Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: ynFvhlDubC3m15EFPHmJ16SML0Av9W9CbcV8DvmEc3I=
Subject key identifier: BF:1C:73:0D:C2:44:7E:1C:1E:E5:6A:37:50:FF:7C:FF:32:E0:33:16
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 01974967D05E8898AC28FEA233A0FF674C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 0F22
Signing time: Sat 07 Jun 2025 08:00:29 +0000
Manifest this update: Sat 07 Jun 2025 08:00:29 +0000
Manifest next update: Sun 08 Jun 2025 08:00:29 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: YIvAxRotC4LeNj+hg5V0JhyiEKbFLL1LDSLxJW4DUl8=)
2: VXcC-Aoxwj-rTTGa_uO04BMN16g.roa (hash: VurFkBc53EnvckMEwSnM6ZAN10rC6gV5KJRXaTV9e/k=)
3: jyRg9rzyp13wzC9lPn-bQBVk9SM.roa (hash: DykO+WlsvnZBAvuruj+gmcKA6ANC0St445Gn0td25pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:d0:5e:88:98:ac:28:fe:a2:33:a0:ff:67:4c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Jun 7 08:00:29 2025 GMT
Not After : Jun 8 08:00:29 2025 GMT
Subject: CN=bf1c730dc2447e1c1ee56a3750ff7cff32e03316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9c:5d:df:74:6a:2b:1b:7b:ee:6c:d2:64:02:
35:24:ae:22:1a:d9:73:fc:b3:60:59:fb:d2:20:2e:
9d:e2:77:12:20:23:52:ff:fe:2e:9c:37:d5:34:76:
68:0d:56:79:ef:96:19:07:3a:06:be:06:f6:ef:7d:
7d:b8:1c:87:ab:78:4e:df:f9:ed:c8:b2:74:42:22:
53:8e:2c:e9:44:6c:4a:72:78:78:f4:d3:a0:ca:62:
2c:7f:8d:8b:27:5b:31:41:90:a6:a6:ff:d6:5e:9e:
29:44:4a:27:51:cb:fb:be:e1:86:8e:1a:62:7c:1b:
95:ee:2b:30:a8:d8:0a:a6:c4:a8:b6:1b:97:33:02:
f5:5c:cb:a5:ce:2c:68:21:c9:81:27:07:83:93:12:
df:2c:ad:02:47:40:49:76:fc:85:34:c3:dc:d2:bc:
3a:2d:c6:1a:33:6d:24:40:6c:b5:ee:b2:0f:8e:87:
48:59:fd:09:eb:68:05:81:a5:c3:eb:dc:3c:9e:19:
13:51:b7:d0:48:f8:bd:fb:1b:e0:e3:b9:44:32:cb:
bc:5c:29:0f:84:fb:a0:05:d1:79:79:39:00:6e:c9:
22:cc:c4:fd:de:ae:c9:31:95:24:41:ed:d1:a2:45:
a5:9a:cd:ef:02:bb:d5:a8:c3:ec:f5:03:02:23:45:
c4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1C:73:0D:C2:44:7E:1C:1E:E5:6A:37:50:FF:7C:FF:32:E0:33:16
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:83:98:b5:b3:5f:60:08:b1:1f:e9:3f:cb:40:f8:3f:b7:92:
d0:f7:00:a4:66:94:26:b5:26:28:d9:37:01:d0:90:06:96:92:
ca:1d:b2:22:60:78:f8:be:48:72:99:a5:3c:99:cf:53:fb:31:
4f:2f:87:0b:b4:46:32:fc:f2:a2:b6:4c:27:04:fb:e0:1b:f2:
52:57:75:e8:3b:03:92:75:ab:63:1f:0f:bc:95:1b:0a:c1:d5:
a3:7e:99:be:af:c4:2b:8d:b2:d6:43:e0:28:88:97:01:1a:35:
85:60:83:7e:3f:64:fa:da:ac:59:f7:78:99:58:65:1f:94:3a:
15:1b:84:c9:05:5d:c7:8f:36:9c:37:ff:62:2b:f1:15:70:2c:
64:ec:6e:38:ca:53:1b:94:c6:e4:8e:3b:ad:4b:ca:26:ca:2f:
dc:28:0d:1f:74:c6:12:e6:69:b7:62:c4:62:e6:9e:c8:5a:b4:
1c:fa:5d:17:f0:ac:53:ce:cb:67:84:0c:48:81:8f:ea:1f:0a:
22:57:9a:78:48:9c:71:38:d9:0e:21:78:bf:ac:a5:12:00:3d:
7b:85:e8:00:f5:3d:5c:08:27:58:3c:f5:75:19:4e:f4:8b:37:
20:e4:ac:a1:6f:5d:c2:9f:f0:cd:8d:5b:12:d2:d8:10:3b:58:
13:a9:54:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:05:00 2025 by rpki-client