Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
File: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft (raw, json)
Hash identifier: yI1OhqGyswR0L4U7caJFL+p6yvRA+iev2tUVdp5l9k4=
Subject key identifier: B8:DF:D7:D0:80:C1:C8:A8:B1:04:C8:91:90:E2:53:FD:57:EB:9D:66
Authority key identifier: D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
Certificate issuer: /CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Certificate serial: 01974D0D80E078486BB320DA070C6475CC6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
Manifest number: 1240
Signing time: Sun 08 Jun 2025 01:00:19 +0000
Manifest this update: Sun 08 Jun 2025 01:00:19 +0000
Manifest next update: Mon 09 Jun 2025 01:00:19 +0000
Files and hashes: 1: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl (hash: 45afv6HO71HYO+smEsEYGSzEtYaX7c1fHmCpGzOCN4Q=)
2: A0q8SzSP_vkB0Kdb-LLhQ_QObQQ.roa (hash: U5YBrDMRrX6ygfCOd+cwFtTn/aDz7ai314haVDrv0Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:80:e0:78:48:6b:b3:20:da:07:0c:64:75:cc:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Validity
Not Before: Jun 8 01:00:19 2025 GMT
Not After : Jun 9 01:00:19 2025 GMT
Subject: CN=b8dfd7d080c1c8a8b104c89190e253fd57eb9d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3d:a3:35:a7:70:f8:99:80:0d:c4:74:c8:57:
5c:02:80:9d:66:a3:69:8a:8a:73:7a:ed:38:3a:9b:
fb:91:1c:d2:6f:a8:2b:d8:0f:4c:fc:9d:ab:34:90:
7f:24:02:9d:19:cb:2d:37:1f:93:89:b3:ce:73:a5:
c3:45:5e:56:c4:ff:69:b6:c5:fa:f5:2f:33:c2:03:
42:63:ba:51:5f:71:a0:85:5d:69:db:aa:41:07:49:
5b:fa:33:74:80:2c:0c:b7:4c:de:03:24:87:2f:56:
39:33:40:7f:db:12:8e:1c:68:9c:23:f6:3c:49:4e:
ba:3a:bc:1c:22:67:de:35:8c:63:30:09:b4:93:35:
1a:73:60:b7:70:53:e4:c4:39:a5:b2:1e:51:b2:3c:
3b:cf:18:07:33:20:b3:a5:74:fd:eb:d1:26:3f:29:
c8:56:9f:60:ca:31:ff:d6:f7:91:34:d5:4f:1e:d1:
e2:d2:4d:23:b4:3b:08:20:85:c9:4c:aa:7d:7d:63:
9e:d8:90:e0:4c:ea:2d:4b:ad:13:b1:0a:34:dc:49:
e7:e4:07:c4:c8:c9:3a:03:6f:ee:b9:62:cc:7c:94:
d5:63:3e:d4:41:01:c9:10:3e:cd:82:6b:28:fe:2e:
b9:80:1c:52:a1:0e:21:97:60:26:f6:3c:b0:ec:52:
66:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DF:D7:D0:80:C1:C8:A8:B1:04:C8:91:90:E2:53:FD:57:EB:9D:66
X509v3 Authority Key Identifier:
keyid:D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2c:7b:07:70:77:6a:16:e6:71:d0:7c:6b:60:ef:a0:75:3d:
92:d8:ae:8b:b2:d9:51:b2:09:80:fb:a0:a7:68:ed:24:a6:4e:
3c:cb:5f:ad:19:b2:c4:7c:d7:f9:c6:32:a5:25:e0:af:b4:0d:
b8:94:d8:f5:52:64:7c:78:f7:1d:dc:0c:8f:25:47:75:45:c4:
7a:3f:74:94:9c:de:c6:66:40:df:8b:fb:6d:a3:c7:88:b9:04:
b4:0f:8a:21:15:26:a0:a3:bb:7b:16:05:01:27:fe:12:10:d8:
00:1e:41:ef:81:e0:17:b7:c4:bd:2f:af:51:09:0e:76:7e:d0:
5f:1d:8c:f6:5a:99:95:a6:37:42:3e:0e:60:02:5f:f1:4d:dd:
ec:ef:33:73:2c:4a:ca:96:29:b6:9c:ad:8a:10:22:9e:28:8c:
6d:e9:5c:27:83:41:0d:e6:72:3f:8b:6f:fe:d2:56:bf:3e:04:
8a:3b:42:20:ed:5e:1e:06:43:1b:62:c5:67:0c:09:ab:a7:18:
81:06:2f:50:92:5f:cc:97:0c:52:98:ed:14:91:46:0c:46:0d:
43:96:4a:82:c9:2f:b6:02:a0:7f:62:3a:8c:c4:53:bd:9d:cc:
5c:05:4c:eb:d7:31:3e:57:ad:06:22:28:7b:1a:db:07:7c:c9:
54:52:0b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:53:45 2025 by rpki-client