Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
File: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft (raw, json)
Hash identifier: gakqBW463gmL6F+/kmlfSiE9O464x8BUQA2OjrJnKcQ=
Subject key identifier: AA:4D:55:68:81:5D:09:70:7E:E5:76:4C:0F:F5:B4:1B:E9:95:3A:D1
Authority key identifier: F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
Certificate issuer: /CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Certificate serial: 019751C65B7DE661D7AD22A3C5AFADC62358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
Manifest number: 0CA9
Signing time: Sun 08 Jun 2025 23:00:43 +0000
Manifest this update: Sun 08 Jun 2025 23:00:43 +0000
Manifest next update: Mon 09 Jun 2025 23:00:43 +0000
Files and hashes: 1: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl (hash: nKYgUfGj8xvOwlmpA9GBK0sf98KfRUQT+4HcaNVPrPo=)
2: hSQntvd9v3MOWIssEgGbLB1SW7w.roa (hash: n6KLHzcpdLpUHWf9UFnS7ncqlbroso3meC9DViXUm1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:5b:7d:e6:61:d7:ad:22:a3:c5:af:ad:c6:23:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Validity
Not Before: Jun 8 23:00:43 2025 GMT
Not After : Jun 9 23:00:43 2025 GMT
Subject: CN=aa4d5568815d09707ee5764c0ff5b41be9953ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:98:ad:34:d8:ae:b9:5b:df:24:5c:29:3d:6c:
d7:59:a0:b4:b5:0b:a8:09:dd:08:2b:b0:37:05:55:
84:f2:78:1f:e1:eb:70:66:0d:b1:70:ae:66:1c:38:
fe:6c:8e:8c:86:e5:99:f0:f0:d8:da:3d:53:47:4c:
e1:9c:28:79:b0:2f:87:0c:d8:3f:90:c6:af:09:36:
ba:fe:d3:d3:b4:86:25:36:1e:65:8e:42:64:18:99:
5b:a0:c5:91:af:d0:19:ea:c1:36:39:da:fa:8c:5b:
f9:92:36:8f:8f:f7:78:40:9c:9b:54:e1:9c:d2:2f:
2e:e9:72:50:57:54:46:26:53:55:4c:c4:ec:a9:a1:
80:68:f8:5a:93:fd:a6:13:27:95:55:38:19:60:27:
e2:df:22:10:0e:8a:a1:e1:ad:c8:72:63:5f:61:38:
36:0f:68:c1:58:7e:df:fa:30:4d:fd:f3:e3:24:82:
50:d3:74:56:79:47:61:84:e0:68:3a:74:34:f1:3f:
8a:ab:ae:b0:1b:4a:57:ed:0a:c4:ac:dd:4f:f5:41:
5c:50:e0:55:f1:5b:09:4f:42:fd:00:3c:2d:5c:97:
5e:3c:ae:ed:f6:c3:4d:13:fd:30:c0:e8:39:3d:73:
b8:0c:4d:dc:3c:78:66:47:57:54:69:a1:59:29:6f:
01:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4D:55:68:81:5D:09:70:7E:E5:76:4C:0F:F5:B4:1B:E9:95:3A:D1
X509v3 Authority Key Identifier:
keyid:F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d0:3b:cb:bc:2d:ba:31:39:22:dc:bd:27:f2:c9:44:7e:4f:
88:87:ab:69:02:0c:0d:8a:a7:63:d9:d4:58:ec:bc:77:9f:e5:
a5:f1:99:e3:02:3f:1b:64:ba:4d:dc:82:c2:57:80:18:b0:e6:
6e:4a:9b:a1:aa:3c:a4:95:8f:bd:7d:96:e3:b0:05:fb:f2:d8:
0a:9b:ab:08:48:7a:5b:65:4f:06:e4:99:28:26:fb:c1:c1:da:
bc:c3:f0:71:f4:df:e4:ab:46:57:1f:f1:d7:0d:73:3b:3e:52:
23:11:d0:f0:0b:63:1b:30:17:65:0a:e0:b7:9a:4e:74:df:a9:
d2:0c:a3:9c:b3:06:4f:f8:24:60:5a:98:12:1a:09:eb:c2:71:
6e:6b:1a:36:f5:03:2e:3c:b3:d8:f6:e0:ad:57:9a:30:cd:44:
16:73:01:91:3c:91:47:15:70:80:60:bd:11:4a:ca:8d:19:c7:
ed:98:03:e7:0a:0f:f1:bc:88:76:08:e3:d4:df:79:11:62:4d:
8a:5e:9a:ca:2a:23:03:3d:c3:53:d7:06:b8:12:00:33:53:2b:
6f:45:5d:41:d2:20:02:16:81:73:0f:fb:45:79:05:16:17:dc:
37:94:f4:59:d3:4e:cc:f3:35:d3:72:7b:91:9c:18:1b:dc:75:
f2:47:7f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:47:22 2025 by rpki-client