Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
File: 1fQ0Wir2tUTNG4541z7AK4iVVG0.mft (raw, json)
Hash identifier: zUjwv52xYtMkGKo4wq+Ekiisl5xgeMZjRwHc+dZ8kNc=
Subject key identifier: 02:AA:2B:96:AF:04:90:A1:BF:0D:4D:D0:C1:E2:3E:D7:6A:57:F2:10
Authority key identifier: D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
Certificate issuer: /CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Certificate serial: 01974DE9ED552EC393B05D8163EA42B2F41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
Manifest number: 0212
Signing time: Sun 08 Jun 2025 05:01:05 +0000
Manifest this update: Sun 08 Jun 2025 05:01:05 +0000
Manifest next update: Mon 09 Jun 2025 05:01:05 +0000
Files and hashes: 1: 1fQ0Wir2tUTNG4541z7AK4iVVG0.crl (hash: gTEWi0aZQRslL97VLrZHqE2W6d7XWk389EImNfr62mE=)
2: 3_rjwimXt_D0WovOwZfA5vsj5Yk.roa (hash: 6MzAFEIp9W8TENsOWFtdVkqyFxS1C7g+fYFthRNeyV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:ed:55:2e:c3:93:b0:5d:81:63:ea:42:b2:f4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Validity
Not Before: Jun 8 05:01:05 2025 GMT
Not After : Jun 9 05:01:05 2025 GMT
Subject: CN=02aa2b96af0490a1bf0d4dd0c1e23ed76a57f210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:f1:77:60:12:99:a4:36:bf:98:ac:b7:b1:
b2:3a:44:ab:dd:87:b4:33:5a:df:86:1c:6f:13:35:
a1:c1:ff:b5:c3:fe:5b:f1:d0:d7:5e:14:ba:30:28:
59:b7:5b:d1:b5:e4:b7:b1:f0:7f:16:81:6d:96:86:
67:7d:e9:19:db:13:fb:c6:81:9b:5f:4c:e0:c9:f4:
fc:91:1c:b3:bf:d5:aa:75:c0:cc:51:f0:c9:81:7c:
40:44:c7:2d:44:28:39:28:c7:68:2e:8d:9b:79:49:
73:43:16:e5:5c:02:15:b3:04:a5:96:0f:00:da:7d:
b0:3e:64:35:d8:2c:23:fe:4a:9e:b9:4e:db:3b:18:
8d:c1:c1:61:5e:ef:7d:e7:41:d9:e0:64:25:bc:83:
d5:94:8c:35:8c:d4:1f:3e:51:14:d0:bd:2f:18:cd:
06:2a:cf:8f:70:1c:fd:04:d3:63:7e:33:b9:ec:56:
de:11:e3:86:db:f0:27:ea:2e:75:05:1e:fa:6a:5a:
be:b5:4a:7f:de:ae:f3:9c:b3:9d:24:57:30:67:b8:
b8:4d:83:72:8e:80:7e:b0:4e:1d:cf:a0:4c:3e:35:
30:bc:ac:3f:fd:90:e8:e5:a8:e8:1a:e8:b2:0f:7f:
48:80:68:32:9a:69:61:c1:11:13:f7:2c:f4:eb:03:
24:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AA:2B:96:AF:04:90:A1:BF:0D:4D:D0:C1:E2:3E:D7:6A:57:F2:10
X509v3 Authority Key Identifier:
keyid:D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:73:50:74:2d:e0:ba:72:48:c9:c8:87:58:84:c3:06:ce:62:
84:84:0c:b1:9d:99:83:b4:46:e3:87:ee:5c:8e:d7:11:f8:9b:
ec:45:cf:29:02:3b:88:0a:3d:93:7b:6d:e5:a3:41:b4:65:f6:
bd:b6:c7:23:cc:01:4d:06:88:e5:20:e0:2a:a8:b2:e1:ae:4d:
b6:7d:0f:86:3c:2e:e9:75:25:37:d7:7c:8b:de:6a:09:cf:86:
28:3c:57:cb:55:eb:e4:08:97:1f:75:05:1a:a2:5d:b8:e1:bc:
bf:63:6f:29:fe:f8:a5:95:5c:67:b6:d4:12:56:f2:55:42:e2:
66:60:ac:b2:fd:d4:47:81:32:40:46:df:79:37:07:ff:a0:0b:
dc:db:8e:22:da:d6:8c:1a:19:10:bd:35:0b:f0:c8:6f:be:e3:
c7:36:c9:10:bc:d8:be:56:25:b7:3e:61:b9:52:4e:cf:88:3e:
57:53:8b:ab:10:c5:9f:35:a9:0f:39:7c:e4:5c:46:08:63:f4:
65:0d:a7:0b:eb:af:e8:c8:d1:0c:bf:8a:33:38:ab:39:86:1c:
69:66:c6:e8:0b:71:07:73:4c:e0:12:48:a8:94:ad:dd:e9:19:
90:01:e7:e4:e8:ff:be:e1:c4:ec:3c:16:ba:53:be:c5:b3:fa:
3a:11:ca:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:11:05 2025 by rpki-client