Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier: 0zCTp19lbU4+oTEkv8c1vh1oty8xhBfcZ7dm10iLwVI=
Subject key identifier: 49:E7:09:F2:45:DA:3F:F6:B2:AF:EA:0A:67:8A:27:DE:32:47:4D:EB
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial: 0197684E18224C33C88DF6C812BC0867A616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 08:00:37 +0000
Manifest this update: Fri 13 Jun 2025 08:00:37 +0000
Manifest next update: Sat 14 Jun 2025 08:00:37 +0000
Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: NB6pmVH67STZwWcLGGjYISohVf88AmcbQi/Th65mlQ4=)
2: YHDrFWwxkrS_T2zm-XD8OnCCk3I.roa (hash: ats4DX7q3HbDaXBiSmUVMOKuQb0H1KPc5eA6NgFMmhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:18:22:4c:33:c8:8d:f6:c8:12:bc:08:67:a6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Validity
Not Before: Jun 13 08:00:37 2025 GMT
Not After : Jun 14 08:00:37 2025 GMT
Subject: CN=49e709f245da3ff6b2afea0a678a27de32474deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:97:d7:6b:51:21:25:20:7a:2a:38:66:c3:30:
db:f1:56:8e:cf:c3:41:89:ae:24:9b:e1:02:ba:90:
2f:2e:51:b3:8c:b8:79:dd:8c:fe:f3:76:a3:d5:c3:
0c:4f:6a:8e:d5:91:91:58:f0:7e:9c:db:9b:4f:a8:
dd:f4:74:98:5a:16:78:8f:88:7d:29:30:99:55:3e:
99:66:27:63:b0:a5:85:a0:a8:f6:17:30:09:c8:18:
70:d9:e5:45:8f:9c:df:dc:d3:d0:b4:3c:1e:e1:c4:
a8:44:ab:cc:dc:e3:c6:6e:95:89:a9:0b:d8:3b:f3:
0d:42:19:db:8e:d1:57:4e:23:29:3e:a8:8f:ae:c7:
74:d4:3d:9f:ec:c8:ca:db:c3:ab:b1:ae:78:9c:4a:
d0:00:bb:e2:60:8d:ff:e8:aa:9e:ac:d7:af:98:03:
a5:f8:0f:65:5d:4d:23:35:73:d3:54:14:0e:fb:73:
1f:21:f7:24:c6:d7:62:db:60:4a:b9:b6:15:4f:46:
49:e2:10:e8:d5:85:b3:ac:ac:d4:b0:4d:8f:a8:fe:
69:4a:67:3c:01:2a:43:90:19:05:a6:62:35:59:fd:
22:bc:35:08:f1:8b:48:42:92:e4:7f:5c:0c:f9:58:
8b:64:62:1c:e4:7d:ec:87:17:7c:4c:a0:03:43:e1:
01:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E7:09:F2:45:DA:3F:F6:B2:AF:EA:0A:67:8A:27:DE:32:47:4D:EB
X509v3 Authority Key Identifier:
keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:06:9a:57:33:34:e8:bf:0d:11:78:f2:14:c5:12:b5:6c:f2:
08:e3:28:00:68:4d:84:c2:23:71:99:41:e6:b5:58:0d:aa:2a:
c9:e2:23:35:11:d6:a4:98:70:7f:08:fc:3b:f2:9f:c6:42:4c:
35:6e:f2:1d:66:33:df:ac:8f:a6:cf:46:07:9d:66:38:45:8b:
83:f9:ef:b9:48:3b:f3:68:46:e1:95:29:eb:2a:0c:66:43:18:
33:85:ae:50:b7:a9:41:85:e4:41:a2:04:cf:52:a2:f8:0d:da:
15:d0:62:c3:59:00:c3:33:87:36:20:32:46:4a:60:59:4d:1d:
c6:25:aa:6e:6a:5c:2a:77:0f:ac:51:46:f7:7b:7d:a8:c4:e0:
12:12:6b:e4:b5:d1:89:b0:c0:47:08:f5:5b:61:68:4f:49:13:
ed:31:d7:03:60:1c:ef:14:5d:a5:33:93:12:82:bc:5f:63:09:
56:16:87:7b:89:75:f0:e5:87:a0:2a:ee:b5:10:36:01:8a:9a:
db:87:7e:a7:5a:80:1f:53:39:0b:41:60:0f:e2:d8:58:d9:56:
ca:7e:07:af:e7:93:d7:de:0c:32:e1:87:64:b5:14:be:8a:dc:
0e:51:71:68:e9:0e:7c:81:f7:f5:3a:89:18:76:6a:7c:a8:a3:
3b:d9:3f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:29:02 2025 by rpki-client