Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
File: 1-zuztKtv_1iN20zyr-bVrEZVe7k.mft (raw, json)
Hash identifier: mMqpXHeGJx4qMqWGCgvk2/gd/9JpodVj9uIWOXPa/Rc=
Subject key identifier: DE:E7:18:04:B5:35:FC:EA:E6:71:44:2C:59:00:D2:B9:A0:6E:19:E9
Authority key identifier: FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
Certificate issuer: /CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Certificate serial: 019767DFFD39D793C7F5295FDF81F8C5A2E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
Manifest number: 0F4A
Signing time: Fri 13 Jun 2025 06:00:22 +0000
Manifest this update: Fri 13 Jun 2025 06:00:22 +0000
Manifest next update: Sat 14 Jun 2025 06:00:22 +0000
Files and hashes: 1: 1-zuztKtv_1iN20zyr-bVrEZVe7k.crl (hash: 6HFzc8JzU0hQu1H9dLq/6XxfdDDw6Lp4Z9uP+3lk8/Y=)
2: pQlM2OtK0QxqZYQEu_V-X_TzrUw.roa (hash: GdjsGztAnCLXoyesv/dDZLz4ADxr8P9UdhbYUeTe7Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:df:fd:39:d7:93:c7:f5:29:5f:df:81:f8:c5:a2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Validity
Not Before: Jun 13 06:00:22 2025 GMT
Not After : Jun 14 06:00:22 2025 GMT
Subject: CN=dee71804b535fceae671442c5900d2b9a06e19e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:c0:69:0e:ac:db:08:c1:4a:c2:f2:00:70:
4b:13:00:c3:2c:6c:b4:55:b3:9e:b1:43:25:b0:46:
a4:3f:a5:de:1f:14:2b:5d:f8:7b:7a:b2:86:33:d7:
31:fd:7b:4e:0f:50:62:a8:12:d4:dd:88:fa:88:1a:
f1:fb:25:69:a7:96:7f:29:41:d8:6e:43:fd:b1:de:
ff:2e:3a:fd:39:64:7a:74:6d:33:19:c6:34:15:2d:
d5:a2:4d:0b:c3:d9:bf:6b:9a:9a:44:30:24:21:bd:
c5:2c:b4:1b:e1:d3:7f:ba:9d:0d:1d:9e:e9:4a:b5:
b9:bd:1e:8a:40:03:4a:90:67:b9:a2:fa:26:c4:99:
05:b3:39:3a:17:86:c5:f7:b9:ed:d8:40:18:62:97:
0a:e0:6d:01:dc:38:a7:0d:46:df:70:2f:f8:12:7d:
52:8b:f0:2f:cf:7c:2b:3e:8e:6a:b8:15:3f:20:e5:
7f:9e:ba:27:3d:02:d7:46:d3:8f:bc:e3:69:ea:3b:
2b:f6:6b:78:85:99:ea:79:13:84:86:d5:0b:4d:a3:
c8:56:3c:49:ac:ce:49:dc:ce:51:ec:4a:ef:20:2a:
da:15:4a:66:78:c8:31:60:0e:28:a5:f9:aa:c6:49:
2b:ed:1f:a2:ba:98:85:3b:91:7f:91:15:8c:5d:bd:
59:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E7:18:04:B5:35:FC:EA:E6:71:44:2C:59:00:D2:B9:A0:6E:19:E9
X509v3 Authority Key Identifier:
keyid:FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:50:1e:b9:fe:43:9c:2c:87:7f:d0:bd:89:6d:74:d9:bc:e3:
f8:e8:96:6f:b1:9f:5a:88:d2:bf:7a:4f:76:e1:11:36:7f:37:
1b:77:32:a1:6b:6d:9a:a9:2c:fb:e2:a6:8a:1e:32:a0:85:62:
2f:77:f3:cd:6d:e6:f1:cf:6d:fa:4a:65:b8:06:4e:45:63:0a:
22:8c:2e:27:5b:8b:7c:6a:d5:09:f3:b5:47:9e:43:51:e4:5f:
33:1c:40:16:e8:9e:1d:8f:fd:07:0f:30:31:5a:ae:da:2d:64:
4f:c8:0a:89:82:a8:d4:28:81:f5:7c:39:93:9a:81:e3:7c:46:
f6:da:48:b4:51:fd:7d:41:6b:cf:d1:03:ed:20:22:15:10:44:
ef:58:46:06:d7:7b:2d:26:7c:88:8c:10:8c:57:b1:f1:b7:dd:
02:18:fa:1c:12:4a:ae:0a:3f:48:66:2a:1d:84:20:b8:01:9c:
eb:51:4d:3a:5a:05:30:98:7c:80:68:bf:2e:fe:e4:bb:37:cf:
4f:1d:70:8e:91:24:15:f4:aa:3b:ab:43:58:51:8e:ca:b3:f8:
e3:cb:1f:17:fa:e7:bc:de:42:29:14:e3:8a:3e:58:5b:1d:d9:
08:8a:0d:1d:b5:41:f3:2d:22:65:9c:11:07:52:11:52:e8:3b:
c1:b3:60:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:55:23 2025 by rpki-client