Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
File: 1-VA8B1ppBVa9RiEiskaZ4baxkng.mft (raw, json)
Hash identifier: ZZ0kWGuSaR7Ik2t1TIhSywfx8o8lgNIBCehpKfQE1OE=
Subject key identifier: 3C:51:83:69:4D:2A:BB:A9:5E:2C:F6:66:59:4F:BF:9F:22:4C:4E:EB
Authority key identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
Certificate issuer: /CN=f9503c075a690556bd462122b24699e1b6b19278
Certificate serial: 01975E01C4D251E91F4ADC169BF49D4EBA5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
Manifest number: 158F
Signing time: Wed 11 Jun 2025 08:01:03 +0000
Manifest this update: Wed 11 Jun 2025 08:01:03 +0000
Manifest next update: Thu 12 Jun 2025 08:01:03 +0000
Files and hashes: 1: 1-VA8B1ppBVa9RiEiskaZ4baxkng.crl (hash: zL5SjFZ4/PEVsi2SoE9ujGODwWl4cx7G4eOKg3eDd8U=)
2: p2SVo4qsSiAegswh4Tt4B2CgnX0.roa (hash: ZR7WcDeaKIDHi9EqUsqBzkr/KcnAMrpHKscQ/Pybjlk=)
3: q2ZLX08w7-Dcrgr57h1hgcnfkXY.roa (hash: uFC0sIXPmgIMFYS0E5zDcKQoPca0pnQPm/3b/35uS2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:01:c4:d2:51:e9:1f:4a:dc:16:9b:f4:9d:4e:ba:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9503c075a690556bd462122b24699e1b6b19278
Validity
Not Before: Jun 11 08:01:03 2025 GMT
Not After : Jun 12 08:01:03 2025 GMT
Subject: CN=3c5183694d2abba95e2cf666594fbf9f224c4eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:10:cb:54:ce:f9:39:b7:ec:c2:c1:74:83:a8:
76:54:84:e2:29:d1:bb:7a:b2:30:f6:06:07:7b:8f:
2a:88:f3:fb:c7:90:18:e8:6c:d3:26:a1:47:7a:4e:
38:f1:61:22:48:a7:45:37:33:e8:f5:fd:f1:88:a1:
24:1f:66:7b:26:dd:0f:9a:bb:61:ca:eb:58:26:c4:
c6:4f:f3:ee:13:4b:92:77:fd:ee:f4:29:dc:85:e7:
21:9e:ba:60:8f:7d:b1:9c:db:89:06:d3:39:7d:e8:
24:ee:ed:54:20:ab:7a:99:13:f7:5d:b7:04:1d:3e:
25:e0:4e:08:76:ac:35:0d:5b:f9:28:69:86:6a:b2:
0a:50:cd:c0:4c:de:5e:08:24:c0:29:ac:fa:e3:49:
4c:53:b6:b8:53:ea:3f:1e:fb:e7:ce:88:86:07:e1:
84:a0:aa:21:46:f0:f9:10:2d:d4:f2:6c:d8:88:e1:
b6:3d:ad:80:5a:d4:94:d2:94:81:88:8a:f8:bc:bc:
ce:e4:f2:96:03:6b:c1:9d:12:1c:d3:bf:af:c7:87:
e2:51:db:28:84:46:0e:71:f5:ae:b5:01:f0:54:a1:
ad:6e:58:f7:75:2b:53:ec:3f:94:7b:e8:c4:fc:3b:
76:c9:0d:cc:f7:cb:2e:3e:34:19:38:22:75:96:46:
46:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:51:83:69:4D:2A:BB:A9:5E:2C:F6:66:59:4F:BF:9F:22:4C:4E:EB
X509v3 Authority Key Identifier:
keyid:F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:01:26:d6:bf:dc:d8:6a:a3:f2:b3:92:93:cc:32:af:00:85:
0d:d9:bb:d6:86:c3:62:b6:87:e6:46:41:43:58:83:6d:32:73:
e8:5a:0a:1c:52:44:a4:70:57:b3:ca:44:a9:28:d2:1a:a8:63:
86:83:c2:6f:bf:22:5a:b1:a5:72:b5:73:9d:09:fc:55:4a:14:
a6:7c:a6:59:dd:b4:58:f6:b2:7c:ab:fa:53:cf:72:8c:2a:df:
56:7b:7c:d1:32:f6:7f:5c:96:b8:83:4d:f4:17:87:28:76:35:
90:50:3d:ba:fc:f4:12:26:57:25:66:23:84:43:fd:93:c7:4c:
c2:6a:f6:8b:62:73:2b:db:8f:40:92:66:f2:96:a9:50:25:18:
cf:cb:c8:eb:a7:e9:c0:e9:5e:b3:50:4a:76:d5:c4:3b:80:aa:
1b:42:2b:d5:c6:df:3d:7d:19:49:ae:b0:38:f9:9b:eb:c7:f6:
cc:cd:0a:4d:57:e6:c8:e9:35:20:46:a4:f0:47:9d:62:1b:b0:
dc:9d:1b:b6:10:6a:c2:82:52:ff:f7:1b:94:eb:d9:3b:d3:81:
b1:d9:0d:16:8e:39:4b:fb:8c:96:ce:f4:7b:81:b4:c8:36:6f:
bf:d2:89:d8:64:28:92:b1:57:92:4a:18:be:2b:d0:fb:c1:08:
43:d4:6c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:58:39 2025 by rpki-client