Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
File: 1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft (raw, json)
Hash identifier: ctF3397BH994JxJFqyC/So6TzsdKjz5W3ACL474rNAo=
Subject key identifier: 12:BC:85:29:25:F0:16:99:24:E4:36:97:B8:BF:5D:F3:92:35:8A:A4
Authority key identifier: D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34
Certificate issuer: /CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
Certificate serial: 019751C64A5F513200664951E0A4DB37B51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
Manifest number: 0CBB
Signing time: Sun 08 Jun 2025 23:00:38 +0000
Manifest this update: Sun 08 Jun 2025 23:00:38 +0000
Manifest next update: Mon 09 Jun 2025 23:00:38 +0000
Files and hashes: 1: 1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl (hash: nw+xYATG+z9f0sR6eeOaARsx4NhVSLsjGJ5BcsZwUzA=)
2: 8Yr02VXLMmYbsDQBlzbUMjU-_4Y.roa (hash: c2krYBPX6FJP/S5DK6Bqlhz1YaUFixNmTfTx7RgZ1eo=)
3: AKY3-lmq_F-hZTNjYE8VF5Dbfhg.roa (hash: SNTyErzebd/AsxAYfH3hc+mIWE58J4HLCDSVxz7/7nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:4a:5f:51:32:00:66:49:51:e0:a4:db:37:b5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
Validity
Not Before: Jun 8 23:00:38 2025 GMT
Not After : Jun 9 23:00:38 2025 GMT
Subject: CN=12bc852925f0169924e43697b8bf5df392358aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:67:ee:0a:aa:74:bb:9c:f1:f0:b5:46:ad:63:
c3:e0:3e:99:aa:94:3e:4f:5e:b1:91:71:a7:4a:dd:
43:e5:08:18:bf:9c:0d:f1:40:0a:d0:7f:16:00:7b:
48:2b:5a:bd:0a:73:c9:04:b7:67:29:74:97:08:a0:
ae:1e:85:43:63:27:c6:86:eb:31:dc:e6:eb:55:6b:
7d:4a:ea:2d:05:fb:07:d3:7e:98:85:5b:ef:1d:20:
bc:58:bb:14:8b:5c:2e:d3:65:bd:64:f9:67:b8:97:
db:6c:88:8d:f3:a0:91:54:bb:6d:cd:e6:37:3f:8d:
54:76:0f:8d:dc:ae:87:0d:74:c9:5b:3d:7b:b9:d3:
5f:03:8d:56:bb:ca:10:fe:36:71:ac:2d:c1:61:8a:
0a:ed:5f:bc:aa:e5:8c:88:25:b3:d8:1b:2a:80:83:
f7:d2:b1:96:fc:61:88:dc:ee:d1:8b:f1:ed:78:ed:
04:91:e1:ec:3b:77:1d:38:3d:30:73:81:e0:71:57:
7b:81:8e:cd:a7:a1:ed:bb:8c:70:59:23:7f:73:bc:
9a:d0:69:1f:25:a3:cf:85:f1:e6:a0:d2:eb:2e:c5:
6e:7b:a0:d5:47:ec:1c:9c:e9:77:4f:de:3c:bc:85:
9c:ed:de:07:2d:60:28:f0:39:1f:b2:7f:a9:13:c9:
e7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BC:85:29:25:F0:16:99:24:E4:36:97:B8:BF:5D:F3:92:35:8A:A4
X509v3 Authority Key Identifier:
keyid:D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:60:02:d4:27:25:49:02:4b:0a:2d:28:64:12:3e:7d:81:4b:
9a:10:e6:9f:d7:b4:3b:2e:07:a8:1f:1e:9b:e3:68:1c:a0:e3:
92:95:d0:c0:6e:c2:7e:e2:ce:d5:bd:b2:37:54:eb:03:42:50:
8d:a9:ca:e5:61:e3:8b:32:fa:8e:c7:d0:32:8c:78:47:f2:92:
f1:3b:32:7f:0b:6a:7b:d8:2f:0c:8c:b3:bf:a9:fe:20:49:48:
2a:d8:0d:00:d0:26:b7:91:74:1c:e4:8d:d9:bd:d2:32:ec:98:
94:f8:e2:fd:42:ef:d7:2c:cb:e9:9b:20:59:1a:d1:61:62:45:
56:ad:7a:40:6c:34:54:ee:47:9a:a3:ec:b9:de:d2:cf:1b:36:
1f:b1:c8:16:a5:71:00:60:cc:84:42:1d:85:40:1c:c6:ed:3e:
7f:31:90:85:f1:1d:30:db:6f:f8:3a:9d:31:cb:a0:a1:d7:d2:
a9:87:84:08:aa:58:9a:2b:7b:8a:1e:4b:e3:ea:84:2e:9f:40:
4d:7f:7a:6f:0f:e9:33:14:3d:65:fc:8f:92:5a:9c:30:3b:98:
79:97:b8:76:4f:b1:56:dc:90:72:3d:65:87:94:92:90:45:e7:
11:a1:37:7c:9e:68:3a:45:09:b3:db:a5:0f:19:07:2e:3c:6f:
1b:4c:7b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:52:57 2025 by rpki-client