Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
File: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft (raw, json)
Hash identifier: XO89Dc8i9v034GJFNWN7Vm4ygmpXzXLFnyowTICwWbo=
Subject key identifier: 3F:01:2B:1E:BD:AB:AE:51:45:57:E0:EB:71:7E:91:54:11:0B:C8:2B
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial: 01974779C1BD8972DB58EBD4851D0AAE7899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
Manifest number: 9C
Signing time: Fri 06 Jun 2025 23:00:51 +0000
Manifest this update: Fri 06 Jun 2025 23:00:51 +0000
Manifest next update: Sat 07 Jun 2025 23:00:51 +0000
Files and hashes: 1: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl (hash: UEE1dclK3t0x82sLwcL6SpqGHRrl7mFPcbae/773KDg=)
2: Mhhz4wUnWbhungV9qmdIiiClbC4.roa (hash: vs++Lho+ybbPqiNcZp7StywgPzEvRC+QjSZW2g6/U6I=)
3: NYmwF4mBpF0BkmMcJbcBfbb7mNw.roa (hash: 4P8DST75fp7YFw+joLinoBciFGEOW9RYd1ghEZUg2No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:c1:bd:89:72:db:58:eb:d4:85:1d:0a:ae:78:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Validity
Not Before: Jun 6 23:00:51 2025 GMT
Not After : Jun 7 23:00:51 2025 GMT
Subject: CN=3f012b1ebdabae514557e0eb717e9154110bc82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2e:8b:0b:5e:e3:27:d2:5e:d8:1a:40:6e:e7:
aa:73:d7:61:f8:bc:d0:c6:1f:0e:30:2c:e3:2e:55:
75:f3:6a:70:0f:d6:bb:ad:42:43:b3:71:d3:79:8f:
c5:2b:aa:29:f5:ac:ad:6d:cc:38:10:ea:1d:d7:35:
4f:3d:d5:e4:67:d6:ef:47:7d:f0:fc:39:38:69:5c:
6e:a1:5c:12:5b:80:9c:13:2f:be:67:f2:b3:21:3b:
f8:3f:3d:84:ea:61:64:e9:ee:c6:9d:f4:44:2f:2c:
a9:20:c4:2f:cf:8d:be:23:d3:c8:3b:19:18:0e:c1:
90:30:7b:f4:4d:bc:cc:1f:a8:02:c4:1d:cc:81:8c:
c7:74:f5:d3:4b:18:a9:dd:30:5a:00:e1:3d:5f:0a:
d2:ca:a7:20:a7:ce:d5:18:b0:50:20:b3:ee:80:a7:
ca:4e:3f:f5:86:b9:c8:28:1f:e8:65:2c:35:8c:a5:
12:5b:08:01:6d:e8:a8:6f:7e:6e:cc:2d:84:93:f7:
c8:5e:49:5c:dc:9f:29:22:d2:6c:f0:51:4a:87:a0:
eb:74:72:b6:a2:fb:cb:0e:9e:b2:69:f6:03:0e:5d:
3f:12:0e:ba:22:c8:85:7a:1e:b0:4c:9f:82:2b:0b:
03:0b:b1:30:29:a8:13:d9:ee:11:f4:4a:b7:ac:ff:
54:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:01:2B:1E:BD:AB:AE:51:45:57:E0:EB:71:7E:91:54:11:0B:C8:2B
X509v3 Authority Key Identifier:
keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:bc:80:0b:0b:0c:7f:a9:01:0b:68:a5:6b:20:40:e3:34:74:
a6:35:e4:7a:25:29:2d:3f:f9:9e:64:00:a6:ea:70:c8:63:3c:
8e:2f:f1:18:5e:9a:1f:7a:75:13:4d:07:c9:41:29:d0:5e:46:
5a:7a:8a:8c:27:43:91:91:1a:ec:72:8b:fa:97:82:f0:2c:2a:
65:aa:f6:4e:1d:a1:8a:61:89:58:b0:52:19:94:fe:e6:9c:af:
a1:14:10:9b:3d:ec:bd:91:df:f5:61:9e:a8:90:4d:1b:ee:4d:
80:6b:41:61:e0:ca:88:bf:ea:9c:a4:17:f8:0f:f9:99:b3:e5:
31:35:12:77:58:06:7c:80:d8:1f:14:8a:81:1f:d2:2b:5f:f4:
b6:e5:d4:ad:14:d7:cb:78:67:23:17:25:20:a0:18:a6:28:ca:
7b:13:97:6f:26:98:ce:86:58:c0:a2:73:dd:81:a8:91:18:17:
51:1d:bb:18:f4:c4:3d:f2:8b:7b:31:26:20:8b:33:51:62:ba:
c3:8e:1e:ea:c7:b9:cd:38:3a:8d:44:b8:64:0d:39:63:78:f8:
5a:8e:20:6d:3d:3f:2b:5d:4f:20:5a:9c:ac:1b:d6:ea:d0:46:
7e:20:bb:c5:d8:53:cc:1d:7a:4f:d1:9b:49:d4:99:9d:82:3c:
a2:30:62:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:33 2025 by rpki-client