Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
File: 1-zutfQaFmVztNRCLLhFSWnqrFBg.mft (raw, json)
Hash identifier: QJkmrRDBmy9wBSttR7sG5OJEoZ+kzgbGwHVgKY42aBA=
Subject key identifier: 0A:D2:B7:97:A2:07:A5:FB:47:76:12:0B:9C:F4:74:FC:C2:28:BC:FE
Authority key identifier: FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18
Certificate issuer: /CN=fb3bad7d0685995ced35108b2e11525a7aab1418
Certificate serial: 0197485555356CB89D53C9A1DE9424724771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
Manifest number: 0672
Signing time: Sat 07 Jun 2025 03:00:41 +0000
Manifest this update: Sat 07 Jun 2025 03:00:41 +0000
Manifest next update: Sun 08 Jun 2025 03:00:41 +0000
Files and hashes: 1: 1-zutfQaFmVztNRCLLhFSWnqrFBg.crl (hash: 6qGmkzOYsz8SBe6AMANst7L71eMA5SSetw1pn0YAdEQ=)
2: bS2AXyQj6T-v-BFQFVgN8omhTFI.roa (hash: Hlm2+aXt9COQOoJS5S5Wj7t+eBfLw0yjo9KgiG+EY2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:55:35:6c:b8:9d:53:c9:a1:de:94:24:72:47:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3bad7d0685995ced35108b2e11525a7aab1418
Validity
Not Before: Jun 7 03:00:41 2025 GMT
Not After : Jun 8 03:00:41 2025 GMT
Subject: CN=0ad2b797a207a5fb4776120b9cf474fcc228bcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:16:7f:4b:b1:b7:6a:9e:ac:51:f2:35:e9:
4f:24:de:f1:25:0a:72:bc:ef:39:6b:3f:ac:ef:63:
0a:d8:0d:f2:4b:b1:32:fc:22:e8:ef:0a:a1:7f:fa:
9b:5a:45:69:93:79:0f:6c:5d:e8:35:9f:a5:22:66:
8c:24:bf:11:b5:5c:f7:6c:14:34:47:71:aa:16:d0:
78:7f:7e:0d:42:07:97:90:c3:6d:97:65:6b:0c:7e:
d3:44:7e:11:2e:e7:67:78:67:29:24:48:fc:11:4a:
a4:bb:dd:2d:2e:03:8b:d9:c8:c4:15:29:a6:8e:54:
37:3d:df:4f:9e:8e:8c:04:bd:b2:1e:01:94:0a:87:
44:23:6c:3d:c0:de:1e:ea:12:72:77:29:31:88:e0:
4e:1d:ac:71:a2:17:47:76:bd:47:eb:69:84:c5:67:
9f:a4:48:bf:bf:0c:8d:29:6d:66:0d:1e:fe:96:3c:
91:a0:e4:c1:7c:55:1d:9a:dd:a1:b2:c9:c8:75:88:
90:4e:41:01:73:13:01:65:15:d6:7a:b9:30:99:f5:
a3:37:1c:cb:72:b3:22:c5:50:84:b1:a1:73:d8:1a:
3a:c8:ec:34:66:d2:ef:05:65:dc:35:8c:4b:a2:fe:
aa:c7:49:ac:9c:67:dd:86:ed:e3:88:85:d1:23:26:
84:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D2:B7:97:A2:07:A5:FB:47:76:12:0B:9C:F4:74:FC:C2:28:BC:FE
X509v3 Authority Key Identifier:
keyid:FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a0:77:71:09:b6:73:70:05:04:f9:df:b3:3c:2b:31:fe:ea:
11:63:3d:27:4f:99:ce:f4:ba:15:22:b7:c9:18:65:3e:bc:85:
ca:c0:ee:15:2a:18:e8:28:54:9e:9f:e7:75:12:4c:8f:3f:8c:
a8:1b:f2:c8:66:1f:dd:e8:72:1e:b2:e8:a8:f0:51:51:8d:6b:
ad:bb:82:b4:df:43:ae:54:4f:1e:61:b7:4b:1b:e1:e7:9a:a7:
87:f2:bd:c6:03:68:af:ec:59:16:52:a0:ed:87:cb:61:de:78:
b5:bc:e2:70:79:d6:a7:0f:63:eb:e8:7b:0a:6e:b0:d0:bc:09:
c4:af:9b:7c:c7:c6:5b:7e:15:d8:e4:89:36:8a:e8:26:04:34:
94:dd:18:75:5d:33:29:82:ed:6b:dd:ad:10:2f:d1:1a:56:98:
32:e5:32:c1:ef:db:1d:84:50:c9:f5:6d:91:d8:ef:1d:2a:d2:
4c:a6:ef:af:6e:0b:66:12:4e:50:3a:12:da:34:8f:d2:40:e3:
de:04:19:ef:ec:0d:9d:e1:0c:d2:e3:56:d1:f5:89:a0:29:d6:
5f:43:e3:49:cc:a3:36:ac:2f:a1:30:7c:6a:4c:d0:dd:e0:97:
42:90:63:29:7e:11:ef:21:04:56:6a:7c:c1:37:2c:de:b7:5f:
61:55:d5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:57:24 2025 by rpki-client