Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
File: 1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json)
Hash identifier: EGfeaP330vkbwoJUzfi4cLL4grF+ZVgyc5QiCrjCAJ4=
Subject key identifier: 0C:9A:3A:9D:BC:27:E4:47:04:AB:35:35:12:BB:F7:FA:AE:8D:72:9B
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 019747429FB9E46EA1705500E88BC4BB03E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
Manifest number: 1075
Signing time: Fri 06 Jun 2025 22:00:37 +0000
Manifest this update: Fri 06 Jun 2025 22:00:37 +0000
Manifest next update: Sat 07 Jun 2025 22:00:37 +0000
Files and hashes: 1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: 1DeXsbufmgIQOhm4tL1JQtA2uZNnGUdafu90hibNf3w=)
2: m2QQfUK06vFb9PgOjuRKEEy3_-M.roa (hash: r2c9NdRmbfXSJX1yrfGNpKRrDXEdWsNsnb45Hs3S/N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:9f:b9:e4:6e:a1:70:55:00:e8:8b:c4:bb:03:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Jun 6 22:00:37 2025 GMT
Not After : Jun 7 22:00:37 2025 GMT
Subject: CN=0c9a3a9dbc27e44704ab353512bbf7faae8d729b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:a4:58:8b:d1:f9:3b:2b:34:c3:7d:b7:21:
d1:98:78:e9:b1:c6:ce:03:3e:b8:4c:c3:9f:8e:a7:
ee:72:44:2c:25:78:82:7d:75:c8:c9:4b:27:e5:24:
e5:60:f9:aa:1b:b4:77:5f:5b:c2:99:ad:b9:1c:01:
d1:7f:10:3a:86:6c:4a:0a:d5:1e:89:82:a2:e6:fd:
94:33:51:ca:17:a7:43:4c:0b:1e:25:f9:01:d3:a4:
eb:60:47:07:5b:49:51:5f:40:53:8d:cf:f3:0e:ac:
4e:93:ad:f7:bb:6c:02:48:6d:04:fc:9f:95:22:02:
90:30:c6:da:ea:b4:1f:e6:87:f5:6d:32:c1:4b:41:
3c:d0:ef:fd:dd:b1:b3:e7:45:90:2e:94:72:30:3b:
34:73:0c:2e:a2:10:f9:58:17:d1:09:12:32:1e:78:
25:df:72:b8:df:ed:aa:73:c8:51:ba:e6:c8:53:cb:
00:88:2a:8e:be:a2:c0:62:2e:0b:6a:2c:57:c5:4a:
1a:de:69:8e:01:d8:ad:2d:b1:8d:db:15:b1:db:db:
71:0e:41:d1:ac:0e:9a:5d:17:db:d8:73:c1:da:65:
02:e0:0c:d1:9c:50:46:55:64:17:27:c3:61:4b:7e:
a4:7d:b1:24:ce:b3:a8:3e:1e:83:78:6e:83:01:6e:
68:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9A:3A:9D:BC:27:E4:47:04:AB:35:35:12:BB:F7:FA:AE:8D:72:9B
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:33:2e:6c:34:18:08:79:ab:e7:f6:0a:55:0a:b5:ec:0a:ea:
d4:eb:b8:9b:d0:10:e9:21:b6:df:27:1d:f1:1c:a2:bc:10:b1:
03:8e:20:05:a6:fa:70:49:c5:b0:5d:07:13:97:d8:b4:c9:89:
7a:99:61:25:14:bd:d6:cf:bc:4d:09:d9:a1:9f:a5:d5:d3:f3:
b8:1b:8d:a9:19:8c:a5:77:91:3e:64:04:dc:fc:53:a6:53:a8:
ad:e6:4f:c4:d7:a8:b7:be:2c:2f:2c:cf:d8:b2:fb:97:a6:91:
3d:db:87:8f:01:62:5f:ec:00:00:f0:f9:d7:fd:7d:27:cc:e8:
7b:26:2c:79:7f:b2:1a:2a:7a:5d:3b:d2:c7:a5:a5:40:f5:44:
94:d0:05:67:69:e9:3d:07:5f:e9:08:f3:fe:db:ce:a3:eb:16:
ff:1d:14:5c:23:fa:01:b7:2c:b1:84:e9:61:b2:87:e9:c7:f5:
0a:08:8c:01:d9:02:07:e8:b1:b4:d7:cb:e4:b5:9a:e2:43:6c:
d8:99:d6:2a:98:bd:84:32:ef:c2:40:a6:e6:eb:77:d1:7e:d5:
fb:de:02:d9:61:32:7e:e7:4c:f7:a9:19:b8:42:f8:5d:a3:42:
6d:25:b6:47:8b:81:b3:e3:b4:93:80:24:c7:3e:4b:8d:98:42:
aa:a6:7f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:20:31 2025 by rpki-client