Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json)
Hash identifier: 2ECSIJBpYu/xVx8EtpvBGq1/yAFGFmO8hP1C91LRrKY=
Subject key identifier: C0:00:22:36:F7:B6:F2:5A:54:A7:DA:17:E4:CA:55:28:A6:12:F6:2B
Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Certificate serial: 01976396738BCDFABC99C325D13C37312D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
Manifest number: 1229
Signing time: Thu 12 Jun 2025 10:01:33 +0000
Manifest this update: Thu 12 Jun 2025 10:01:33 +0000
Manifest next update: Fri 13 Jun 2025 10:01:33 +0000
Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: WyuK+pj3cPrAV1LQfSWHFV0TvfG03cX3zWPFSK3F3+w=)
2: FJfX864pvFwf4qPxQ1uqI0bIaXg.roa (hash: oKD/fS/LmM/Bugiaw6RKm+DzVLCUCTYs+LRezp4BQso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:96:73:8b:cd:fa:bc:99:c3:25:d1:3c:37:31:2d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Validity
Not Before: Jun 12 10:01:33 2025 GMT
Not After : Jun 13 10:01:33 2025 GMT
Subject: CN=c0002236f7b6f25a54a7da17e4ca5528a612f62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:28:26:4a:44:c9:18:a5:d3:cc:eb:da:78:a5:
47:be:a6:ab:d8:1e:37:2f:a0:eb:1e:ba:6c:ac:e1:
f3:9b:ba:26:81:0d:26:dc:4e:c0:c0:71:1c:f2:c1:
b8:48:f0:c8:da:14:85:41:94:0b:20:48:78:98:50:
04:cf:04:b5:6f:61:40:1f:86:fc:4e:2e:60:6d:a1:
1e:ac:85:21:93:8e:8f:98:28:31:5f:e0:f5:f9:15:
3c:57:16:0a:98:da:a5:a2:5d:09:98:9e:4f:14:b5:
7f:ab:e7:10:2d:72:63:0f:e6:11:e0:42:9b:b0:e1:
a2:af:6b:99:6c:2c:ae:f5:42:e8:e9:be:af:c4:77:
2e:73:2a:8d:6a:a3:b7:43:a2:ce:5e:dd:a7:59:4e:
1b:9b:3f:76:ca:a3:bf:1e:b0:48:cf:46:88:32:0f:
2b:b9:ef:1f:9e:21:61:5d:91:e4:21:c4:04:b9:db:
92:fb:82:aa:01:39:f4:c3:e2:86:fa:99:5c:68:e7:
93:46:6a:3d:c4:f2:22:38:10:75:7a:25:b7:39:28:
98:d2:06:44:c7:c0:38:b7:5d:d3:13:fe:d7:83:d4:
5e:2c:e2:1c:08:65:36:53:23:96:e1:ce:53:db:86:
b5:38:8c:b2:2b:5f:f7:ed:ab:90:0b:0e:1c:b9:c2:
e0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:00:22:36:F7:B6:F2:5A:54:A7:DA:17:E4:CA:55:28:A6:12:F6:2B
X509v3 Authority Key Identifier:
keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1b:10:11:5e:ee:20:bd:ad:ca:cc:59:76:ab:f6:34:3f:35:
6b:d9:0c:6d:8f:ca:a7:cc:8e:f3:77:0b:5b:f9:53:8d:56:e7:
ac:f6:60:ff:f1:79:06:ca:58:d3:40:50:c6:e6:86:6c:aa:15:
aa:71:8c:63:dd:5d:59:de:85:c3:fe:9d:c1:34:6c:c9:17:a2:
b7:e6:c7:17:5e:40:48:5d:ef:b6:1d:72:c9:15:32:98:6e:5a:
d2:68:e0:e7:3f:6b:1d:4a:83:19:fc:49:87:4f:6c:83:1f:b9:
f5:f9:39:53:5e:14:f8:8a:f1:4e:c2:a6:f4:29:d2:b7:db:ed:
69:be:90:d9:13:b5:42:99:8f:ca:90:bc:1c:74:03:bc:02:61:
8b:6a:77:6d:80:a6:f9:01:21:36:02:3f:8d:75:8d:01:04:0f:
1c:d3:b0:58:55:ce:a2:ea:5b:6e:c7:9d:24:65:ce:c2:37:90:
93:ef:33:74:57:6f:20:a8:2e:e2:bd:cf:ef:f1:70:a5:bd:27:
5e:c0:45:78:be:85:17:b8:5a:87:52:93:48:99:62:7f:81:e6:
42:73:e8:2f:27:02:b3:5e:3b:77:7f:19:56:a4:4c:c4:4a:89:
9a:31:9e:c4:ec:d9:a8:af:7f:d2:67:84:c9:80:6a:b1:ee:0a:
fc:a3:0f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:32:12 2025 by rpki-client