Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
File: 1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft (raw, json)
Hash identifier: edR0HyzFwQl10twJ4AzhC6fal5XSQ6p7SgBBwcWItGg=
Subject key identifier: E8:00:F2:EC:31:C9:1F:87:36:59:19:CB:FE:EB:3A:FD:99:E6:6F:D0
Authority key identifier: FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09
Certificate issuer: /CN=fbb0a25810d02646656f909c44eb2ba939d23209
Certificate serial: 0197526B1B755C3136C598AFF063BDC21E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
Manifest number: 1580
Signing time: Mon 09 Jun 2025 02:00:40 +0000
Manifest this update: Mon 09 Jun 2025 02:00:40 +0000
Manifest next update: Tue 10 Jun 2025 02:00:40 +0000
Files and hashes: 1: 1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl (hash: Uyyi0Kh8eBNn3WPrPG6TrQHvdcg6+g/+Up+8RPtUWx8=)
2: bXTr3E6VnWX26W0oqBoPPL1PlHA.roa (hash: G0OUsQqR41YHtb5AbPT1gfl1AXhku70rwPK53DaTikA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:1b:75:5c:31:36:c5:98:af:f0:63:bd:c2:1e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb0a25810d02646656f909c44eb2ba939d23209
Validity
Not Before: Jun 9 02:00:40 2025 GMT
Not After : Jun 10 02:00:40 2025 GMT
Subject: CN=e800f2ec31c91f87365919cbfeeb3afd99e66fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:4f:35:b9:0b:9c:e3:2e:de:85:a2:ac:cc:
3f:eb:f7:da:a1:45:fe:19:d0:80:81:ff:8b:6c:26:
f0:3f:27:fa:b3:a6:1b:0b:1c:90:70:f5:ac:51:a8:
c6:38:3a:63:96:d5:d9:77:40:89:88:fd:56:16:92:
50:93:49:6b:72:3c:4b:a6:97:d0:93:9c:bc:04:9c:
85:07:3f:89:1d:8a:fe:07:8f:6d:fd:94:ca:6c:10:
1e:00:97:7b:cc:29:53:20:ed:9f:02:82:ba:cd:96:
ea:a4:d2:8f:71:d6:91:fd:c2:26:ce:eb:c5:65:41:
9f:fb:ee:5f:1f:b4:0f:13:45:78:17:59:4c:3f:bf:
36:c9:9e:a8:c0:f3:f8:a4:25:f9:7c:d8:7e:c2:39:
09:a2:14:6b:13:75:d5:f3:84:73:8c:f4:20:95:94:
1c:81:b9:97:0c:ea:9f:bf:47:4f:7f:f1:cd:25:a9:
b1:95:09:56:7d:03:26:0a:54:9b:36:b0:05:41:03:
4f:ce:87:7b:5c:6b:d0:d9:be:85:bc:e3:67:a4:9a:
3d:06:18:59:64:6f:8b:cf:45:c0:f6:4b:aa:68:70:
cb:b9:b9:43:c8:d6:c8:fb:31:f8:af:d4:9e:4f:36:
3e:01:6e:54:c7:48:d2:47:c2:f8:4d:b9:66:b5:ef:
f2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:00:F2:EC:31:C9:1F:87:36:59:19:CB:FE:EB:3A:FD:99:E6:6F:D0
X509v3 Authority Key Identifier:
keyid:FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f7:b8:97:2a:83:22:ae:bb:74:b0:65:89:cd:d6:22:e2:39:
51:da:b1:0f:4b:f9:3d:01:e6:49:84:e8:f6:04:5d:1d:2c:9a:
82:5d:cf:70:5d:7a:9d:3e:1e:12:c1:08:ee:fb:3a:7c:e7:57:
5e:38:8f:c5:7b:b3:ac:da:75:94:a1:5f:88:97:64:4e:a7:af:
37:b4:ba:f3:25:f7:d5:49:75:fc:99:cf:2c:f9:e7:df:7b:d7:
eb:d3:79:2f:b0:ff:43:9f:52:18:89:af:ed:a8:aa:1c:d8:85:
ac:fd:8d:6e:c1:34:38:53:ad:71:d5:98:61:a6:2a:6b:f4:68:
e2:a2:5b:28:56:1e:14:0c:95:1d:ad:0c:23:20:d1:2a:64:9d:
3b:c1:ed:9f:74:4c:45:7a:cc:df:04:a2:15:80:dd:43:ac:ab:
1b:66:3c:16:04:91:fb:f8:7f:6e:5e:79:a0:40:41:cb:7d:a1:
51:3a:23:1a:1c:41:3d:88:5d:b5:cd:65:2b:55:5e:71:cb:99:
e8:ed:41:30:c9:03:32:d3:49:1a:bd:12:8e:23:56:47:50:bb:
10:61:dd:2a:4c:ea:4c:91:5c:f0:55:c7:23:f6:18:ed:e9:19:
65:ad:81:94:04:3c:38:94:28:44:1c:9a:36:5c:e7:37:c0:de:
a7:2f:53:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:10:13 2025 by rpki-client