Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File: 1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier: HMYK9Ar72ecbTCnX+ul88TAPjEX5g/MoQdfR6NWlmgs=
Subject key identifier: F7:2B:4C:49:22:54:22:30:83:3E:A8:B6:B3:CD:55:05:F9:13:66:F6
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 0197537D9D49DF79CAD4E920F7CDEE8664A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number: 0CF3
Signing time: Mon 09 Jun 2025 07:00:30 +0000
Manifest this update: Mon 09 Jun 2025 07:00:30 +0000
Manifest next update: Tue 10 Jun 2025 07:00:30 +0000
Files and hashes: 1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: WDc3y35KMCSpNRm+Z7UsNN8c9e7q64EclZGXBJZt1Ec=)
2: X106OsUC0FAl9jkdnlr5gWlzbbQ.roa (hash: JYZSAqgEH1ZLu6PBGCZjtxMtu36xGzGi2+VOR9jTAy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7d:9d:49:df:79:ca:d4:e9:20:f7:cd:ee:86:64:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: Jun 9 07:00:30 2025 GMT
Not After : Jun 10 07:00:30 2025 GMT
Subject: CN=f72b4c4922542230833ea8b6b3cd5505f91366f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:4c:35:5e:7e:6b:b9:53:21:55:19:29:5a:
a6:c1:4e:0c:c8:e7:00:79:01:0f:d7:80:cd:14:45:
f5:31:22:ec:8e:ab:85:6d:58:b3:91:92:35:f6:9a:
c5:6b:57:47:ce:b3:e6:7a:21:d9:48:ff:1d:c5:48:
5b:8f:8e:5d:7d:ae:61:c4:59:a3:72:75:6d:7d:3a:
12:c0:65:3a:30:ba:1d:72:a6:ad:8c:56:05:05:13:
29:a5:3e:3a:7d:a1:ed:a9:b8:f4:f5:18:26:e5:36:
b2:40:a8:ff:05:8f:74:ee:7c:f0:84:2d:8c:e7:01:
3b:67:14:07:04:45:96:3a:a8:df:54:42:12:09:fe:
e5:48:2f:5c:bf:df:3c:27:3e:46:94:08:e5:9c:09:
bd:92:c0:34:85:8c:a8:2d:ec:18:62:0c:e6:20:db:
7c:f3:e9:cf:ab:fa:80:79:8d:70:5e:0a:3e:ea:dd:
10:4e:c8:7a:a6:22:33:cd:4c:ca:38:80:cc:02:56:
57:a9:49:44:d0:63:b4:2d:5a:58:c4:79:18:3e:b4:
b6:8a:6f:31:1f:f2:18:ab:8d:fa:40:8f:85:e6:8f:
1e:7b:a4:65:26:95:ca:b4:70:da:0a:e5:ad:97:f2:
74:f7:cf:ea:8c:80:56:3a:93:1d:5f:ca:87:4a:6f:
f4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2B:4C:49:22:54:22:30:83:3E:A8:B6:B3:CD:55:05:F9:13:66:F6
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:89:74:e5:3e:d0:29:b8:ea:50:1b:88:fd:df:62:09:9e:64:
5d:59:24:e6:77:8e:be:73:7d:5a:d0:a3:b7:d9:38:ab:5f:b9:
24:5f:86:7f:1d:af:56:1d:27:ca:c0:fb:52:b6:e7:d6:e3:fa:
fb:96:e9:57:44:4f:72:3b:8a:47:ab:0b:eb:a6:c6:0e:c6:9e:
22:ef:c8:dd:54:97:79:51:26:64:ef:8f:1c:63:5b:f8:70:41:
ae:9e:94:e0:64:bc:cd:42:0b:2e:43:57:00:c0:ff:b5:5b:ce:
3a:e2:6d:fc:1e:44:3e:e6:89:d2:20:3e:8b:56:2c:38:63:7e:
c8:27:8f:68:3f:51:b9:7c:8d:9c:29:2e:27:f1:2a:43:88:95:
59:b6:6a:39:cc:7a:21:76:47:2f:ef:ed:81:c8:9c:77:71:08:
34:47:5b:13:fe:6b:48:ec:5f:74:e4:de:3f:c5:a5:6a:37:ef:
5e:65:49:12:c8:a7:ae:9d:64:43:5f:12:92:f5:11:45:e9:4a:
83:ab:a9:20:a3:53:03:e6:44:86:66:23:1b:35:d5:97:90:6a:
f4:ec:5f:b9:00:32:79:46:24:51:2f:9c:a6:40:60:e7:ad:66:
d9:21:b3:d8:40:95:20:ae:e6:2d:fa:96:4d:a2:22:a0:29:14:
e0:68:7d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:55:39 2025 by rpki-client