Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
File: 1ztArr-IwXsbViEopW9CRfLxVDg.mft (raw, json)
Hash identifier: dZ2xwvgGTyh6KFQl789l4wwLdRDyTyaKCEWSvmNBRhQ=
Subject key identifier: 5C:8A:A1:6F:69:34:74:78:6D:B9:5C:F0:62:1A:2C:07:9A:5D:41:3C
Authority key identifier: D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
Certificate issuer: /CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Certificate serial: 01974967CD2E87D22E1A456D5AB8D3F3B188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
Manifest number: 1453
Signing time: Sat 07 Jun 2025 08:00:28 +0000
Manifest this update: Sat 07 Jun 2025 08:00:28 +0000
Manifest next update: Sun 08 Jun 2025 08:00:28 +0000
Files and hashes: 1: 1ztArr-IwXsbViEopW9CRfLxVDg.crl (hash: f+3q8e0xQK3HRE0tpbr9fSeH4Q9CT82m0SWzpIAtw+A=)
2: fAenkccYvoOHEDML32yn807Jw6Q.roa (hash: 3BpxdC7ljMXfXdlUeHh5VXiJ8eVP4DoTTn7sLwUeuhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:cd:2e:87:d2:2e:1a:45:6d:5a:b8:d3:f3:b1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Validity
Not Before: Jun 7 08:00:28 2025 GMT
Not After : Jun 8 08:00:28 2025 GMT
Subject: CN=5c8aa16f693474786db95cf0621a2c079a5d413c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:34:6b:56:fa:f3:b9:4a:0f:ec:d6:cc:a5:
d3:cf:ff:d8:a1:e8:00:9d:27:40:45:bf:a6:5b:40:
2f:47:a0:07:ed:70:5c:c8:f1:0e:47:0c:25:f7:e0:
1b:cd:76:04:4a:6c:5b:9a:52:eb:c9:d0:54:e5:d1:
a0:05:cb:f8:86:f4:22:be:d6:5a:ad:f6:a1:47:a2:
16:09:fa:39:70:ca:ce:73:6f:51:f3:c0:e8:42:48:
ea:b0:89:be:d1:04:4e:94:ff:f9:0a:28:c6:30:83:
94:78:0f:9d:a5:75:21:31:43:4a:40:d9:44:61:31:
43:e8:81:05:c3:16:b1:e8:98:17:c6:d8:2f:26:43:
79:c8:55:48:a8:3e:52:aa:47:ba:3d:fa:5c:ab:a2:
e7:a3:c6:af:26:42:f6:42:57:87:66:0d:f0:2c:76:
ce:9f:ae:74:16:9e:89:f9:4a:f8:69:e9:b9:43:86:
4f:5d:06:e8:08:42:60:b4:e3:e2:0a:2d:dd:6e:fa:
d1:11:0b:4c:77:79:43:78:e4:76:fb:16:27:c7:3b:
66:f0:49:69:c1:9a:c3:13:1b:ca:a1:da:7e:f8:bb:
41:61:5d:5c:2a:01:fd:7b:1c:e3:b1:8a:5b:4f:6b:
91:00:d0:99:7c:7a:2b:66:58:4d:be:e0:b4:71:83:
f6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8A:A1:6F:69:34:74:78:6D:B9:5C:F0:62:1A:2C:07:9A:5D:41:3C
X509v3 Authority Key Identifier:
keyid:D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4c:69:82:b6:e0:47:c8:dc:1a:19:8c:9b:c6:83:47:03:8b:
10:b3:9e:c2:18:ba:14:1e:50:2e:77:36:2a:3d:68:0d:6a:53:
1d:ab:d3:68:8b:aa:43:79:94:f0:ee:16:03:ff:91:13:5e:cf:
77:14:54:1d:10:b4:3b:fc:27:86:4c:50:a0:8d:8e:ce:ee:94:
5c:8a:db:c6:7f:03:ee:89:74:3d:18:27:65:6b:dd:43:c3:ab:
cd:5c:dd:67:d0:ca:96:5d:7f:49:e0:04:d2:ad:d7:a7:1d:e6:
c8:fb:58:05:8f:d7:89:1e:18:88:36:80:94:28:04:49:8e:40:
e9:f4:f9:a9:b7:f2:d5:5b:96:81:4c:07:53:01:7d:de:3b:5c:
ad:71:26:7b:34:a0:81:d2:78:6b:10:8b:2f:71:5d:f9:b2:e5:
98:29:e4:f4:ca:90:8a:64:01:55:11:b6:fe:11:a2:03:25:dd:
76:a7:f7:25:34:e4:58:ec:53:be:d7:b2:0d:5f:c1:fc:43:e3:
15:b9:53:c1:eb:a9:c4:da:a6:9c:84:18:c4:36:05:ee:98:b2:
dc:dd:67:af:27:f8:1d:65:16:93:0a:2d:0a:17:83:59:ac:dd:
cd:f2:16:44:01:85:a7:ac:25:9c:bf:75:74:ac:42:a7:4e:63:
d9:66:eb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:06:31 2025 by rpki-client