Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
File: 1-vZEdu85RbNE_-442lbKzMXQObA.mft (raw, json)
Hash identifier: Hc8h4+XKE8ni0fcObOlP6GMbXd7STTtXeBXwtyM8LSU=
Subject key identifier: B0:FB:9D:7C:1B:1F:74:96:D8:2E:9E:86:F9:4F:C5:EB:58:72:BC:C6
Authority key identifier: FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
Certificate issuer: /CN=faf64476ef3945b344ffee38da56caccc5d039b0
Certificate serial: 019752A2A8B8B0B218B5BC7FE1A16725B37C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
Manifest number: 1586
Signing time: Mon 09 Jun 2025 03:01:20 +0000
Manifest this update: Mon 09 Jun 2025 03:01:20 +0000
Manifest next update: Tue 10 Jun 2025 03:01:20 +0000
Files and hashes: 1: 1-vZEdu85RbNE_-442lbKzMXQObA.crl (hash: p0k/MUn466ruD8NdbhCN3TrW9M31P7o5XUZkgLQRJtY=)
2: SyEVUI3N-GA_i-uzTD16e1zmM2E.roa (hash: LqMTwONwWzte69tiLUqbC66cMzx5aiQvY2EzU+SnCGc=)
3: jnW4jrIpgrgFGee1gUUQCX9nMQM.roa (hash: Pg7xp2U2lzFs5nMdCFW1WCbmFf1TrwqIn5BPDmSukZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:a8:b8:b0:b2:18:b5:bc:7f:e1:a1:67:25:b3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf64476ef3945b344ffee38da56caccc5d039b0
Validity
Not Before: Jun 9 03:01:20 2025 GMT
Not After : Jun 10 03:01:20 2025 GMT
Subject: CN=b0fb9d7c1b1f7496d82e9e86f94fc5eb5872bcc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:73:5d:56:48:ff:21:f8:e4:d6:63:63:ce:bb:
55:4e:81:20:22:6b:34:5a:b5:21:d6:13:4b:73:32:
db:95:11:5e:98:01:70:3c:32:05:a9:4e:6b:5f:79:
50:55:6c:1d:bb:7d:36:0c:8d:fb:0c:88:d5:9d:82:
06:e1:b5:00:e0:dd:fc:ff:f1:cf:33:15:fc:5a:0c:
b3:6a:b7:a9:dc:33:b5:45:46:ac:7d:d3:c7:31:a6:
dc:f6:9c:15:d6:12:ab:33:9d:a2:cc:07:eb:9e:14:
64:6f:dc:01:37:e6:c7:4a:62:11:8b:a2:ee:05:a3:
c7:00:64:f9:18:b7:56:c5:f1:c0:75:ac:0d:f3:ad:
80:42:fb:1e:e5:83:0a:15:c6:4e:e6:12:e3:2e:98:
0b:20:f1:e5:96:a4:24:f1:89:25:a2:4b:2d:3f:a9:
a9:d1:77:66:d6:6e:9f:d2:ec:dc:52:05:69:19:6b:
04:78:c8:bc:02:65:89:2e:9c:6a:31:e1:68:f5:ba:
7b:af:c7:80:d4:ba:f5:06:82:a7:ef:26:a6:35:39:
6e:f8:04:31:73:36:d9:03:7d:6b:17:ef:63:60:87:
02:38:70:86:de:2a:18:d7:55:f1:30:7b:a7:e0:74:
b5:84:cf:43:6d:01:41:66:b1:14:b7:4f:1e:92:92:
14:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FB:9D:7C:1B:1F:74:96:D8:2E:9E:86:F9:4F:C5:EB:58:72:BC:C6
X509v3 Authority Key Identifier:
keyid:FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1d:43:c8:7d:cb:70:06:6b:29:ed:00:fc:4a:1a:10:65:a8:
81:e5:94:22:c9:f3:5a:71:46:b3:9f:6f:39:94:97:d0:71:04:
b3:22:df:a4:35:8a:fa:0f:be:21:6f:70:e9:bd:95:d0:31:ec:
cb:46:68:9e:8e:0c:09:a7:c9:14:b2:a2:e1:bf:21:cc:5a:6c:
8b:25:b4:54:fe:a4:56:21:db:6a:b2:06:55:ba:6d:b3:25:b7:
f4:7d:68:7e:ff:90:cd:e8:f6:b6:8d:2a:79:96:71:9b:c3:58:
06:c6:c8:7e:02:7f:1c:cc:38:59:a2:52:62:a2:c4:c9:76:b1:
d8:e7:99:07:1d:b5:35:e8:24:23:19:00:70:1e:68:2c:91:f4:
7a:8a:bc:e7:c9:ab:5b:35:e2:6f:d0:21:73:40:b9:c6:28:94:
65:4c:6c:9f:35:e8:0f:b2:8b:82:cc:16:04:2e:61:99:ab:63:
71:53:62:ee:03:1e:4f:0f:fd:6f:6c:a8:24:76:b3:34:18:41:
71:29:92:4c:5c:ff:40:5f:2e:d4:28:df:78:b2:32:d4:9c:bd:
66:59:3c:87:05:16:e6:a7:31:b1:6b:86:f1:ca:e1:81:4b:6f:
ae:26:50:97:9e:1b:38:7b:99:42:02:db:d5:8d:f8:0a:88:2d:
5f:58:75:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:16:41 2025 by rpki-client