Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier: 34kJSp1zyYjM5bMM1UBFTfRORscEBl/uiLUI60rkz8s=
Subject key identifier: 5E:0A:E3:86:66:22:A6:CA:4B:33:30:9B:27:0E:C8:86:38:87:57:EE
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial: 019853B23652C57DD18ACC5AFAA134D4C6FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number: 028C
Signing time: Tue 29 Jul 2025 01:00:44 +0000
Manifest this update: Tue 29 Jul 2025 01:00:44 +0000
Manifest next update: Wed 30 Jul 2025 01:00:44 +0000
Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: Zg/QYSL6dotYq12b/YHl5lm5oYSStPB9xxwoQ7rWcHE=)
2: olYC3vt3bTWX5B6Daul0GiCdzRk.roa (hash: EU31+YZYAX7zRrR/hWxXMjIPU9jCSCk9p7wSptbJIM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b2:36:52:c5:7d:d1:8a:cc:5a:fa:a1:34:d4:c6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Validity
Not Before: Jul 29 01:00:44 2025 GMT
Not After : Jul 30 01:00:44 2025 GMT
Subject: CN=5e0ae3866622a6ca4b33309b270ec886388757ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ee:d5:b6:be:bc:32:a8:4e:b1:6e:cc:14:ed:
1b:46:48:84:8c:9e:c8:dd:64:ec:8e:62:c5:6e:85:
0a:ac:d3:7f:99:54:82:3d:5a:68:db:d2:8d:10:a2:
7a:b2:d6:3e:ea:c1:d8:3c:77:b2:23:7c:0e:5d:e3:
16:d1:3a:66:97:04:e5:d3:77:7d:8a:5f:4f:72:9f:
2f:41:84:06:e0:77:44:e6:70:90:fa:6d:f4:48:21:
e0:81:02:d1:b5:db:32:e4:13:66:05:c3:94:1d:0b:
57:dc:d5:3a:2f:17:a8:9a:a8:6a:2e:30:c2:c7:9c:
f3:d3:2b:2a:91:b4:df:53:3a:72:52:e3:7e:ba:9e:
5c:d4:92:49:a3:b1:93:be:a7:40:81:7b:fa:bc:3f:
b0:e4:d9:1a:44:51:07:a5:4d:1c:f0:5d:b5:68:e3:
af:42:6c:d8:09:49:a2:86:32:16:b5:08:b3:07:cc:
40:f0:3f:96:b6:1b:c3:3a:9d:e7:26:5d:7f:d0:84:
ec:74:de:92:44:de:1b:46:8c:b3:a6:4b:c8:b0:ef:
96:ff:4c:57:ed:60:62:24:63:31:b0:18:74:5d:e4:
77:3b:2e:4d:04:cd:40:12:dc:04:9c:34:6c:41:76:
7d:16:09:91:1b:40:f3:52:dc:04:ed:33:27:31:b1:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0A:E3:86:66:22:A6:CA:4B:33:30:9B:27:0E:C8:86:38:87:57:EE
X509v3 Authority Key Identifier:
keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:19:44:2b:83:a9:99:96:45:6f:b3:f9:e9:33:9b:7e:92:68:
30:35:e1:1f:56:e5:34:a8:83:e0:90:0b:7e:d3:36:c9:7d:a4:
92:20:ba:e1:e2:06:9d:6f:09:35:96:d2:8c:3c:03:43:5c:55:
d8:5a:bd:48:b0:24:08:e5:13:91:92:7d:f1:48:6c:5d:a6:d3:
c0:e1:7a:02:64:e4:9f:cb:43:87:8a:60:6e:4a:2f:d4:fe:97:
73:4c:bd:e9:ee:76:26:ae:6c:da:ba:86:7a:cb:82:2d:6e:1c:
22:83:77:7c:69:11:20:b5:d8:8a:57:b6:9a:1e:c6:c0:c0:f8:
21:23:e7:5f:44:57:93:4a:2e:56:4f:a6:23:e3:9b:45:fb:8d:
a9:03:30:7c:d1:00:17:00:79:98:88:f3:cf:91:9d:78:18:6e:
08:29:f8:9c:e0:58:0b:3d:0f:2b:01:c1:03:3e:81:ed:c4:7f:
26:cc:b3:90:a8:ad:39:52:7b:49:27:6e:96:ed:67:af:da:66:
6e:7c:bf:30:f4:6b:6f:26:bc:53:66:70:95:a5:6a:d1:d3:33:
00:f3:47:83:c3:73:c5:f1:bc:eb:c3:65:71:0f:09:47:bf:dd:
38:a3:6b:7a:3c:9b:88:b2:19:bf:31:c5:5c:7a:f2:a0:85:56:
53:7d:c3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:38:02 2025 by rpki-client