Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
File: 1-_YvdgYnP0GmzMjilWB288Ch61Q.mft (raw, json)
Hash identifier: vtHueVIeKmDiPNUCPO0sWMkNOEwZhnTG86q6EOprFPY=
Subject key identifier: 03:FD:1D:BE:94:5D:2E:F2:73:03:97:D8:9E:1B:63:A7:D7:F5:A0:19
Authority key identifier: FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
Certificate issuer: /CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Certificate serial: 01976395778B72D9888C6DD6FE6885835E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
Manifest number: 15AC
Signing time: Thu 12 Jun 2025 10:00:29 +0000
Manifest this update: Thu 12 Jun 2025 10:00:29 +0000
Manifest next update: Fri 13 Jun 2025 10:00:29 +0000
Files and hashes: 1: 1-_YvdgYnP0GmzMjilWB288Ch61Q.crl (hash: VnjNJmvDbmxmmIFmVnJLZ13o8iPwB8JTDJHX3qfxRK8=)
2: gVx18rt52MyPf0oqDqUou5AuUBM.roa (hash: vA3SGzj0FAH1RwjbpG6kC2zF7wZB8RzhXo7xrGq4Z4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:95:77:8b:72:d9:88:8c:6d:d6:fe:68:85:83:5e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Validity
Not Before: Jun 12 10:00:29 2025 GMT
Not After : Jun 13 10:00:29 2025 GMT
Subject: CN=03fd1dbe945d2ef2730397d89e1b63a7d7f5a019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b9:bb:79:63:ae:89:ab:3a:44:ed:b8:cd:9a:
3f:3f:5c:d3:b8:72:5d:12:89:72:f3:60:1e:fa:80:
71:ed:d6:ca:27:39:77:c9:23:e2:d0:25:57:11:fa:
c2:0e:d2:c1:f0:ea:db:48:71:67:6c:a2:a0:17:b6:
93:64:d3:ee:bc:8c:b7:fd:7c:1b:5f:8b:13:fe:64:
75:80:66:64:8e:05:a1:73:d3:79:c1:bd:c5:49:69:
d3:25:0d:c5:53:02:f3:e0:f6:45:b2:eb:ff:36:4c:
91:45:07:07:04:ab:6a:0c:d6:5a:2c:c4:37:4c:a1:
15:b6:17:97:c3:db:bb:57:cb:33:ad:a6:f5:fa:d0:
0e:b0:70:e6:ed:a4:1d:fc:f5:88:f1:7a:8a:84:66:
23:39:a1:f0:3e:47:74:0a:46:f7:9e:32:26:bc:d6:
fc:db:00:d6:25:fc:7a:22:29:42:fe:73:04:30:be:
6a:67:d5:b9:fd:7b:7b:f6:b4:85:c2:9c:c0:fd:55:
19:eb:b0:66:9c:69:9a:2f:91:c9:0e:dd:87:20:43:
cf:e0:4c:3f:58:d9:59:ab:84:ff:d1:5b:2e:63:8e:
dc:c0:ce:25:15:d0:9d:27:e8:89:7d:fb:c4:95:d4:
91:84:66:e8:12:5f:3d:0d:6d:02:72:41:58:78:8c:
2c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FD:1D:BE:94:5D:2E:F2:73:03:97:D8:9E:1B:63:A7:D7:F5:A0:19
X509v3 Authority Key Identifier:
keyid:FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7d:e3:63:28:b2:ab:11:ca:fb:35:78:78:d8:d8:12:a2:1b:
f0:84:60:84:5e:05:9d:4d:92:53:bc:d2:42:44:29:88:e4:49:
c0:56:bf:d9:14:d2:b1:5a:1c:b3:99:06:3d:22:77:7e:07:08:
e5:16:1b:bd:37:4d:88:fb:ef:94:c6:a1:24:d0:52:f0:0d:5f:
0b:c4:df:cd:e2:68:5a:da:ec:7c:39:78:18:b2:fb:8b:26:e6:
d6:08:76:74:e2:d4:8f:b7:65:3f:1d:41:1e:96:59:20:92:83:
b7:a3:7e:41:36:d4:69:1c:ec:1c:6b:f0:4a:22:36:18:57:55:
b7:2d:d4:ea:c9:da:50:ce:a9:c8:cd:ce:1b:54:ae:cf:aa:d3:
25:6e:30:1e:cc:a6:9e:20:87:79:5b:98:d5:15:67:82:9b:fb:
4c:2b:35:b5:70:3c:5b:55:c8:ec:f0:51:f4:af:c9:b9:e5:be:
c3:09:e4:c2:8a:6d:ef:70:af:0d:c2:77:74:d8:3e:e6:4f:d0:
05:ed:47:a9:6e:c9:f4:77:ee:3e:ab:01:01:65:de:75:4f:38:
00:d0:17:aa:3a:80:c9:95:0b:9f:74:93:8e:b5:7d:3f:63:2c:
83:e4:3b:b7:9e:96:bf:7e:34:57:d1:91:d3:ff:3a:13:b4:1b:
77:e1:a7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 12:20:57 2025 by rpki-client