Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
File: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft (raw, json)
Hash identifier: /cJZbLY9P+vYUrWFXmMlTVUd80RQ7RLXu/a7rJq8rvo=
Subject key identifier: 55:FB:96:D6:4A:D8:52:3E:E9:90:90:72:7F:CE:82:9D:3F:D0:94:58
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial: 01974AE8F43748117BD8EEA9C0590CE94289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
Manifest number: 036B
Signing time: Sat 07 Jun 2025 15:01:10 +0000
Manifest this update: Sat 07 Jun 2025 15:01:10 +0000
Manifest next update: Sun 08 Jun 2025 15:01:10 +0000
Files and hashes: 1: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl (hash: G9JhJiKueDKcsuKRQOP8oX/WNxqEis/Tvlv0e2kdD3A=)
2: OWBphSnGzM3NfjUoWcPjDVRSYgc.roa (hash: Z7ei4v1I8GPTdYYpZ1qHi9JiBDA34PMAtoRsAnkH2B0=)
3: mcI_iz_jLMF0m2ytiShNIW2Y0XI.roa (hash: MlJtJ+9IYVgqHxEydx7ywPk31bzQHuAZBNNJFqPMbXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:f4:37:48:11:7b:d8:ee:a9:c0:59:0c:e9:42:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
Validity
Not Before: Jun 7 15:01:10 2025 GMT
Not After : Jun 8 15:01:10 2025 GMT
Subject: CN=55fb96d64ad8523ee99090727fce829d3fd09458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:08:21:8f:1b:a2:1c:bf:3b:23:d6:47:86:
eb:fc:72:e9:8a:7b:70:a3:06:0b:b3:d0:0b:a6:e2:
b0:86:93:db:cc:9c:b4:67:d5:a2:9c:a3:96:bc:8f:
f6:0b:d7:e2:bc:fe:bc:e0:40:ca:aa:2a:d9:23:36:
96:aa:e8:47:bf:2c:3e:30:6e:54:ca:ca:8d:93:6c:
54:58:e1:16:34:e9:ce:c0:0c:a0:68:9e:7c:60:02:
a9:90:c7:bd:bb:6f:01:79:14:93:90:ec:d9:47:5b:
67:5f:26:85:7a:ca:f1:40:95:81:22:f8:0d:94:e1:
11:65:bc:32:9c:d8:5a:55:0b:e6:dc:fb:25:59:84:
af:0d:5d:b9:72:fe:9c:e7:d5:6c:e8:eb:68:61:3c:
fe:23:f5:ff:91:c4:ed:ce:9b:3c:f3:2b:2a:e9:cc:
6f:52:2d:b2:32:89:2a:5d:34:74:8d:92:5f:06:c8:
ea:cf:3d:70:f5:29:21:ef:5b:51:1e:50:67:4e:c6:
da:7f:dd:ca:dc:47:a5:f0:43:f5:5d:06:cf:fe:f9:
73:3a:c4:e3:b0:9f:a2:83:5c:1a:b4:35:e1:53:d4:
c8:d7:ae:77:c6:c5:cb:92:b2:1e:77:91:cf:9f:c9:
5b:25:5d:f1:58:3d:25:ef:24:b1:86:1e:a6:56:aa:
d7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FB:96:D6:4A:D8:52:3E:E9:90:90:72:7F:CE:82:9D:3F:D0:94:58
X509v3 Authority Key Identifier:
keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:aa:4e:75:4b:93:f3:d2:8b:66:f0:3c:7a:3b:53:f0:96:c4:
f5:c0:d0:d7:62:ee:34:bc:e3:a1:53:e3:35:1b:d6:19:40:f2:
8d:37:33:ab:e6:1b:3c:c9:3c:e3:a9:e5:8c:7c:ae:13:e5:de:
93:10:4b:b4:02:b0:3a:8d:16:cc:30:ea:b5:bc:65:b3:33:7c:
f7:1a:d9:6d:5d:d6:ce:bc:83:f0:ff:2d:1a:b6:04:59:d8:f1:
28:14:db:3b:45:67:d5:e0:81:42:8f:9a:33:2d:8c:bb:d2:e3:
7b:fa:8b:5b:30:00:7d:51:f5:b1:b8:01:0c:d3:ae:cb:00:12:
a2:39:60:eb:57:4d:39:2f:e1:ac:f4:b6:b3:0c:a8:04:ac:ba:
08:98:f4:87:0e:80:88:37:80:12:63:13:2d:2e:93:9f:80:c9:
c8:ac:bb:d7:e7:7e:40:c9:16:29:fb:99:04:34:d6:dd:55:d2:
9e:dc:92:e2:38:9e:68:23:cb:45:50:ad:ba:26:a3:66:89:11:
d8:0a:1f:4c:c1:dc:54:20:59:ec:d7:09:b5:cf:4a:d0:e4:39:
e8:6d:57:32:27:40:6c:1a:c8:43:f0:60:69:63:91:75:be:ba:
a4:b1:24:ed:67:f3:e4:22:8d:05:76:fc:51:29:d1:f3:ee:2f:
f9:c2:97:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:42:41 2025 by rpki-client