnlKoN7+hyAGUNuT41S6LTXq++3rA=)
2: pXEOVL3s29ntjLGWnEad02SClcY.roa (hash: 5uijVm/LhBI/XgHLC1W0ZRQPeN6iEyHoyVbJwCUVIKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:31:be:b3:99:10:2d:53:25:52:68:83:72:26:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5635dd380215a03c9307da56206c566b38a3cf
Validity
Not Before: Jun 7 04:01:41 2025 GMT
Not After : Jun 8 04:01:41 2025 GMT
Subject: CN=8d395b15701d3f80ae974d2b337df87e30d9ace7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:60:9a:f6:da:8a:71:52:bf:8f:c5:a9:4d:
41:36:45:95:58:e8:77:82:96:9a:66:09:3c:a8:52:
10:6f:9e:68:93:4e:f4:31:1b:8e:4c:fd:79:cd:f9:
25:88:54:ed:5c:8d:ce:26:f9:0f:ef:e4:0d:49:50:
73:4b:c3:ea:8b:94:c9:e7:80:33:c5:3d:23:da:fd:
31:8b:7a:27:80:c2:40:ef:2d:da:4e:d4:fb:f4:13:
4b:d7:a0:e9:37:a8:2b:80:8a:02:c9:cc:db:ff:e0:
35:06:cf:54:52:f5:18:25:fe:75:e0:76:99:3e:de:
07:16:34:d5:17:7e:0c:93:f8:b3:9b:2a:5e:a7:52:
91:22:91:81:29:82:76:a1:e3:b9:66:d3:18:3c:3b:
96:f5:a1:b0:12:0a:08:24:7c:93:ac:0e:f9:57:b7:
c5:d1:ca:ae:e7:5f:44:0b:00:ab:ba:05:95:46:f7:
9c:7a:0d:8f:88:3f:1e:e4:dc:a6:8a:9f:eb:22:51:
3a:e7:85:a2:55:19:de:f4:d8:d8:d6:b4:59:f5:fb:
f3:f2:fa:a5:2f:db:cd:b7:78:00:d0:b4:90:42:52:
de:25:09:52:15:89:34:28:c6:9d:a7:4c:d2:93:d7:
ca:ef:e8:a7:d6:32:b1:83:93:22:e8:90:7d:01:dd:
8d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:39:5B:15:70:1D:3F:80:AE:97:4D:2B:33:7D:F8:7E:30:D9:AC:E7
X509v3 Authority Key Identifier:
keyid:6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ae:55:58:c8:5f:da:68:5c:2c:01:7f:cc:c6:10:ea:af:a8:
04:76:09:2e:fa:d7:ae:ef:13:f1:74:e5:10:56:c2:71:06:45:
25:60:40:0f:d1:70:3e:f0:84:33:70:5a:66:ac:77:3a:38:96:
b0:0b:8a:e6:3b:94:b4:a5:6e:01:aa:4e:de:22:11:07:f6:e6:
ff:03:bb:4f:fe:20:c4:20:f5:ab:6e:38:37:67:ea:73:14:c5:
41:cf:d3:42:3a:e3:3a:b9:15:e6:c4:de:19:6f:ab:f7:f7:58:
0f:ce:01:26:b9:9a:e8:bd:ed:3b:91:2f:3a:33:c9:ef:8f:5c:
db:50:ed:00:27:8b:1a:93:da:30:65:50:3f:9a:cb:52:bf:e9:
8b:72:4f:27:5e:49:e1:74:75:37:0b:a3:c0:ed:a5:d0:e6:46:
b5:b8:ce:1f:f0:80:fb:33:a8:61:f7:54:52:aa:37:2c:86:3c:
4f:13:1f:f1:72:3e:f4:50:ce:6d:ad:81:bf:1c:22:9a:a6:71:
82:75:7e:37:30:5b:82:18:c8:6c:0c:d4:31:81:49:ce:cb:36:
0a:ff:0e:46:72:9e:e5:2e:03:23:1d:57:08:48:da:83:a5:0c:
4f:08:e3:e5:16:b3:74:82:c0:c3:91:33:a1:c4:59:d4:74:31:
48:fb:e7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:47:16 2025 by rpki-client