Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
File: 1BcD2zAgzB7y_XEJGkaPSmScI48.mft (raw, json)
Hash identifier: WDWuYvF85X7A9AyJPaK/q5XRrB3WZTqbw00yp1YEVNU=
Subject key identifier: 3A:F4:71:11:55:99:4C:70:D1:3B:E4:71:EE:E7:BB:DB:6F:CF:6F:E8
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 01974EC53B87A850B7FD146CD623F84BB456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
Manifest number: 1593
Signing time: Sun 08 Jun 2025 09:00:37 +0000
Manifest this update: Sun 08 Jun 2025 09:00:37 +0000
Manifest next update: Mon 09 Jun 2025 09:00:37 +0000
Files and hashes: 1: 1BcD2zAgzB7y_XEJGkaPSmScI48.crl (hash: kZ+MpRWlIqefGswlG1DhiqdoXYVWC8ebo00vldrztBo=)
2: JoOIhSAqKdpIXX40gcKLusWeNyE.roa (hash: XGkJT13q1QJrNBJYi9R9LyTuLa34GhQ10YEFypzjsJU=)
3: dumiLPj8dIgbkOu_ODKjUhmF_rM.roa (hash: kFpbhODmKPkVFS8czIjYIk5us47dHmcmchszyizHwz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:3b:87:a8:50:b7:fd:14:6c:d6:23:f8:4b:b4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: Jun 8 09:00:37 2025 GMT
Not After : Jun 9 09:00:37 2025 GMT
Subject: CN=3af4711155994c70d13be471eee7bbdb6fcf6fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:84:b3:e1:23:6b:a4:fa:81:05:9e:6f:91:
a6:5f:c8:01:68:3e:d2:68:d5:c6:87:47:ff:ce:70:
1c:4f:fb:6d:aa:d9:9f:6b:57:b7:9b:67:40:9c:c1:
55:b8:17:b2:98:50:7f:9c:de:18:85:09:0e:84:b9:
21:2f:46:a8:15:31:d9:6f:cd:98:f7:8d:9d:d3:69:
ab:f3:01:46:e2:28:f6:02:3b:f5:5d:e7:ba:59:3f:
ff:67:ad:8b:bf:8e:55:1c:6e:51:36:49:bf:5e:01:
7a:15:32:99:5c:71:34:be:45:dd:f3:59:fa:2f:7d:
0f:da:30:b3:5a:93:f1:85:6e:1a:70:bd:a1:7c:37:
47:3a:60:15:ff:14:54:a5:ae:c0:d4:07:92:42:dc:
ee:24:ca:fe:05:2e:82:80:05:60:77:3f:4c:0c:db:
d8:92:fb:2d:1f:9f:b0:fe:a4:64:2c:7e:f6:58:1c:
aa:41:84:af:e8:02:00:9d:bf:64:36:14:3a:7f:12:
5a:e0:0d:08:9c:a4:a4:5d:90:3e:95:bb:6e:cc:99:
fb:d0:7a:7f:23:82:91:8c:f4:a2:ec:05:c9:78:35:
cb:4a:f9:10:96:ed:4f:70:7e:0e:58:15:58:4b:1d:
80:1c:3b:42:81:b2:99:cf:c5:81:76:6b:a5:54:9a:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F4:71:11:55:99:4C:70:D1:3B:E4:71:EE:E7:BB:DB:6F:CF:6F:E8
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f2:3e:ba:3f:2d:3d:55:8a:60:b5:b4:42:7f:7b:18:48:c9:
ab:d9:76:d6:4d:45:a1:fb:9c:30:13:a2:4b:50:22:67:c8:ed:
92:52:33:64:bc:f5:00:92:8c:c8:0e:68:15:28:d4:e9:f8:86:
4f:53:76:97:0b:37:23:1d:22:7f:64:2a:35:86:a9:d7:ad:18:
8a:64:e5:35:05:15:44:58:97:c8:a8:c1:f8:c5:11:b0:e2:72:
35:a7:88:92:0b:59:09:d3:de:97:53:c1:b7:11:fb:5a:2c:05:
62:59:40:ed:50:61:28:5b:20:07:68:38:15:f9:53:de:1d:e2:
25:b3:44:f2:7c:ae:24:9a:2e:44:0e:2a:79:e8:5b:e8:14:22:
e4:5d:1a:6c:f3:1d:ca:dd:3a:78:55:21:42:df:1d:56:56:c5:
26:4d:91:2d:03:0e:3a:63:b9:4f:ae:c1:76:2d:fb:a5:19:9c:
ee:8a:e6:c7:81:ec:1c:1a:a8:ad:5f:51:bb:2f:b2:d7:af:79:
2a:4c:6b:46:c8:91:0b:b7:95:aa:48:84:ed:50:81:df:9e:85:
1b:8f:03:44:26:f7:55:fa:75:a3:86:40:e4:02:98:7c:9c:e5:
89:15:d3:4d:ef:e8:f3:12:9d:7b:da:33:1b:65:d7:dd:45:d5:
c4:85:0f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:23:54 2025 by rpki-client