Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
File: 1-cGMsaUCf6FybxFLPv5io6l5zhs.mft (raw, json)
Hash identifier: ubt6RTRXRasFGb4S2x4dMzrEUwpqsxoOHVy09rYzTGM=
Subject key identifier: 24:D5:AD:67:5A:E1:0F:FB:91:7F:D4:14:CC:48:7E:5E:DE:51:AD:72
Authority key identifier: F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
Certificate issuer: /CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
Certificate serial: 0197488CA6095C374DFB1AAEE182DE60E343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
Manifest number: 04FF
Signing time: Sat 07 Jun 2025 04:01:06 +0000
Manifest this update: Sat 07 Jun 2025 04:01:06 +0000
Manifest next update: Sun 08 Jun 2025 04:01:06 +0000
Files and hashes: 1: 1-cGMsaUCf6FybxFLPv5io6l5zhs.crl (hash: 74/QhzpUuNV9jd5x6ofihL8RdubFf29f6vyHwmcSkLw=)
2: oKBWeiCdr72OFTmQ9qAC_2ODyWc.roa (hash: S0rlxTkwKd8+RpY5lx0VofPErbqrcMDFmRtkG28exLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:a6:09:5c:37:4d:fb:1a:ae:e1:82:de:60:e3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
Validity
Not Before: Jun 7 04:01:06 2025 GMT
Not After : Jun 8 04:01:06 2025 GMT
Subject: CN=24d5ad675ae10ffb917fd414cc487e5ede51ad72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:ba:6e:ff:d8:b7:33:f1:32:9e:76:04:51:
64:f3:ae:f3:e0:cb:b4:7a:51:2d:fc:7d:40:24:b9:
55:7d:28:19:f4:ce:4b:ff:0d:37:da:c1:3e:01:6a:
34:a1:a9:de:72:e2:5b:a9:51:4f:29:68:e4:c2:e9:
e7:79:b4:58:71:1a:a9:7a:84:1b:bb:5a:c4:41:85:
f7:2c:eb:37:e5:3b:e4:a0:08:5b:15:28:43:3c:00:
eb:d6:fb:18:e9:f3:cb:22:fc:f3:00:35:76:0d:3d:
1f:7f:c5:09:bc:1a:13:f5:a9:c5:64:61:c9:a8:90:
47:4c:98:c7:67:c8:28:ba:13:f5:d5:28:af:ee:11:
d6:cb:a5:5d:6d:61:77:d8:2b:d6:44:67:d7:e9:3e:
d4:4f:14:e2:66:8b:ef:1b:12:3b:d8:f0:2c:d1:8f:
2e:dc:ac:8e:1c:dd:a9:d1:4f:29:3e:44:2d:3d:5c:
ad:65:f6:24:4d:78:d7:5b:fd:3b:dc:56:84:82:da:
52:3c:c6:75:d4:fc:29:9d:8b:1d:06:25:3d:e2:32:
51:5c:db:8a:de:91:d4:a2:90:72:63:b2:12:8d:50:
83:b9:83:13:3b:55:07:7e:43:7f:f3:f0:74:f7:b7:
9f:3b:38:f5:4a:55:57:92:19:db:9b:02:07:51:70:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D5:AD:67:5A:E1:0F:FB:91:7F:D4:14:CC:48:7E:5E:DE:51:AD:72
X509v3 Authority Key Identifier:
keyid:F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:37:c4:2a:4e:2b:d1:d3:df:41:23:a3:58:3d:29:77:ac:13:
d0:8e:e0:e1:e6:57:d3:be:ba:a9:c4:bf:de:3d:4c:e4:74:80:
d2:4d:63:3a:3b:fc:9b:1b:83:e7:c4:2a:0e:55:ba:ca:36:d1:
5d:a6:e8:aa:b8:66:ef:bc:c6:de:90:a2:b8:6f:ff:9a:9b:74:
a5:87:8e:94:87:9a:a9:e2:b1:7f:fb:8e:ec:6a:6e:7b:71:cb:
3d:cc:6a:e3:14:ab:aa:92:93:f2:7a:b0:f3:e9:72:1e:17:68:
0f:d9:3b:1b:b9:3e:42:76:41:6d:ed:06:f6:33:49:81:70:ad:
f0:5d:81:00:de:70:af:47:1e:e8:9c:33:18:72:81:b2:cc:51:
2f:4d:d1:ed:8c:db:3f:f9:b8:55:c4:97:1f:55:2d:a5:92:9e:
24:dc:98:d6:19:37:ca:d8:17:2f:c6:7f:6a:54:2b:33:82:45:
7a:a1:cd:7c:f7:70:5c:34:6a:a5:df:bc:a5:0f:86:f5:91:d1:
e4:a1:d9:e4:23:44:d0:66:ec:6b:47:5d:a9:6e:c0:22:61:c8:
63:53:e9:ec:05:fd:35:8c:89:4a:88:85:e7:f4:af:c9:32:b6:
7e:b5:df:37:16:e7:4f:9d:83:a9:74:a2:89:79:43:25:96:34:
9c:1d:81:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:17:47 2025 by rpki-client