Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
File: 1-geuOnkY-TLqJMwVa0tum6VYG_o.mft (raw, json)
Hash identifier: ECKdC5fWmwVOZaVNvx4akmXH70et8dOrKP3KetAGx3A=
Subject key identifier: 62:F7:09:A1:45:3B:13:51:A5:20:54:00:67:2B:39:08:A9:62:FB:CA
Authority key identifier: FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
Certificate issuer: /CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Certificate serial: 019749683BBE6137C30A8270142FF7C545D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
Manifest number: 028A
Signing time: Sat 07 Jun 2025 08:00:57 +0000
Manifest this update: Sat 07 Jun 2025 08:00:57 +0000
Manifest next update: Sun 08 Jun 2025 08:00:57 +0000
Files and hashes: 1: 1-geuOnkY-TLqJMwVa0tum6VYG_o.crl (hash: mC50Mn7nIgbiPLViH+WtBt1v1mmewuDD/brA2pfPFnY=)
2: rs3gWt450Dc5VAdX-LPh4FxzPfI.roa (hash: yHX556DQVgZDjr2xTPApsPlrmF99zYD+miBAgNn4a5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:3b:be:61:37:c3:0a:82:70:14:2f:f7:c5:45:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Validity
Not Before: Jun 7 08:00:57 2025 GMT
Not After : Jun 8 08:00:57 2025 GMT
Subject: CN=62f709a1453b1351a5205400672b3908a962fbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:7f:79:85:3c:4e:fc:dd:16:0b:50:42:98:
19:b4:3d:a1:e4:49:c2:13:f7:cf:25:f4:08:03:82:
1f:b9:15:86:37:03:fb:e1:dd:e0:cc:cf:03:46:35:
c0:8e:79:40:a2:67:89:00:a8:be:a3:ee:d4:5e:35:
c1:49:5b:2d:3e:ce:b3:ae:af:fd:20:97:50:c3:32:
ee:4a:3a:5b:33:97:ab:2d:fb:89:58:43:bd:8b:39:
23:e8:8c:52:98:17:8f:b2:9b:10:77:38:09:9e:13:
2a:7e:29:90:5b:68:ef:f7:27:62:62:6b:66:a7:33:
9c:8d:05:ec:b0:d6:8b:5c:81:fb:2b:3c:73:f8:7c:
5c:57:6d:ce:80:8f:0b:18:8f:40:1d:35:7d:f2:1d:
1e:db:aa:53:41:5d:1a:f2:41:90:d9:58:2d:3d:83:
be:87:bc:55:49:54:0b:5c:14:02:9f:27:58:94:eb:
57:b8:90:d1:32:f3:c4:6d:49:07:1c:0d:60:c2:19:
44:30:b0:9c:b9:40:fb:3e:91:2a:61:fb:08:42:ba:
2d:d6:b9:ca:fa:58:90:97:8d:92:c5:f7:4a:18:59:
4e:f3:43:bc:db:46:3e:b6:2a:f8:3b:14:9a:e7:05:
ff:df:e4:cf:37:bb:69:4d:65:1c:4f:df:31:4c:1c:
c1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F7:09:A1:45:3B:13:51:A5:20:54:00:67:2B:39:08:A9:62:FB:CA
X509v3 Authority Key Identifier:
keyid:FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:36:a5:fc:72:59:c4:21:c9:2e:42:1b:9e:a8:65:6f:df:b2:
63:b3:fd:9d:0a:ba:b0:e3:10:dc:91:f7:d4:08:05:17:fb:d6:
a3:4f:83:63:5d:b3:5b:59:c2:ca:45:dd:5a:04:09:21:8b:21:
6e:0b:6b:c0:94:1f:71:c7:5c:a2:3d:a3:92:35:32:3e:d9:6c:
6e:c6:79:e6:35:b1:28:bf:e9:99:4c:f1:6e:b9:10:56:bd:e1:
37:5a:21:2c:28:13:4a:a6:ec:be:e7:f0:5c:99:6d:27:f8:bd:
5a:05:f0:82:18:70:f9:cc:3b:38:b6:d4:ce:ec:10:de:81:4e:
1b:86:f8:22:d8:2c:85:0a:07:97:b7:d9:a7:c1:1e:f6:ce:52:
46:8c:02:4b:8c:16:30:59:ea:f6:9e:31:23:b2:c9:92:05:e0:
7e:0e:a9:e0:8a:dc:a5:73:03:46:b1:70:07:fb:bf:82:6d:82:
cd:32:83:50:81:76:64:fe:92:86:9a:7f:f5:92:6b:2a:09:8f:
dd:b2:ed:0d:2d:64:e4:2b:0f:3c:94:e0:4c:f7:90:2a:86:4f:
59:60:3c:ee:95:7f:b7:a0:d6:a8:91:8c:b2:56:b2:77:2e:89:
39:ef:0f:cf:ae:1f:33:50:e8:df:d6:32:83:9f:3f:15:88:a7:
15:46:d5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:31:05 2025 by rpki-client