Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
File: 1-83RF-rHV7b485QoZTrhJQjMaYk.mft (raw, json)
Hash identifier: 9OKr9iZp+ZdcEXx7Zk6z/3lgs3H62ZRjScnL4QWeAEA=
Subject key identifier: 64:33:BB:F8:6F:F0:A1:9C:08:56:38:08:3E:7C:99:17:31:FA:3F:ED
Authority key identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
Certificate issuer: /CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Certificate serial: 0197488CCACB1F6E98BCB779E92B74E5E52D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
Manifest number: 1397
Signing time: Sat 07 Jun 2025 04:01:15 +0000
Manifest this update: Sat 07 Jun 2025 04:01:15 +0000
Manifest next update: Sun 08 Jun 2025 04:01:15 +0000
Files and hashes: 1: 1-83RF-rHV7b485QoZTrhJQjMaYk.crl (hash: RJFyEv/ZPdZPl4B4BvgD68XIqlFjpoyjPnjtE8ey3lk=)
2: HLsqpW_Z-fbGO_aC3llZw59d0HA.roa (hash: zNqiqKUQYXwQHeg5g/DJfaZuunabikgAw4lZ3lENgDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:ca:cb:1f:6e:98:bc:b7:79:e9:2b:74:e5:e5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Validity
Not Before: Jun 7 04:01:15 2025 GMT
Not After : Jun 8 04:01:15 2025 GMT
Subject: CN=6433bbf86ff0a19c085638083e7c991731fa3fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:20:d8:f4:8e:36:9d:ab:34:c9:58:eb:6c:bb:
49:64:b6:d7:ad:3c:5f:bc:85:83:cb:25:0b:dd:70:
a7:e6:f5:da:5b:f8:5b:03:f7:9b:8d:62:48:48:ce:
4e:4e:13:e6:4c:1a:da:fd:a9:56:3d:43:1b:68:f0:
65:a8:15:7d:0e:40:45:87:db:21:c6:7b:5c:3b:bf:
a3:6f:2e:bf:5a:59:fd:aa:a6:ab:78:c5:52:88:b9:
2b:6e:9a:f9:61:26:36:ff:0c:14:e7:4a:9f:89:61:
15:38:32:df:1f:ea:04:74:45:8a:db:7c:cd:e0:b0:
23:38:b8:56:79:64:75:8c:de:d7:81:a3:ce:36:0e:
7d:d4:d1:f1:88:26:81:98:b7:e4:9b:30:44:53:29:
1c:24:41:a6:90:a6:d0:cd:ff:b8:4a:52:c8:e2:bf:
f2:7c:9e:4e:df:fe:38:d6:67:c7:7e:9d:0b:66:40:
b6:24:e9:c4:d0:ee:2d:0e:05:8c:c9:56:14:82:fb:
27:66:65:3b:74:a6:a0:39:a5:a1:b1:01:e1:6c:3b:
7a:ac:cb:e7:a7:da:c0:73:8d:79:90:b6:bb:e4:c6:
4e:26:aa:e7:7a:93:aa:43:6c:38:df:4e:4b:51:9d:
e2:75:8e:71:1d:91:0e:a5:d1:50:3f:f9:08:7e:92:
e5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:33:BB:F8:6F:F0:A1:9C:08:56:38:08:3E:7C:99:17:31:FA:3F:ED
X509v3 Authority Key Identifier:
keyid:FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:cf:7b:eb:13:40:c2:1c:72:dd:a8:27:6a:05:38:93:75:8c:
c6:dc:14:48:ab:1f:1a:8c:5d:61:0d:89:44:2f:6b:37:06:57:
65:15:da:60:c8:51:82:05:f9:2e:2d:79:7c:5d:14:09:fc:e9:
8e:a9:e4:20:cb:9c:19:a9:6e:df:17:34:60:e0:38:d0:aa:f4:
c4:07:ea:07:1f:9e:56:3c:1d:7d:d5:9c:50:bd:e0:d3:0d:f0:
3e:06:90:7d:30:ac:fb:33:a2:fb:fa:b4:ec:b4:11:3e:a2:d4:
04:36:a5:e3:d8:3a:c3:6a:6b:9e:79:18:42:06:10:a9:10:3b:
23:03:26:72:0f:97:f0:76:31:61:fd:51:51:35:b5:67:77:3b:
8c:64:3e:bf:03:c0:4b:b3:f8:44:cd:94:ee:9d:cd:bd:8d:6f:
9b:67:f2:a8:59:50:b5:fb:ce:bd:88:98:f6:01:a1:d3:05:5b:
ea:ac:b4:90:1a:e3:a4:f4:42:f7:ce:7f:a4:ce:a2:31:e5:50:
cb:4c:b0:9b:e4:20:1d:1e:5f:2e:a4:87:e1:17:ae:2c:c6:96:
fb:26:76:63:61:e8:44:15:b3:24:ce:00:43:b9:a6:8f:4b:c4:
79:c3:5e:30:f7:84:aa:76:e2:79:cc:34:85:33:70:d7:a4:0a:
c4:75:23:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:44:13 2025 by rpki-client