Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier: 5Il28eeulqo8QUgMD/BDDeXCkz7f3FjqvV5p4ggvYeU=
Subject key identifier: 47:CE:8B:8E:04:CC:11:43:40:9F:B5:20:F7:2F:08:70:90:64:94:15
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial: 01974AB18C8B8B64830B12CA4514A0864036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number: 0C1F
Signing time: Sat 07 Jun 2025 14:00:39 +0000
Manifest this update: Sat 07 Jun 2025 14:00:39 +0000
Manifest next update: Sun 08 Jun 2025 14:00:39 +0000
Files and hashes: 1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: MFh52x9NOHvUK1Qlbo/q8zmzIpNhXnFmDAqVH5biVOo=)
2: QFnY02YmfQGJ4URcdKc-UJCZjYo.roa (hash: cz0+d02fJHBBngQvBEuS7ucPucnAX57nkrsYbr2NfQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:8c:8b:8b:64:83:0b:12:ca:45:14:a0:86:40:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Validity
Not Before: Jun 7 14:00:39 2025 GMT
Not After : Jun 8 14:00:39 2025 GMT
Subject: CN=47ce8b8e04cc1143409fb520f72f087090649415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3a:0b:58:de:fa:35:f6:ef:1d:91:ac:9b:a6:
65:1d:98:e8:ae:f2:55:5f:57:2d:a0:09:5b:95:ad:
20:23:8b:04:3a:4f:e8:42:c3:da:31:ee:f3:d1:51:
28:29:f4:80:43:99:d6:75:14:93:ba:64:e8:f2:48:
2e:ba:66:3e:40:0a:89:f6:c9:78:5a:1e:1b:67:ed:
ae:0a:e9:a2:0e:f3:3b:db:e3:94:55:01:a6:f9:ec:
81:a8:b6:ed:15:50:4a:27:38:89:5c:c8:08:a6:8a:
2d:a0:02:12:bf:15:85:2e:82:1b:4d:9b:27:30:f8:
04:15:02:15:33:ab:36:e1:01:fa:16:42:ea:5b:d9:
ba:0a:98:a2:b5:36:d6:26:8d:ed:1a:14:e5:be:d9:
b2:da:df:f3:7d:c4:c0:fa:1e:0e:98:c8:0a:d3:ed:
1a:05:54:19:cd:da:c7:75:66:e7:03:7d:3e:0c:cc:
50:15:4c:bd:c6:a6:06:1f:bc:51:58:07:c2:db:07:
1b:7c:f1:5c:60:88:d3:52:74:74:2d:18:e6:7e:95:
e3:38:73:d0:dd:f7:cc:7d:80:ea:4b:33:37:4f:1f:
f6:70:a5:f1:dd:2a:ec:b0:84:dc:aa:02:1d:b3:f3:
3d:ba:0a:41:c8:2b:b4:b7:41:78:99:61:94:fb:4c:
cf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CE:8B:8E:04:CC:11:43:40:9F:B5:20:F7:2F:08:70:90:64:94:15
X509v3 Authority Key Identifier:
keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:07:e2:f9:40:48:f7:fd:ef:aa:c4:08:94:0c:e7:0e:f3:81:
1e:9b:3c:29:02:37:c0:40:ab:b1:18:b7:5f:42:9c:73:b0:ea:
b8:04:cb:36:d4:31:2c:44:71:49:95:56:1d:09:6e:6a:30:2a:
52:b0:49:99:1b:bc:33:dc:11:71:0d:d9:4d:02:05:87:0b:bf:
b4:1b:80:99:7d:fe:81:79:e4:a7:0e:ce:99:c3:cd:90:2b:d1:
8f:6e:58:29:55:10:3a:8a:a6:0d:ae:c4:f0:e4:ac:c0:68:05:
61:e5:44:69:84:b2:0d:0d:4a:9b:34:0a:b2:64:6f:bb:9f:fd:
d2:e7:c8:53:11:18:bc:72:f4:1b:d2:81:45:46:12:a0:ca:38:
90:66:e5:44:ff:2b:6b:c4:e5:75:af:78:c1:e4:d0:b9:4a:26:
9d:d7:c7:41:3b:94:ac:67:eb:e8:f3:8d:fd:ab:de:b6:e1:6a:
da:d6:02:23:8f:88:c7:94:24:e6:eb:60:10:9b:03:8d:40:ba:
91:02:92:11:e7:ed:3a:98:e0:66:ef:42:2a:c5:46:6c:2e:9c:
bc:0a:20:2d:36:76:1e:d5:67:4f:d8:4f:a4:81:8c:61:6d:5f:
4b:1b:ab:12:59:10:26:75:70:05:2c:bf:4f:da:3a:77:4e:af:
6b:47:99:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:09:15 2025 by rpki-client