Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
File: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json)
Hash identifier: gaxYZncMcxgKVz726P6rAHfPDgxPvFZdUgDtVlXdCYg=
Subject key identifier: D1:85:09:1E:F2:1E:EC:9A:2F:A0:DE:1C:78:AC:E2:C8:5F:59:C4:F4
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 01974FD7FE6D8A57DAE79B015B0EBCC31467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 14:00:44 +0000
Manifest this update: Sun 08 Jun 2025 14:00:44 +0000
Manifest next update: Mon 09 Jun 2025 14:00:44 +0000
Files and hashes: 1: IwZ3Z1oDg1FS827JU1tSlj8eb74.roa (hash: yIwUb6bD8Yu/MZmIZhvd3q5td4NtibwxlrC7RDOCuHM=)
2: SMQ9QVGYhC0I8pIMSi7pgpsFW1c.roa (hash: P/Liu3FMs1RtZp34UhptoqasRnmxQc/4vGzdeX20sw8=)
3: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: a701kYmDdRXM+6BTmz6iaOxh+X2lOHCBzkK1Ruo8H6I=)
4: hyDMWUWDOwPLRhTXHqAvo0HE2Eg.roa (hash: qhk5EHJ02rRG0lhE9onju5bJfrP0rsBjK4tlKrdzuZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:fe:6d:8a:57:da:e7:9b:01:5b:0e:bc:c3:14:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Jun 8 14:00:44 2025 GMT
Not After : Jun 9 14:00:44 2025 GMT
Subject: CN=d185091ef21eec9a2fa0de1c78ace2c85f59c4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c4:91:af:2d:c6:1f:b7:16:1f:3e:07:b6:2e:
b1:12:08:b2:c2:06:a9:d3:08:7b:66:3e:79:2d:85:
fa:cb:86:4c:b3:a8:00:9f:54:6b:c9:74:e6:4a:81:
62:a4:87:77:27:f8:d7:91:bc:f5:99:13:4f:70:61:
32:a4:20:d4:0a:1e:9d:32:d2:5f:db:6f:df:c7:5d:
e4:78:0e:1f:71:3f:fd:4e:1c:10:ff:38:f7:4f:92:
bb:6b:0b:f6:57:b8:d4:c0:ec:8a:61:79:d5:b6:30:
97:e9:39:fb:4e:d6:1f:4e:ab:ad:f8:66:1f:03:dd:
2f:63:51:29:78:8e:e2:bf:6e:94:ae:12:5e:39:ad:
c6:00:4b:19:f0:07:ac:ae:59:10:66:09:e7:5b:bd:
b2:b1:c2:c6:80:c3:77:ec:59:97:a1:8e:f5:12:93:
7c:6a:6c:90:fb:15:07:ed:21:27:f1:bf:21:9b:87:
93:12:e3:d3:9f:1e:50:1b:ff:25:b7:b6:c0:54:6f:
f7:6d:87:d5:09:f2:af:d1:f1:ef:34:be:29:5c:0f:
67:c7:51:b4:e0:94:36:77:6e:59:3c:f9:f7:70:12:
d6:69:d1:f9:bc:b9:d8:78:40:de:5b:a9:d2:b9:e5:
e0:dd:02:e5:7f:3e:99:b4:67:ff:c1:79:87:b1:e5:
91:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:85:09:1E:F2:1E:EC:9A:2F:A0:DE:1C:78:AC:E2:C8:5F:59:C4:F4
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b5:63:c1:c2:6c:0c:6e:4e:c0:60:00:05:cc:f3:50:e7:44:
3c:4c:f0:14:5d:c0:6c:4d:5e:c6:c8:41:cf:42:d8:f1:fc:61:
6f:0b:2e:cb:a1:a2:5d:5d:d3:93:c5:c6:f2:db:e7:59:43:8e:
0a:b2:e0:61:1c:db:6d:17:7a:44:11:a8:2a:8d:f0:7d:72:81:
b2:24:5d:f7:6c:25:d6:e8:4b:38:32:93:a8:a4:cb:e6:6e:23:
fc:d3:0e:3c:4e:a2:58:62:9c:3a:09:b6:3a:b7:cb:0c:f2:fa:
50:e6:42:f4:02:bc:fe:07:4c:25:65:36:70:ff:e7:59:9f:25:
27:d3:19:1d:e4:1a:01:fb:ae:1c:9f:b4:8a:c2:bf:1d:c5:90:
b0:93:bd:c1:35:3c:de:f2:af:ec:35:1a:f3:02:2a:ec:d8:07:
c0:e5:c1:86:ed:2b:a1:c9:e1:90:cb:34:4e:07:e4:de:a2:39:
34:e7:23:48:34:00:db:18:fd:2d:e1:0d:9b:e0:9c:c2:58:1c:
7c:f6:2e:54:6a:7e:f0:25:ec:18:75:e3:bc:8c:d4:4d:6d:64:
02:9d:13:b1:4b:cf:55:8a:60:f0:37:c5:19:53:dc:2d:9f:68:
28:e6:f2:cf:b4:41:09:12:d8:bc:cb:88:2f:fc:7f:7a:3b:42:
89:73:7b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:24:17 2025 by rpki-client