Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
File: 1h61PLVnGN8NlHbNmEqsRDK5D2w.mft (raw, json)
Hash identifier: qp46IpxqO0Q/aV76pNLbhZkNPW6qYDKIpa69dP7ghMo=
Subject key identifier: 00:B2:5A:5A:21:FA:E2:AF:3F:F3:7F:90:27:D6:9C:BC:27:99:7D:23
Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Certificate serial: 01974D7BDD8E583B75C674214155A05DBB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
Manifest number: 0C57
Signing time: Sun 08 Jun 2025 03:00:52 +0000
Manifest this update: Sun 08 Jun 2025 03:00:52 +0000
Manifest next update: Mon 09 Jun 2025 03:00:52 +0000
Files and hashes: 1: 1h61PLVnGN8NlHbNmEqsRDK5D2w.crl (hash: ITbpxGUmyiof7gb+nFYn8qc7akHXCu1kCdVQLAGYYIg=)
2: OrR8ArTb8w0zfL8vZIwz8tbKQ2c.roa (hash: DXI54xHOK1LCP4IfsOxKtDE/CK97CgmE5qjdIRspp1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:dd:8e:58:3b:75:c6:74:21:41:55:a0:5d:bb:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Validity
Not Before: Jun 8 03:00:52 2025 GMT
Not After : Jun 9 03:00:52 2025 GMT
Subject: CN=00b25a5a21fae2af3ff37f9027d69cbc27997d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:66:d6:01:42:6c:48:0c:3a:04:e6:c5:51:
2e:cc:bf:51:51:f1:43:d8:2c:5c:a8:de:9d:26:72:
96:d3:14:38:15:73:6a:b8:2f:5b:a6:81:1c:1d:e2:
5a:a0:c8:74:72:d1:7c:20:50:61:52:7c:c5:09:99:
71:2e:3a:f8:cf:08:f9:8a:92:59:7b:57:5d:37:64:
e8:4b:dc:43:17:f7:42:5f:05:cb:08:c2:f8:d3:77:
d8:35:f1:1c:6a:36:46:c5:a5:c7:72:8d:fe:13:cf:
6a:bb:71:14:bb:a7:1c:a1:d2:fd:66:5a:a4:13:4e:
83:85:74:6e:b5:01:0a:b4:99:a7:45:f2:d4:31:bf:
9f:82:fc:6f:9f:b2:8d:12:e3:70:be:41:b9:1e:0f:
e0:5f:73:90:a5:53:f7:ca:1d:35:7a:f2:4f:48:63:
67:b6:fe:5f:ac:d9:95:81:37:0d:83:e4:7c:53:5f:
68:73:75:57:d5:ba:a9:11:b3:37:4b:5d:ff:23:11:
8f:98:a8:13:6b:54:30:09:b4:ea:0d:c3:7d:e3:c2:
85:27:bc:d9:c5:27:ff:9a:64:7f:b9:78:99:3d:5e:
a9:18:ad:97:a1:de:93:53:82:25:93:aa:15:f9:96:
cf:12:d9:df:ea:8a:a7:c6:2f:2a:53:0a:e9:54:14:
23:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B2:5A:5A:21:FA:E2:AF:3F:F3:7F:90:27:D6:9C:BC:27:99:7D:23
X509v3 Authority Key Identifier:
keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b3:f5:6d:e3:fa:e1:8f:99:ae:b4:f0:93:b1:d0:bc:6d:9e:
d1:a3:6f:2b:d6:50:99:2b:82:75:3e:7b:b8:4e:f9:4e:c5:f9:
b7:16:75:12:01:12:84:11:49:5d:8e:6d:5d:c7:55:89:7c:58:
e3:ef:87:f4:ad:71:c6:d8:45:48:8c:76:ea:5e:84:26:a4:7a:
32:20:55:54:2d:8b:fd:ab:3e:87:57:02:b5:7e:63:95:22:3c:
6f:61:5d:8f:6c:08:2a:74:2f:e0:a1:d0:2a:30:92:66:65:7a:
27:66:07:b0:f0:14:08:2b:d4:55:21:b7:de:f8:9f:be:70:b2:
e5:76:37:f1:31:7c:9e:6f:25:2b:34:be:dc:4f:7f:58:c3:f7:
f7:a2:06:fa:aa:1a:a5:e2:60:06:9f:4d:cd:6b:d2:47:fb:9d:
92:bf:9a:4f:f0:af:35:d9:9a:52:f3:a9:bd:07:2a:c8:e1:a7:
4d:58:99:c2:fb:a9:fc:69:99:08:72:34:b8:1d:15:d8:c6:be:
01:61:67:b7:18:dc:9e:52:6e:be:a7:0d:ed:be:13:68:91:7a:
4f:7e:02:c5:fc:aa:98:7f:ed:70:85:3a:d0:de:fc:16:1b:e6:
a9:28:8f:cc:f6:66:e2:7d:48:be:61:e5:81:9e:6f:21:53:92:
0e:67:e5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:05:06 2025 by rpki-client