Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json)
Hash identifier: +GBDaMeY8chs3nBcTUQ3LfGac8vjoduKXxnQ9y8vcSI=
Subject key identifier: D6:BF:D2:A1:BC:8E:58:EA:CD:4B:66:C7:95:DB:7F:8F:40:63:B9:2F
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 01984A4143AC366B66C5AA3165AF80C4F3DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
Manifest number: 1021
Signing time: Sun 27 Jul 2025 05:00:47 +0000
Manifest this update: Sun 27 Jul 2025 05:00:47 +0000
Manifest next update: Mon 28 Jul 2025 05:00:47 +0000
Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: sG0aEUBn1fHinQIhZPwrkNspbP8HQi2eXcyoP+LMb/g=)
2: YWZ9Y-_nf9hJ3PCcQZw9nBpADV0.roa (hash: 8GJk/xJD9TDW949jEwNVPLQ5jxG7+jInYSsAj0hFBHo=)
3: hL7gjsE__TvimmJVNhYnW8HxcTk.roa (hash: fSQmS4KDtYP+UxUBfXGw0aeIOC4KTOr+x3hlF+s6H3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:43:ac:36:6b:66:c5:aa:31:65:af:80:c4:f3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: Jul 27 05:00:47 2025 GMT
Not After : Jul 28 05:00:47 2025 GMT
Subject: CN=d6bfd2a1bc8e58eacd4b66c795db7f8f4063b92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:72:9c:8a:b7:2c:0c:95:ab:23:14:cd:a6:83:
7c:43:c6:8a:d5:96:18:14:ab:66:d4:ad:f5:5a:0b:
b7:5b:4f:e0:4e:83:a6:52:45:3c:37:5c:58:c2:8d:
c9:eb:84:cd:85:6d:73:45:88:42:30:58:37:b7:da:
76:14:c0:a4:99:0e:1e:4d:48:e9:93:72:6d:41:43:
9f:69:2f:9d:0c:27:46:b7:5d:47:67:e5:62:84:7a:
d8:82:94:f1:fc:09:1d:27:b1:47:26:a7:be:2f:ff:
74:96:10:54:86:ba:a9:6c:b8:5b:c3:a3:f0:1c:bf:
c7:fd:fd:88:8e:41:fb:3b:42:5c:7f:ab:23:4d:bc:
58:07:d5:75:aa:a1:58:13:67:a5:ca:79:e6:c9:30:
b3:37:2b:d1:2a:88:ea:14:74:75:4a:ab:8d:8c:77:
c7:b7:89:6c:81:ff:1a:f1:1b:c5:96:46:4f:bf:95:
ed:0c:b1:58:89:05:d5:2d:68:2c:ef:4f:d4:31:db:
7b:9a:59:16:70:b0:ab:ea:9b:c9:4a:de:6b:ed:4a:
65:2a:c6:ba:52:7b:9e:58:3c:d5:e0:6c:0f:4b:27:
1a:6f:d3:5b:7f:dc:8b:08:45:aa:f1:bb:f9:dd:d5:
d9:09:bb:f0:2a:c1:64:a9:10:1f:61:9c:54:5b:79:
ef:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BF:D2:A1:BC:8E:58:EA:CD:4B:66:C7:95:DB:7F:8F:40:63:B9:2F
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2b:76:f3:65:b0:70:8a:5b:2a:91:65:e2:74:05:e6:fe:d0:
b4:fe:0f:08:98:0b:35:8c:e5:54:56:3f:df:79:f5:27:b0:88:
0e:45:89:54:2a:cb:aa:cf:34:45:a8:2e:87:a2:46:e7:35:c8:
06:db:af:b9:81:2e:59:11:50:a9:ba:84:35:e2:2f:3b:02:7f:
69:6a:f9:e5:4a:59:91:01:b2:fb:4f:28:ce:5a:9d:b5:83:fb:
dc:02:57:5b:6c:39:00:e7:46:2a:24:5e:ba:f9:c5:53:38:05:
a3:50:ed:ef:08:94:c3:4a:99:48:22:d3:7b:7e:d2:8e:7a:d9:
5a:eb:d5:bd:fc:e7:1d:33:22:7c:cc:4e:4a:7a:66:30:e7:ea:
46:78:6d:db:ad:d9:da:35:c2:23:9d:5c:d1:2d:b6:06:38:f1:
92:39:e0:7c:53:b3:94:08:80:b9:96:5c:47:07:c9:f5:ef:d0:
ad:b6:10:c6:c5:a7:4a:2a:f3:12:92:b8:ca:5c:a5:fa:f8:45:
78:dd:9a:00:06:ac:1c:f2:87:47:8e:fc:b3:c7:3f:fa:9f:2f:
35:41:6d:23:ae:a1:48:d8:f9:90:62:ef:86:31:61:e2:d9:98:
5b:ff:09:5e:96:47:28:d2:50:c0:4f:63:ff:ef:cd:a3:be:d1:
0b:dd:c3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:36:31 2025 by rpki-client