Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
File: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft (raw, json)
Hash identifier: L3zoqTDiIrKpghT7zanM7QpJlkDQYDXDVU/vzcEwOPM=
Subject key identifier: F4:16:92:92:96:E6:E9:C2:92:10:D6:96:80:2B:E5:D2:E5:B9:82:00
Authority key identifier: FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
Certificate issuer: /CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Certificate serial: 019748C2DEB040641B056D97ACDF924BFB0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 05:00:19 +0000
Manifest this update: Sat 07 Jun 2025 05:00:19 +0000
Manifest next update: Sun 08 Jun 2025 05:00:19 +0000
Files and hashes: 1: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl (hash: B32ely8+EUImeSdrDs2fYcRnB3dqE8BAYQxFrV2NSIk=)
2: b1EekpPHczR9SbF16iWNQ3damig.roa (hash: Fw8tFU/rOTZrNv9R1o3/Px5yWIdWmaPwzJuJsuMKmH0=)
3: eADzDJE6P-qH0r5TYUNn_ncYKzA.roa (hash: PxBgbfMtKG6Jth9+kbRfrbslcA+mMm5JhYaaugK0nGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:de:b0:40:64:1b:05:6d:97:ac:df:92:4b:fb:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Validity
Not Before: Jun 7 05:00:19 2025 GMT
Not After : Jun 8 05:00:19 2025 GMT
Subject: CN=f416929296e6e9c29210d696802be5d2e5b98200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0e:3f:30:c7:58:b3:07:7b:b3:2f:64:ea:ae:
2a:da:02:8c:3b:de:4e:1d:08:33:49:0c:64:64:af:
50:73:91:ee:39:cb:a9:1c:fb:2e:97:12:5a:f3:2d:
e8:c0:7a:d8:92:2c:18:5a:46:81:e6:06:5b:7c:35:
07:0b:88:15:d1:26:32:4c:54:d7:5f:2b:d5:0c:c5:
63:45:2a:f6:a4:d2:2f:7d:f7:69:83:31:91:5b:0f:
34:99:eb:85:b6:65:6c:25:89:f8:6c:d8:17:c8:54:
5b:27:55:35:f1:dd:63:ff:df:c1:d1:ed:13:2a:75:
fc:27:83:d9:77:b5:af:a0:39:9f:0e:6b:ff:48:83:
72:0c:66:24:05:94:ee:38:77:33:d5:8f:dd:89:4e:
f7:7d:f5:06:03:57:f5:ef:c0:86:1e:cc:44:93:75:
7f:f6:cc:9d:4f:f1:10:be:b7:a6:a9:08:d9:25:ea:
c7:0f:49:9e:bb:33:42:6d:6b:78:25:58:ce:cb:ef:
b6:9e:91:d8:e5:5e:ca:ea:3a:cd:93:4d:28:f8:73:
42:b7:9b:0c:91:19:8d:f1:d6:9f:80:09:25:41:e5:
c7:9c:d4:71:e8:c4:e3:d4:67:b7:c0:c7:27:75:0e:
17:f9:01:ac:18:2f:89:50:de:28:68:11:22:8f:a5:
3e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:16:92:92:96:E6:E9:C2:92:10:D6:96:80:2B:E5:D2:E5:B9:82:00
X509v3 Authority Key Identifier:
keyid:FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:65:e3:0d:36:c1:dc:c0:e8:2d:17:9d:69:57:08:4d:8d:b8:
c0:0b:5f:c6:5b:15:fe:b9:cb:d5:db:3c:99:e5:78:4c:83:58:
90:d7:14:6e:10:50:5f:74:17:42:bd:f3:a9:c2:5d:f0:7e:75:
88:c2:7f:89:11:bd:e1:25:cc:92:f8:fe:0a:90:0a:5b:0d:80:
25:48:1d:4e:d0:5a:f9:93:40:63:b9:f5:7b:06:33:15:f4:35:
c2:eb:56:49:98:d0:e3:b5:69:f5:83:bf:4a:bc:4b:e1:4c:af:
cd:a5:29:ff:59:54:ba:27:76:6b:af:c5:db:d8:e8:b4:aa:9c:
19:4d:d2:15:cf:c0:02:44:15:f0:56:df:4e:01:cf:c0:5f:d7:
63:e7:3d:cf:b0:f2:d9:c8:ea:da:09:62:0b:a5:80:c4:2f:d7:
4e:e7:a7:3b:ff:8f:88:16:f0:bd:1d:cd:f7:61:b1:0e:45:c6:
19:47:ce:7d:0b:cb:b4:32:77:de:16:ff:c5:e9:c9:12:f9:4d:
68:73:f4:9d:2c:31:ae:bf:74:c2:24:b9:d0:c7:4f:c1:40:40:
24:5a:09:6d:78:10:8a:0c:c4:ea:77:2c:7b:02:1b:f5:1c:f6:
13:09:9d:00:34:e9:bc:64:93:af:e9:eb:c1:79:c8:71:17:58:
02:38:97:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:35 2025 by rpki-client