Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier: f2JM9QeXBNqQBf/2vbfHz6Er0C/bFJI2PB8/9t0rLno=
Subject key identifier: 22:56:24:0C:9B:00:79:49:09:3E:2A:92:9F:23:49:AB:9F:66:3F:37
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 01974DE9F6DE6AB885516306B5DB51635493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 05:01:08 +0000
Manifest this update: Sun 08 Jun 2025 05:01:08 +0000
Manifest next update: Mon 09 Jun 2025 05:01:08 +0000
Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: R5BNvd/aNJE3gPxHkuZFSEf121sLeCfNWocpmU1IOd4=)
2: _kWvdqNfB5Qi_pth9OeMu1E5uoI.roa (hash: NWHqYOJDwR6XeYKKHls7B7q+f2asHmCl+FEc/+iucHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:f6:de:6a:b8:85:51:63:06:b5:db:51:63:54:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: Jun 8 05:01:08 2025 GMT
Not After : Jun 9 05:01:08 2025 GMT
Subject: CN=2256240c9b007949093e2a929f2349ab9f663f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:89:4f:3f:1f:81:5e:0a:b7:46:c7:bc:7e:e7:
2f:bf:68:4e:4c:27:cb:06:80:37:8f:de:20:9f:21:
c2:e5:13:9b:8d:61:ce:41:6f:5e:fc:c5:cf:25:c0:
c8:32:3a:78:eb:0f:e7:e1:a8:6c:1f:14:63:78:e8:
f3:df:02:8a:9e:6c:b4:f7:2c:d6:6c:88:b4:48:88:
c3:a5:cb:e9:63:99:dc:3c:97:c2:08:1b:ac:74:ac:
fb:9b:8d:74:9c:17:84:cf:80:13:6a:bb:86:cc:db:
9a:61:b6:8d:ba:b8:a9:08:e8:f1:f6:41:d5:57:10:
67:16:91:85:9a:82:2f:2e:9e:6b:32:92:53:03:e9:
88:da:97:17:45:3c:51:70:4f:de:e2:1e:d5:53:3a:
e5:2b:32:58:32:a8:05:9f:35:63:7e:f9:16:cc:2f:
92:0a:be:b5:60:11:08:ed:b5:f1:a4:09:b5:89:80:
9d:12:c3:18:c4:46:cd:e6:78:09:09:10:35:13:ea:
40:12:85:05:b3:a7:94:2c:c9:df:4e:ba:23:58:8b:
df:11:8c:60:00:58:a1:8f:d2:55:c5:17:a5:7b:4e:
82:63:ce:cd:0b:e8:fb:66:d4:9c:c4:65:a6:5f:3a:
1c:f1:5e:ae:82:7c:ce:b5:01:67:bb:7d:65:52:d5:
c6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:56:24:0C:9B:00:79:49:09:3E:2A:92:9F:23:49:AB:9F:66:3F:37
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2f:c8:4a:31:66:f1:2e:a0:79:50:eb:1a:9e:6d:98:4a:6b:
1e:30:98:8b:b9:67:7b:fc:70:46:7f:58:b7:a6:6f:01:83:29:
32:33:ca:78:e6:e6:1c:0e:84:05:dd:e6:b3:88:31:b8:31:9d:
d2:30:c9:71:48:8b:61:4f:79:2f:23:fe:79:3e:4e:0e:1c:e3:
30:38:0e:4b:11:b2:95:6c:f9:45:f9:d7:60:c9:96:93:12:c1:
02:c7:e2:df:18:7f:29:8d:ea:e1:9f:88:c7:04:ed:95:38:c8:
9f:f7:84:2e:ad:85:a5:9c:44:56:f9:f8:07:2f:5e:36:13:89:
fc:1c:ef:b4:f6:83:02:2f:41:25:91:d6:9d:1b:53:19:1a:71:
fa:19:9f:df:e3:04:f0:77:67:01:5b:1c:64:4a:b5:11:14:db:
10:ac:26:f4:5d:12:0d:e3:a9:37:1c:e9:d3:46:e0:2b:ac:4d:
d3:a6:70:60:08:6c:6f:39:3d:fa:e5:71:70:76:a4:19:22:6b:
72:1f:00:4b:40:9e:a6:b1:2f:86:44:6d:28:26:8c:b4:e6:c0:
fe:a6:fa:a3:31:55:f7:83:f8:08:d8:af:eb:88:80:c5:ec:a6:
a8:89:7a:75:1b:54:89:35:ec:de:68:41:4e:00:c5:e4:18:5b:
20:29:b8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:48:49 2025 by rpki-client