Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
File: 1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft (raw, json)
Hash identifier: fkAL72qt09H8yFh+hvEwoqe0RarUUzVFw+Lpv9TBOkQ=
Subject key identifier: 9F:28:09:5B:42:30:99:AF:77:4C:1F:F6:7E:07:71:82:D7:DD:84:92
Authority key identifier: D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD
Certificate issuer: /CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd
Certificate serial: 019746D4E5F046C1C4BC8C8A2D896B3ED146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 20:00:46 +0000
Manifest this update: Fri 06 Jun 2025 20:00:46 +0000
Manifest next update: Sat 07 Jun 2025 20:00:46 +0000
Files and hashes: 1: 1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl (hash: kqPDnT9CvCweyZNFijuSn65gTRu91rahuJ9VfsYdmL8=)
2: xQ0omeh3E5iF_d8mj3AQ2WbCPhs.roa (hash: sdJrwUwtet9ZCSeZ4e/k+xUzLUvSkTzP6eqgxhGOZBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:e5:f0:46:c1:c4:bc:8c:8a:2d:89:6b:3e:d1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd
Validity
Not Before: Jun 6 20:00:46 2025 GMT
Not After : Jun 7 20:00:46 2025 GMT
Subject: CN=9f28095b423099af774c1ff67e077182d7dd8492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:75:5b:ef:b5:59:dd:b1:b7:09:67:40:82:
5e:ca:45:a0:e4:65:55:5e:da:b4:95:2d:fd:32:7c:
37:bc:40:fd:92:0c:b6:0d:3b:81:9e:a6:6d:8a:32:
b8:82:22:4f:32:11:1f:5a:90:c8:0d:e4:f1:90:e6:
92:46:65:a7:1e:e0:9c:2c:c8:a2:ac:9e:45:a3:3b:
10:2e:29:f1:b5:76:f2:64:ea:8c:e3:74:2a:76:dd:
b4:78:74:33:15:9a:25:d2:79:39:9c:db:0f:3e:89:
5f:67:84:aa:fe:4e:44:3c:db:1b:d2:8b:e1:9d:68:
18:ad:18:1d:4d:98:39:5c:e2:be:06:6d:ac:d9:58:
29:28:f5:00:58:55:f7:05:17:10:8f:9c:96:ff:a7:
6e:72:26:9e:0e:af:cc:0c:e6:c5:7f:df:bc:c7:e7:
e3:0a:26:73:85:9f:ca:24:98:47:14:45:74:6a:de:
06:f3:24:f5:30:06:73:80:11:d9:df:70:45:2f:03:
6b:5e:f1:96:91:68:3b:b5:e4:fe:27:62:4b:af:e4:
fd:36:2d:e4:e6:bb:be:7a:91:a2:10:90:26:16:47:
ca:fc:d7:7d:66:51:61:b7:8d:8a:78:5a:5c:9b:bc:
14:2a:39:d8:e5:2f:e3:08:fe:26:2b:20:13:8a:bb:
ed:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:28:09:5B:42:30:99:AF:77:4C:1F:F6:7E:07:71:82:D7:DD:84:92
X509v3 Authority Key Identifier:
keyid:D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1b:66:0a:78:11:6c:f0:22:c1:cf:45:38:fb:8b:b2:de:c7:
b3:3f:31:73:a0:95:52:96:44:31:85:3a:50:92:58:11:48:14:
5b:21:6d:30:5c:b3:23:86:ce:b0:89:26:e3:18:77:0e:60:b9:
98:14:ab:d0:37:32:e1:d3:ea:14:a9:bd:1c:08:36:53:da:3b:
3c:cb:b3:20:8d:eb:9b:f3:4a:b0:90:e7:81:aa:c5:10:8c:04:
c1:7b:68:ab:ad:59:c4:bb:cf:53:7b:bd:72:63:9b:f9:e0:90:
93:e8:50:4f:28:15:f3:8b:ec:72:c5:1b:7e:aa:81:f4:3d:69:
27:a1:f2:c0:4a:e8:78:ea:0a:ba:7a:71:f8:ac:dc:62:c2:d3:
d3:69:32:cd:b8:54:0b:05:71:fa:33:41:2a:85:13:e2:c3:f7:
52:be:8f:78:2a:9c:2b:26:6b:0a:3a:b0:96:23:17:a3:df:6a:
09:8a:0e:7b:e4:ed:c6:c6:65:fa:3f:2a:71:10:3b:82:a6:0e:
55:34:38:d1:c2:66:a1:96:a8:7d:d4:9f:7b:4d:68:a5:2a:9f:
73:38:d0:0b:3a:7c:a8:5c:0f:e7:4a:a5:8d:9e:fe:a4:19:39:
06:9f:5b:5d:22:c2:7b:0c:d0:41:46:75:af:59:47:ba:4e:2d:
c0:66:9f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:17:10 2025 by rpki-client