Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
File: isfq5knZVHsK0KsAerTopI3tTV0.mft (raw, json)
Hash identifier: jBeFOu6mylCVnW/tfecJT1xcgOZfX8QxdDKZAK8rijw=
Subject key identifier: 1E:EE:BE:26:ED:2F:2A:EA:72:96:F9:3F:F8:58:1A:3E:F0:BD:31:12
Authority key identifier: 8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
Certificate issuer: /CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Certificate serial: 01976884D2A8188567085410F9635342BEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
Manifest number: 1592
Signing time: Fri 13 Jun 2025 09:00:24 +0000
Manifest this update: Fri 13 Jun 2025 09:00:24 +0000
Manifest next update: Sat 14 Jun 2025 09:00:24 +0000
Files and hashes: 1: isfq5knZVHsK0KsAerTopI3tTV0.crl (hash: hQfi8Ii9064YegY7PLSDl9BngtNTp83cwK32MLmQ3c0=)
2: vASHsaghbXrziZGVrZp3z_dQ0hY.roa (hash: +D8Rri+Xk/SVSUJL6LzaxDMlSw5qtTcPP6AjI3TjSIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:d2:a8:18:85:67:08:54:10:f9:63:53:42:be:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Validity
Not Before: Jun 13 09:00:24 2025 GMT
Not After : Jun 14 09:00:24 2025 GMT
Subject: CN=1eeebe26ed2f2aea7296f93ff8581a3ef0bd3112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:50:5e:df:41:03:83:a6:de:6f:e9:0c:33:4d:
dc:88:fd:1e:81:b0:dd:b9:62:10:7e:eb:4e:3a:b3:
e4:82:a8:d9:c6:10:e4:b9:73:b0:6c:95:0d:f7:5d:
ba:ae:4a:79:8f:e2:69:dd:0a:3a:38:a4:2b:8a:bf:
01:ae:9c:99:bd:57:23:71:2d:e8:4c:11:6f:68:e8:
a9:08:f3:2e:42:ae:12:0c:8f:79:60:c0:c7:4e:eb:
7d:97:7d:a8:fb:1b:ec:13:64:82:dc:9a:2c:47:d2:
03:fc:4e:85:be:93:eb:8a:b1:10:66:3c:18:80:41:
c8:7f:78:14:80:a8:1f:4e:68:a6:f8:33:d8:eb:ec:
e6:b5:8e:c8:2f:2e:69:e8:85:fc:98:18:44:88:5f:
d6:4a:a6:56:c8:37:ba:bf:01:32:f9:9d:3a:0a:07:
da:37:9f:fb:67:a0:e6:45:fd:56:5b:c6:7b:ac:e3:
b0:10:7f:2b:35:05:3b:d8:78:83:27:fe:ab:6d:ca:
24:4b:42:93:17:d1:d1:59:fe:c3:1f:91:a3:1c:30:
cd:6e:b9:26:a0:93:5a:2e:25:a8:d1:e8:e5:75:1d:
b9:2e:f6:d6:05:a7:12:a1:87:1d:af:bc:a0:fc:b6:
df:08:26:49:40:20:85:4f:b6:09:8f:6a:5e:d2:75:
68:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EE:BE:26:ED:2F:2A:EA:72:96:F9:3F:F8:58:1A:3E:F0:BD:31:12
X509v3 Authority Key Identifier:
keyid:8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:03:d0:64:73:76:5c:6f:9e:54:dd:07:60:38:28:73:c1:98:
1d:93:60:29:3a:18:8a:db:0a:02:6e:02:11:ae:29:49:7a:83:
8a:1a:7f:f3:89:1d:64:ae:95:f8:02:6d:41:10:6e:7d:05:fb:
88:d4:27:3b:9c:b3:18:94:ad:c7:45:a4:30:22:d9:45:9a:a5:
64:43:91:b8:45:c6:09:2f:f8:7a:47:a9:66:03:51:20:63:18:
b7:e1:7f:d8:00:40:ce:59:99:d8:ee:c1:12:01:fe:e4:d7:ea:
50:98:66:89:f0:c4:26:93:42:b6:d9:db:19:d5:57:f9:07:90:
62:16:a2:60:34:a9:a5:a0:45:6f:3a:52:62:0a:b6:80:31:ed:
6a:23:fb:ac:71:c8:40:49:8d:36:a0:e7:24:05:2a:48:6c:cc:
18:97:eb:dc:b3:c1:8a:b5:df:26:6c:4c:d7:c0:39:82:65:00:
69:48:6b:c1:ef:7c:0c:75:12:c5:34:ff:e4:24:f1:36:c5:10:
7b:c4:29:24:f6:83:73:06:7e:f9:ba:4b:b4:1e:77:d6:4b:4a:
b0:a9:af:d0:ed:6f:b0:47:e8:cc:e3:db:f9:23:7f:c4:c9:63:
4e:f3:14:94:43:c3:ec:b5:30:99:72:f2:e7:d9:bd:dc:4c:ee:
7e:3e:7f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 10:44:07 2025 by rpki-client