Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: LRUP/W+ABAuThvlfaIh3vGxBzA5nVqwVHZm68E3SnDU=
Subject key identifier: A0:1C:BC:C5:BF:8C:DC:2B:62:8E:06:4C:73:C2:2F:7B:F0:1D:C7:2E
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 01974BFB662283A48411E9DF070995A1D4D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 14FC
Signing time: Sat 07 Jun 2025 20:00:56 +0000
Manifest this update: Sat 07 Jun 2025 20:00:56 +0000
Manifest next update: Sun 08 Jun 2025 20:00:56 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: jpIZZZ+gBnW8Rhsz8Da6WXsIg+uPm0JpFNlze71eRm0=)
2: 8Ja6nLmqn5rWkD8bJIXyJiseunA.roa (hash: 0Zo4/0JR5pHj4KIYK41VyhNWjJ7czQTS1SR9Du+4qQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:66:22:83:a4:84:11:e9:df:07:09:95:a1:d4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Jun 7 20:00:56 2025 GMT
Not After : Jun 8 20:00:56 2025 GMT
Subject: CN=a01cbcc5bf8cdc2b628e064c73c22f7bf01dc72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:f4:63:c9:9f:3f:74:58:fa:07:10:45:37:
99:a3:25:00:48:ab:40:2a:6d:14:7d:e1:09:99:c1:
8b:fb:18:6d:0c:95:fb:ca:1b:7c:e2:d1:8c:d7:8e:
72:c8:b0:29:9a:9f:83:9e:3f:59:90:62:5e:a1:d5:
fe:0e:e8:ed:e5:fe:b9:ff:0d:5b:6f:7b:a1:50:d0:
9a:f3:4d:d4:64:c7:ea:a0:dc:66:5d:8f:1b:cf:de:
7d:7b:3e:eb:8c:e3:f8:e8:51:d3:f0:e4:76:3f:bd:
06:6c:24:4f:e1:50:17:ab:7a:8e:48:a4:5f:7a:02:
c5:67:e4:d3:35:c9:d3:7b:5d:34:de:ed:73:bf:f7:
3b:ee:fc:8d:87:19:90:b6:8c:4f:3b:e0:12:d5:0a:
58:a0:c2:ab:1d:91:98:d1:83:c3:30:0b:3f:5c:4c:
b0:ed:ff:51:2c:cc:0e:f1:20:48:30:80:7a:90:43:
36:7f:59:d0:e4:ae:85:db:05:f3:90:75:45:7c:06:
04:e8:d5:ba:ad:df:16:f0:f9:4e:16:ab:8d:2d:ab:
ca:11:53:ff:9b:8d:e5:f1:09:1b:ae:b9:64:d3:1e:
a2:44:ad:60:8e:b2:25:31:85:f4:d5:68:f2:42:c1:
d7:ff:df:74:ef:2b:4f:db:41:65:7b:d6:0d:e5:54:
41:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1C:BC:C5:BF:8C:DC:2B:62:8E:06:4C:73:C2:2F:7B:F0:1D:C7:2E
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:85:11:4c:45:49:48:76:68:81:8f:f9:e0:38:c8:08:1a:0b:
ab:65:14:2c:7b:02:c4:9d:ae:51:92:86:30:2e:d6:49:9c:e5:
87:08:6b:3f:a8:c3:90:d4:a5:a5:9c:b4:21:17:d3:fa:e9:15:
3b:f5:ca:a2:3c:b0:83:e6:db:17:61:7a:f0:d7:54:53:58:9b:
3b:11:36:2f:71:23:c1:70:bc:bd:ae:b5:08:0b:d3:5c:5e:78:
a6:0b:b3:a7:09:5d:61:c9:9c:ed:c6:60:c4:6f:ce:a1:75:af:
eb:c4:77:af:17:15:79:db:ac:c6:bc:63:46:9b:a3:38:f3:ef:
06:cb:bf:29:4d:62:59:79:60:51:5f:a0:65:d0:86:13:dc:6b:
da:b1:8b:c3:f4:25:3d:0c:f7:85:9a:2b:0f:87:db:da:73:42:
4f:1e:74:d9:5b:9e:7e:00:e0:23:dd:ad:bf:25:86:88:a6:76:
3d:75:57:b9:c3:27:8b:a0:66:08:c2:3e:a1:45:d9:c8:c5:b4:
e9:49:ca:70:68:dc:fc:10:f1:67:ab:44:61:b5:a1:cf:d0:a7:
7e:eb:ae:d1:44:e1:3f:1e:d7:05:5c:21:61:af:3f:cb:bf:70:
9f:a7:34:6b:f4:fc:b1:d2:8f:89:80:4d:4e:d1:e8:f1:24:85:
28:be:17:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:48:39 2025 by rpki-client