Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
File: 1-545C9y9la-rSl_4xO2e_ENoe9E.mft (raw, json)
Hash identifier: x2rwfKViVR3H2C274IpL/+07/mqCfnH4L3MnCHGQmbU=
Subject key identifier: 2E:CB:02:A8:D2:28:BE:33:0E:5F:7D:CB:AF:7B:74:89:A0:AB:25:80
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Certificate issuer: /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial: 01984A09C903759A8A4B9D44EF0CEAC078F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
Manifest number: 0F51
Signing time: Sun 27 Jul 2025 04:00:11 +0000
Manifest this update: Sun 27 Jul 2025 04:00:11 +0000
Manifest next update: Mon 28 Jul 2025 04:00:11 +0000
Files and hashes: 1: 1-545C9y9la-rSl_4xO2e_ENoe9E.crl (hash: yKE0Dl6G8NGVU2Cz7XjlyD95ew2vl95l3OiYJnNoWB0=)
2: AQyWHoTpIoD9YkmssqSGTmtU3kY.roa (hash: gQkpbE3OwjFrYUS2/tIcrYz4PZ/Z8nNnk27GBtk07kI=)
3: n9QbbxtHUjuRXoqW5WKf1TIqSDE.roa (hash: VlEMVs5cMOSULcZyXmypke2XQns+4ddKAif1EvT7d+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:c9:03:75:9a:8a:4b:9d:44:ef:0c:ea:c0:78:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Validity
Not Before: Jul 27 04:00:11 2025 GMT
Not After : Jul 28 04:00:11 2025 GMT
Subject: CN=2ecb02a8d228be330e5f7dcbaf7b7489a0ab2580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d1:ad:3c:30:84:bf:d1:d8:62:5d:ad:1b:f2:
8d:9c:53:81:59:4f:ad:c9:b4:65:79:bd:16:77:b4:
75:85:5f:ce:7b:73:ea:96:33:86:da:36:b0:9d:4f:
9c:46:db:7f:72:d0:63:94:c7:04:87:27:b4:bc:80:
a3:0b:ce:f5:e1:cd:ca:3b:45:be:ee:23:06:5a:da:
f5:1b:c1:68:f9:01:a8:6f:4b:25:a1:0f:60:fc:8e:
ca:14:e8:1c:3b:bd:09:bf:74:75:b5:9c:3a:15:06:
e8:5d:99:fe:f5:f1:4b:20:df:45:d1:e2:90:18:86:
cb:07:7f:9e:24:19:53:52:3a:6b:f3:3c:d1:45:59:
4d:28:07:18:79:0a:0f:dc:f8:36:6d:5d:df:a4:81:
53:10:ca:51:cc:f8:2f:59:c1:e6:de:1e:8d:48:21:
79:10:07:d3:0e:a5:b1:74:46:cf:48:24:a7:4b:b0:
9d:98:60:ba:22:1d:44:f4:4f:1c:e4:de:93:32:f5:
5a:ba:ab:a8:a7:26:08:d8:50:1a:f8:7f:d3:7c:22:
f9:ce:e3:df:f1:84:36:8b:c5:8c:6e:e5:60:2b:da:
fc:db:77:9c:8c:c7:bb:5d:22:33:11:f2:c2:1e:35:
f5:77:b0:a9:6f:7f:f3:60:64:78:ad:35:f9:90:cc:
d7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CB:02:A8:D2:28:BE:33:0E:5F:7D:CB:AF:7B:74:89:A0:AB:25:80
X509v3 Authority Key Identifier:
keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:06:af:60:fb:43:ed:f6:3b:62:33:71:e0:9c:7a:41:5c:91:
49:2a:c6:42:e7:f3:51:53:fc:7d:7d:6d:01:b6:ee:67:42:0d:
03:9b:00:5b:74:87:7f:1a:be:a0:03:3f:6d:53:fa:58:a0:51:
9e:38:eb:9c:e4:f3:86:1c:9a:39:cd:33:6c:0a:ef:6a:62:15:
eb:7f:eb:c9:5b:aa:ef:d7:1d:e5:51:25:4b:9f:b7:d5:c1:22:
79:cd:db:00:97:af:c2:7e:28:d3:e5:41:30:d9:c4:f7:f9:3c:
4a:4b:5e:bd:8b:5d:1d:9c:66:be:e1:59:aa:31:d9:8e:cd:da:
fb:98:0c:e2:bd:c5:7b:9a:53:fb:c3:7c:60:89:d7:c8:30:86:
d8:9b:d5:7f:92:1f:ce:ce:5c:3e:40:0a:27:d6:a9:4c:20:0d:
12:ab:6c:e8:e7:b1:d8:87:e4:a9:56:1b:ba:02:69:19:e4:17:
ff:5c:1e:8b:02:d2:5b:fa:8f:e7:1f:c5:4a:e7:dd:b7:13:92:
6b:82:64:f5:04:6c:12:02:60:7c:e1:35:4d:b3:e4:70:06:cb:
1c:b9:6c:58:a0:4c:34:50:c9:26:60:16:63:f6:a4:08:19:70:
30:ac:bb:58:97:4c:47:88:b1:7d:4a:45:41:68:56:57:2c:7f:
3c:0a:48:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:08:50 2025 by rpki-client