Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json)
Hash identifier: GU8+TMKmLAX4Q4708wBWzJ7cTJzOtZQrJ3hVxlX1ngg=
Subject key identifier: 9E:7D:83:8E:00:45:09:26:B4:BB:46:62:CE:AD:59:0F:15:0A:CD:16
Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
Certificate issuer: /CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Certificate serial: 019753B496AF1A5F5ED066B102634D790266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
Manifest number: 0ABA
Signing time: Mon 09 Jun 2025 08:00:33 +0000
Manifest this update: Mon 09 Jun 2025 08:00:33 +0000
Manifest next update: Tue 10 Jun 2025 08:00:33 +0000
Files and hashes: 1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: VPu5qMzMLIxcNvlHQsVnHf2e7jz+1BVaT8zVi6iOqXI=)
2: 17Ijw7DnA-ky4M-qBTdOY4I7ec4.roa (hash: iu+mQ1jbZcSsyxSnbAMCeHovGJfrloyLqIxmClTwTuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:96:af:1a:5f:5e:d0:66:b1:02:63:4d:79:02:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Validity
Not Before: Jun 9 08:00:33 2025 GMT
Not After : Jun 10 08:00:33 2025 GMT
Subject: CN=9e7d838e00450926b4bb4662cead590f150acd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a9:1a:09:35:86:f5:c6:5e:fa:dc:06:65:72:
b2:e6:e1:93:b0:2a:64:29:5d:49:40:f9:3d:36:54:
e2:9f:fb:2a:7d:8d:c8:ee:f8:e0:1a:ff:21:07:59:
69:42:e3:2a:2b:da:32:dd:87:ea:7a:db:94:eb:b2:
36:b8:3a:52:22:6d:53:46:e4:af:de:0f:42:33:7b:
6a:ac:a0:07:86:07:f7:1d:a4:f1:61:3a:a6:2f:da:
33:44:c1:68:3b:d0:54:60:4f:5d:e6:73:8e:f2:7e:
7e:05:3f:9d:70:aa:f3:fb:27:b9:79:0f:d4:21:21:
e9:39:f4:f2:30:18:07:50:52:ae:e2:65:4b:10:c9:
aa:93:0c:71:a3:93:ac:79:c5:71:99:7d:ef:25:0c:
91:4b:1e:b5:b0:7d:0f:0a:ce:e4:06:c9:76:aa:ca:
45:dc:3a:69:03:2a:a3:cf:02:52:28:cd:e7:18:0e:
c6:53:d9:01:9b:3b:f9:b2:93:fb:bd:fb:15:79:cc:
fc:92:c3:d8:32:a8:53:25:dd:b5:fe:4e:f3:4e:f7:
96:b8:98:d9:c5:e0:65:95:c6:da:62:99:3a:d5:9f:
ef:fb:88:a1:8c:0d:74:61:16:bd:5c:92:8a:bb:16:
bc:f3:0e:e9:20:01:7c:7f:73:5b:31:32:86:16:dd:
5d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7D:83:8E:00:45:09:26:B4:BB:46:62:CE:AD:59:0F:15:0A:CD:16
X509v3 Authority Key Identifier:
keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:82:92:3c:1c:96:f3:07:61:1b:af:84:13:4d:63:7c:2c:a1:
bc:cf:4a:2e:96:29:97:74:e5:64:2b:54:b9:6c:32:76:03:14:
aa:0f:21:ba:6a:c0:ac:67:9f:89:95:c6:20:c7:32:7e:79:c1:
46:c5:df:d5:75:5a:bc:d1:47:18:7c:f3:c4:75:1f:b7:77:4f:
33:49:3d:0f:15:aa:c8:4a:3a:ce:86:92:ad:dc:6e:60:84:aa:
f0:2e:19:a9:38:31:13:e9:10:15:9f:ab:a5:cf:07:96:1b:5b:
cd:9e:75:f7:a6:5e:39:66:27:f0:95:05:47:da:ed:43:70:52:
a7:d5:b5:bc:87:b6:fd:e8:d2:20:09:da:3f:d0:bf:cd:ec:86:
cf:fe:43:8f:42:41:a3:5c:55:85:5a:44:81:8e:92:13:90:e3:
db:14:ec:00:f7:90:6a:90:c2:6b:30:12:ad:16:0e:01:52:c0:
9a:b5:a3:59:4a:36:7c:32:26:f6:d4:db:be:34:eb:14:d9:a8:
72:95:ff:f8:ec:b2:e8:54:f3:b8:9c:18:00:4e:d2:dc:e5:7f:
0c:f0:81:4e:2e:08:7e:97:05:15:13:de:96:42:04:08:10:91:
ba:cf:43:01:d3:7d:2d:a4:eb:cd:15:45:8a:d0:01:63:59:6d:
4e:a8:36:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:25:41 2025 by rpki-client