Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier: 8UJOzeM+xFpOEvqFIptlsBPXqI/Ax9rJ4sJzvDYbgEM=
Subject key identifier: 50:F1:B0:B4:DB:8D:D2:99:6D:53:BE:47:39:A9:4C:06:A8:19:02:B3
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial: 019749318CBE9B8362ECFC89B86A5244A76A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number: 0202
Signing time: Sat 07 Jun 2025 07:01:13 +0000
Manifest this update: Sat 07 Jun 2025 07:01:13 +0000
Manifest next update: Sun 08 Jun 2025 07:01:13 +0000
Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: OTxgPuSaDarixmNBtyY4uoBhRyZ0jjrz0svkhy985VM=)
2: olYC3vt3bTWX5B6Daul0GiCdzRk.roa (hash: EU31+YZYAX7zRrR/hWxXMjIPU9jCSCk9p7wSptbJIM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:8c:be:9b:83:62:ec:fc:89:b8:6a:52:44:a7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Validity
Not Before: Jun 7 07:01:13 2025 GMT
Not After : Jun 8 07:01:13 2025 GMT
Subject: CN=50f1b0b4db8dd2996d53be4739a94c06a81902b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:63:c6:f2:b9:ad:1a:95:a4:46:1c:86:60:ef:
ca:d3:ea:1b:84:a4:15:90:9b:8c:1b:ce:d2:ee:17:
0c:ec:2d:60:e4:9d:16:ef:72:dd:9f:ea:64:05:ab:
c1:1f:a9:2d:6b:4f:ec:ef:9a:53:af:cb:be:a6:a3:
01:00:52:29:c3:43:3d:fc:88:ab:95:40:cd:cb:65:
64:9e:bf:1a:56:af:4b:a7:ca:a9:d8:43:fc:d2:78:
a7:44:14:3b:0c:b3:f0:ee:1c:03:08:c9:7e:f7:a2:
a2:9f:26:a0:b9:86:2e:f3:b6:1e:9b:28:68:53:69:
ac:79:6c:41:8f:29:3f:fe:4a:47:23:5b:08:de:bc:
a4:1d:b4:63:d8:5d:26:40:85:3c:fc:7e:f7:36:d0:
db:0e:0b:84:46:af:52:1b:c1:1a:71:bb:8e:41:62:
81:cc:01:c2:7f:e9:bd:cd:43:96:9a:6e:d8:bf:ab:
98:55:fb:1d:c9:3d:a2:d2:bf:1f:92:a0:4c:6e:ff:
71:13:c8:c6:3a:da:c4:1f:31:46:ac:f3:76:6e:63:
bc:63:13:60:b2:04:1b:c2:54:e7:47:a7:8b:0f:88:
f3:4c:e1:e3:fe:8b:ab:9d:66:72:59:2c:d2:81:23:
67:ae:95:80:ad:9f:68:8d:de:4a:4b:de:06:f3:d7:
f4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F1:B0:B4:DB:8D:D2:99:6D:53:BE:47:39:A9:4C:06:A8:19:02:B3
X509v3 Authority Key Identifier:
keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1c:d3:d1:b7:f2:f5:a3:84:ed:f5:3f:5a:1a:6c:39:36:5b:
3d:93:21:95:0a:86:33:66:90:bc:61:75:dd:fc:17:45:5d:8e:
54:d1:05:de:51:68:43:b1:36:a9:de:a1:c0:17:92:09:b0:41:
54:27:39:35:3f:cc:07:1f:7b:0b:de:d9:68:0b:d1:56:4f:9b:
ad:72:4a:12:53:29:0d:d9:b2:ee:05:6f:76:b7:e0:8b:56:a6:
c1:60:ac:da:4f:c4:16:b7:bb:7d:3f:ee:d1:ed:30:b7:00:2d:
cd:48:6c:0c:92:4d:99:0c:dd:6e:67:f2:78:e7:44:46:ee:6d:
39:61:50:d8:90:81:8c:b1:c0:3a:c4:fe:23:d3:3d:88:df:b1:
4b:b0:f3:0b:82:31:d8:77:08:17:9c:e0:3d:79:51:c8:79:47:
0f:89:2a:1e:f2:54:51:5e:74:24:b4:f2:b1:38:65:5e:2d:6c:
93:89:b2:d3:82:b7:2b:62:09:0a:42:9e:9f:e2:27:27:b9:da:
ec:72:48:80:9c:5d:56:12:23:97:50:dd:45:be:b1:87:42:00:
af:44:d4:3e:aa:4e:39:eb:02:16:cf:a3:f4:8f:00:99:d9:55:
32:9c:31:8f:76:36:74:e7:f5:3e:1b:6b:38:90:8f:31:2f:ef:
92:34:05:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:51:19 2025 by rpki-client