Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
File: 1pI99NrpGVDPANI1_jngDuo4FtI.mft (raw, json)
Hash identifier: C+hpfmd1ElibeFGvRbvbfqKCCjD+ALmvG1hbvk9r+qA=
Subject key identifier: 28:53:5E:AF:0F:9B:7B:0F:42:5A:EA:6E:10:CD:95:B5:F7:33:6F:EC
Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
Certificate issuer: /CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Certificate serial: 0197500EAEB3758255623440185AEF11FD6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 15:00:28 +0000
Manifest this update: Sun 08 Jun 2025 15:00:28 +0000
Manifest next update: Mon 09 Jun 2025 15:00:28 +0000
Files and hashes: 1: 1pI99NrpGVDPANI1_jngDuo4FtI.crl (hash: MXfdQnKy/IyAuvOVMToTpZjEGEoxM3i82N23c73gwss=)
2: DiWaQ483B87mmH9xBQjUT-gKREU.roa (hash: +HNilVQSXx0rRIqto+Np0Fi3ncazRRex3uQcgtaQ1OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:ae:b3:75:82:55:62:34:40:18:5a:ef:11:fd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Validity
Not Before: Jun 8 15:00:28 2025 GMT
Not After : Jun 9 15:00:28 2025 GMT
Subject: CN=28535eaf0f9b7b0f425aea6e10cd95b5f7336fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2e:33:8f:c2:66:7a:6f:02:d5:4c:9e:8d:62:
c5:29:53:11:5b:67:74:9f:55:7e:d9:bc:3c:4a:dc:
f3:27:33:5a:d8:57:1c:f3:e4:26:3b:be:6a:ad:e2:
79:79:aa:01:43:fe:2e:cd:46:b7:4c:d0:e6:aa:35:
06:67:08:07:fa:9e:6d:58:fd:b3:85:27:80:44:a5:
c0:ad:9c:e5:dd:5e:57:e3:97:bb:78:36:59:f7:65:
f8:7c:c1:cb:1e:a5:3c:09:b9:b1:6d:07:7f:06:23:
37:a9:81:ef:8d:2f:00:55:8b:39:72:5f:61:17:0f:
5a:f4:fe:fa:59:ca:aa:7b:aa:32:8b:b0:a5:40:88:
2d:63:d5:e1:6c:cd:0a:8f:e8:12:20:bf:3a:17:d1:
95:9a:a4:26:cd:ac:82:81:d0:95:7b:ee:57:6d:b3:
5a:b4:d1:d9:a6:1f:37:05:f4:85:66:e4:89:bf:30:
7c:e8:a6:e3:8b:41:f0:d1:2a:91:98:02:60:a4:b9:
f2:44:50:c7:58:bf:2d:22:69:20:53:29:3b:37:d1:
ab:a8:5d:09:2c:14:ba:c0:3e:f1:94:0c:96:e3:53:
50:f2:7a:c5:34:52:57:cd:db:57:b8:98:20:11:1f:
47:85:3d:f9:07:16:47:ec:a5:56:1b:d1:74:27:c5:
15:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:53:5E:AF:0F:9B:7B:0F:42:5A:EA:6E:10:CD:95:B5:F7:33:6F:EC
X509v3 Authority Key Identifier:
keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d5:01:11:f9:49:51:e1:4a:ab:a5:3d:1a:27:83:f8:58:50:
f8:ba:1f:7f:06:a2:b8:2e:af:fc:1a:c2:a6:a8:8e:45:26:ec:
2d:51:e8:b7:c5:2e:d3:16:bd:af:cf:a0:2f:91:a6:f1:35:ec:
b6:5f:e0:a5:ce:bf:9d:66:3f:ee:30:57:81:30:31:d9:c0:2e:
1f:ec:67:0d:f6:0f:c0:99:6c:4e:92:a8:09:36:ed:64:1a:c6:
d4:43:56:bf:4d:8a:08:fc:5f:aa:e1:d2:b1:a1:37:77:54:6e:
e0:47:22:a1:5d:48:b8:34:c6:6d:50:8d:70:87:f1:f0:a2:92:
fd:e1:95:91:3c:a5:76:99:8a:33:5c:0c:8d:fc:d9:60:14:e5:
95:09:d3:ee:78:d9:27:46:d3:ea:4b:d4:49:0f:8a:18:04:be:
03:14:0b:01:09:29:af:6b:95:6a:e3:e4:53:64:d2:e7:24:63:
2a:0e:a5:a0:77:5b:21:cb:ef:27:98:8b:f3:94:b0:68:4d:f9:
eb:ef:31:73:ec:bb:29:62:82:e5:00:a1:48:b6:3b:79:83:f8:
d3:f6:92:59:9c:b0:05:7d:ed:de:a3:b7:fa:07:3e:35:53:5c:
fd:f1:0e:04:6c:00:ff:eb:ab:bc:80:fb:92:ab:0e:26:3b:17:
63:29:bc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:23:51 2025 by rpki-client