Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
File: 1NhufQc6nk1p7HFcNiMXaAWJTVo.mft (raw, json)
Hash identifier: rJ0oj/4oy43Pisn/w48R35BBYWwonAQmJw2xl3N6nO8=
Subject key identifier: 1A:D1:09:6D:C6:7B:74:07:C7:EB:9D:E7:7A:F7:25:45:F9:C2:E6:0C
Authority key identifier: D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
Certificate issuer: /CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Certificate serial: 019745F935CF2101C8D9CD4FC00CBA68891D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
Manifest number: 0C6D
Signing time: Fri 06 Jun 2025 16:00:49 +0000
Manifest this update: Fri 06 Jun 2025 16:00:49 +0000
Manifest next update: Sat 07 Jun 2025 16:00:49 +0000
Files and hashes: 1: 1NhufQc6nk1p7HFcNiMXaAWJTVo.crl (hash: Ggj5dJTmEm93jaut1WPKmXa8rRXIw+7c9Imkfl+wmlE=)
2: yVOuH9GnWiOJ4T0Bjcul16G_CUI.roa (hash: cYY3QuLeMs+0RKKYLhzyVIgFcgFYuNr0hEZcjUsKwaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:35:cf:21:01:c8:d9:cd:4f:c0:0c:ba:68:89:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Validity
Not Before: Jun 6 16:00:49 2025 GMT
Not After : Jun 7 16:00:49 2025 GMT
Subject: CN=1ad1096dc67b7407c7eb9de77af72545f9c2e60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:df:10:27:06:bf:7d:a5:d5:a6:7c:75:0d:
2b:8b:b5:d9:0e:76:b7:fd:bc:c5:a2:e9:0c:e2:24:
70:f6:df:95:0f:ad:18:e6:74:57:32:68:ab:2f:d3:
c9:52:3f:82:b6:4a:61:c8:af:b6:fc:18:e5:71:0c:
27:ce:98:bc:75:52:e1:5f:9a:00:43:f4:5c:02:9f:
92:24:91:b8:3c:dd:2d:83:b7:01:6e:52:1f:6b:a3:
b4:e0:42:fa:c1:be:9f:b8:28:03:4d:4b:74:45:cd:
50:78:da:de:f8:ee:ba:56:aa:e9:2f:79:ac:b8:71:
6d:3c:ba:65:40:d1:3b:32:21:23:b7:3d:13:36:3c:
6d:69:5f:c2:b3:73:65:07:48:a7:eb:f6:30:40:1d:
68:9f:5f:49:4d:1d:55:c0:f7:87:d6:d5:d3:17:2a:
16:bc:10:8c:01:11:c1:6e:29:bb:bb:3b:57:b3:be:
7b:61:fd:86:a4:a3:5a:5a:68:c2:1a:ac:70:96:c8:
04:f5:a8:e1:83:e4:65:e6:7d:79:73:da:38:64:a2:
d0:26:59:69:80:2a:82:b3:64:17:c6:3f:6e:be:13:
e0:38:87:5b:b0:c3:72:bc:b0:5a:13:75:8b:e4:4b:
1e:9b:aa:90:e4:7c:1d:4b:b6:bb:dc:27:20:7c:3a:
71:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D1:09:6D:C6:7B:74:07:C7:EB:9D:E7:7A:F7:25:45:F9:C2:E6:0C
X509v3 Authority Key Identifier:
keyid:D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:55:8f:df:b7:b2:b2:34:4c:30:58:51:55:82:4e:d5:30:41:
37:82:2a:4e:c8:8c:c1:e5:62:7d:63:35:d5:a5:de:af:09:6e:
ec:e8:d7:8d:f6:f0:18:18:02:f3:59:57:4e:53:5f:a5:e6:a1:
19:74:d5:31:04:01:82:df:2a:c1:36:4e:fd:63:33:f4:c8:f3:
ac:c3:56:21:52:97:3f:49:ca:19:53:87:9b:61:b5:3e:49:b4:
a3:e3:0c:6f:5a:dd:0c:0c:a5:d6:8d:8b:cb:9a:cb:b8:5b:6d:
91:1a:5c:e8:f3:81:23:9c:f5:84:78:da:e0:18:f9:25:89:6b:
2f:a3:12:b4:68:1b:f9:98:03:a0:30:2a:74:c1:54:c2:fa:12:
fe:66:61:e9:d0:31:c7:54:e2:32:9b:5b:6b:2c:c8:ac:b4:6b:
bc:e4:df:68:ed:1c:82:bc:43:a4:cf:48:27:ac:21:1a:1a:fc:
7b:0b:44:81:06:f9:18:4e:ce:47:cb:46:38:5e:ff:50:fa:64:
2f:b4:a3:1b:34:a7:ec:3e:dd:c2:49:7b:0c:18:7b:d9:b6:1a:
60:c7:1d:10:5d:a2:a5:e4:56:06:98:2f:28:5d:d3:ff:40:b4:
4b:16:91:a4:51:9a:25:80:76:c5:21:ba:ae:14:f8:8a:1a:1b:
76:f8:21:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:24:01 2025 by rpki-client