Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
File: 1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft (raw, json)
Hash identifier: ITB1gfhcifk1pMgM9odztuSyH+6dOqA1Vv0T6a25pMQ=
Subject key identifier: D4:3A:7A:91:A1:F3:C0:C8:28:2D:FA:BF:3E:B6:44:38:58:BD:57:78
Authority key identifier: F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F
Certificate issuer: /CN=f9a16d1f4c7a653e3e20f84d9ba59fdb27c2a61f
Certificate serial: 01974C68DD2E05DF6DCD49C4CA8E6E11E150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
Manifest number: 0C26
Signing time: Sat 07 Jun 2025 22:00:30 +0000
Manifest this update: Sat 07 Jun 2025 22:00:30 +0000
Manifest next update: Sun 08 Jun 2025 22:00:30 +0000
Files and hashes: 1: 1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl (hash: KFPdvXdHC5zL3XB06ci0ueCyklbN2pJjXJlle9vm3HE=)
2: 1-eEKcv2-HlB3jOunD8sGEQP3iuo.roa (hash: 1bxmvhYpMOeABQ7wYp60dzQC7ktJL7nqMNn/zKkAUDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:dd:2e:05:df:6d:cd:49:c4:ca:8e:6e:11:e1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a16d1f4c7a653e3e20f84d9ba59fdb27c2a61f
Validity
Not Before: Jun 7 22:00:30 2025 GMT
Not After : Jun 8 22:00:30 2025 GMT
Subject: CN=d43a7a91a1f3c0c8282dfabf3eb6443858bd5778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:9f:eb:9f:b6:31:80:76:f3:79:2c:31:c9:
00:d8:26:41:c7:cc:83:c0:f7:6e:55:0c:f7:91:2e:
a6:5f:ac:c3:10:71:ec:35:4d:e3:57:ba:99:b2:4d:
59:2f:2d:94:03:2b:00:7d:2d:ef:21:44:78:e3:0a:
0c:25:4c:08:39:07:25:c0:af:6d:b8:cf:d4:b8:35:
63:b7:2a:d5:c5:02:99:39:8f:fb:c0:ed:74:65:cd:
92:a1:6a:37:c7:47:e2:73:53:40:78:53:c7:34:0f:
19:af:ab:49:93:42:4c:c6:27:54:c6:54:cc:4d:6f:
4d:15:48:55:8d:76:5d:d5:39:2d:5d:79:a4:51:9f:
ef:3c:73:b1:09:07:15:30:98:c4:8b:f2:d1:1e:a4:
22:ec:db:07:7a:3c:bf:ab:68:28:0f:f5:3c:9d:23:
0f:d8:1f:2a:a1:28:7b:d9:07:21:75:5f:c1:1f:c8:
3d:ae:f0:d6:a3:c4:ff:9e:e9:26:14:d7:24:b2:ea:
ee:d5:46:54:08:89:8c:d5:91:6b:c1:22:2d:85:2b:
36:e9:62:da:1a:e8:c6:54:60:49:c5:db:4b:0c:a4:
5e:bc:d9:1f:19:42:d5:11:04:43:57:3b:67:06:a4:
e0:ba:e8:ae:9e:f8:c6:74:96:ce:12:31:17:ef:6d:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3A:7A:91:A1:F3:C0:C8:28:2D:FA:BF:3E:B6:44:38:58:BD:57:78
X509v3 Authority Key Identifier:
keyid:F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fc:6a:ae:68:b2:af:59:ff:d4:39:2e:d6:38:21:e4:d6:d7:
0b:fd:08:c0:52:d9:73:02:4d:ec:17:cd:72:84:bb:24:a8:23:
1d:1d:b3:cf:4b:f3:79:83:3c:c5:ee:70:93:26:65:b1:8c:14:
97:88:f2:85:e5:58:8f:8b:5a:49:2d:7c:e4:a1:14:62:0b:e4:
5b:ac:03:ec:07:25:83:6c:1f:a1:67:40:f5:29:68:5b:bb:4c:
c0:35:a9:54:71:8a:e9:82:a1:6c:56:7d:0a:2a:d3:f2:10:dd:
e0:9d:21:36:f5:8c:af:50:ba:40:0c:c4:58:54:70:62:7b:6d:
19:79:f4:9e:0f:b7:99:44:76:43:8a:37:79:b7:ec:98:d2:1d:
cb:bc:06:30:24:8f:0a:08:51:ff:9f:36:4a:be:02:76:9d:38:
96:7c:bd:56:76:ed:3b:c3:33:27:ba:ca:50:cc:d7:47:5d:bc:
d3:c4:d3:e3:c5:21:78:7c:1f:7b:e0:ab:e6:c9:13:9e:cf:7b:
65:8d:40:5d:be:cd:cd:25:25:5d:4e:6b:3d:7d:04:b7:7a:b3:
e8:e6:10:bc:c6:30:6a:33:46:26:f9:a7:a2:79:7b:b7:b3:88:
b0:e9:da:04:a8:19:1e:3f:a0:e3:c5:2c:ee:2f:7a:93:a4:b7:
cb:5a:a9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:20:45 2025 by rpki-client