Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
File: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json)
Hash identifier: AYQKfszsMNU8QPkSzYkAGc4bn/Y6e9jBBiE/Gt+tUro=
Subject key identifier: 12:97:F1:E0:4B:5E:FB:C2:A0:F7:0B:21:FD:89:F9:19:24:D6:EB:0C
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial: 01977075517880AF338E57B1F29A41C24819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
Manifest number: 1595
Signing time: Sat 14 Jun 2025 22:00:26 +0000
Manifest this update: Sat 14 Jun 2025 22:00:26 +0000
Manifest next update: Sun 15 Jun 2025 22:00:26 +0000
Files and hashes: 1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: U286b7rmEoB4sN8/jspifKU4+9Tv4fdd9DiS/caG1vQ=)
2: 8WExy4twgMjUhhd6ZwwuMmQy8hc.roa (hash: DEuWlnE+ezZMUM7awLwZ5+QzOvWVXlr73rgH56B1SXs=)
3: UPhAaB84R0Xe1XTexqfwP-ciVHM.roa (hash: p28psRkGWXa6krQq8ETJGtszXl3PhjiqO+T48rxu9sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:51:78:80:af:33:8e:57:b1:f2:9a:41:c2:48:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Validity
Not Before: Jun 14 22:00:26 2025 GMT
Not After : Jun 15 22:00:26 2025 GMT
Subject: CN=1297f1e04b5efbc2a0f70b21fd89f91924d6eb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:72:15:71:aa:07:ae:05:8b:98:3d:4e:d6:82:
7d:20:55:a6:e8:ba:2b:36:f8:83:8e:81:93:ae:f7:
15:60:ca:dc:6e:17:b7:1d:f7:22:a8:63:8a:3f:5c:
c9:c7:1b:d5:b8:16:88:e9:cd:d8:86:a2:eb:d9:ff:
68:b4:f1:ef:d8:e9:29:d0:b0:da:9c:80:42:e7:33:
8c:ce:01:19:86:e0:e0:8a:04:1d:d3:ce:f4:c6:4b:
5f:67:0e:d8:4b:a6:81:c9:17:05:3d:d2:81:5b:92:
cc:b2:d9:c7:87:86:04:75:18:b7:72:3b:6a:af:77:
8b:0d:6b:79:ed:ca:8a:3a:d7:62:c8:f9:63:ba:01:
48:33:0a:65:ef:7a:e4:58:71:eb:d8:20:6d:dd:07:
52:38:b1:75:2e:42:bb:f8:88:98:31:f2:0c:8a:71:
6c:9b:37:4c:06:20:82:90:24:cb:c8:24:cc:85:ef:
44:33:cb:40:52:0a:7b:1b:d9:4e:92:f2:67:c6:52:
89:0f:7a:68:2d:05:ad:88:c3:07:83:56:cc:c1:69:
86:56:4e:40:05:ab:64:42:82:c6:6a:13:03:13:f8:
3c:88:b9:dd:f0:0a:93:1c:3e:07:28:ce:a3:e6:9c:
85:3e:78:d3:c0:00:26:4d:45:b8:66:c4:5e:0c:d2:
4d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:97:F1:E0:4B:5E:FB:C2:A0:F7:0B:21:FD:89:F9:19:24:D6:EB:0C
X509v3 Authority Key Identifier:
keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:fb:84:5f:88:68:3f:88:ad:d8:30:bd:c3:3b:d9:f3:3e:c7:
e6:f4:fd:d2:fe:c0:7a:27:af:99:aa:f2:0b:76:7a:db:74:9c:
d1:00:46:40:c4:54:65:80:2a:f9:71:f5:c5:cd:c2:02:52:a8:
c4:6f:fa:b8:57:46:c5:c3:79:6d:d9:c8:00:6e:45:a6:55:92:
4d:fc:18:de:d7:64:ce:b7:43:29:28:28:b3:4a:47:89:ea:1a:
1a:1f:cf:95:14:3b:96:9d:b4:3f:56:9b:96:fc:6a:62:ad:a2:
3c:1c:28:76:26:46:5b:0f:7b:33:0a:e2:6a:9f:86:98:b2:22:
6d:c0:54:8a:92:cf:04:30:71:d5:6e:08:ab:25:42:55:b5:92:
af:3c:06:78:9e:13:da:70:38:a1:b3:fb:1a:0b:86:df:0d:23:
60:1d:f2:39:37:71:ea:6b:df:fc:36:b2:6a:d3:e7:92:9c:cb:
08:d9:a5:4b:98:a4:73:15:74:7f:ad:05:a5:9d:ea:a9:a5:a3:
ed:53:1f:ab:7f:23:e8:f7:0d:c1:55:2d:57:88:20:4c:53:2a:
aa:ab:41:2b:f2:0d:07:07:ff:d6:81:e7:22:a4:db:6e:57:05:
72:64:a6:cd:16:ea:85:65:93:d0:b3:f1:99:d1:8c:7b:90:a0:
9d:88:56:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:38:29 2025 by rpki-client