Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File: 1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier: WC/m8Uc3cz/c9z5H8AFC/OZfqkLHJOwWYp9cj0ZodX8=
Subject key identifier: D1:C2:8E:A9:1C:29:95:72:1B:6C:67:6A:BF:38:8D:DE:B3:B2:1F:7E
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 019768BBA896ACFE8FBCCAF129924D08219C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number: 0CFE
Signing time: Fri 13 Jun 2025 10:00:18 +0000
Manifest this update: Fri 13 Jun 2025 10:00:18 +0000
Manifest next update: Sat 14 Jun 2025 10:00:18 +0000
Files and hashes: 1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: 7HYb8TY9MxOQgfkLz7TIPs9cW021WHaLuy3WY7itgys=)
2: X106OsUC0FAl9jkdnlr5gWlzbbQ.roa (hash: JYZSAqgEH1ZLu6PBGCZjtxMtu36xGzGi2+VOR9jTAy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:a8:96:ac:fe:8f:bc:ca:f1:29:92:4d:08:21:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: Jun 13 10:00:18 2025 GMT
Not After : Jun 14 10:00:18 2025 GMT
Subject: CN=d1c28ea91c2995721b6c676abf388ddeb3b21f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:25:e8:15:da:1f:2d:59:4b:32:e1:f0:9d:
c4:15:81:38:5f:97:33:ae:8b:21:db:09:82:4c:62:
fc:87:cf:d4:9e:ab:a9:f3:87:e2:46:52:37:de:68:
b4:af:bf:ef:bf:b5:76:ce:b0:71:7f:f5:b6:4f:e3:
02:16:24:24:0a:ba:ac:25:67:55:14:9f:94:9d:df:
c4:61:b3:34:3d:7a:16:21:df:94:70:08:ec:e9:51:
e3:f2:9b:5d:ed:1e:75:fb:8d:05:84:a4:19:77:c1:
24:96:a1:f9:b2:36:90:fd:6a:85:58:47:1c:ae:f2:
33:27:9c:40:8c:ad:43:c3:a0:ab:fd:97:05:13:d3:
ed:2b:aa:79:77:9e:e8:4c:27:5f:c8:63:23:91:7f:
a5:ba:c1:be:87:dd:3b:09:78:92:44:9c:e1:42:56:
fd:9c:2b:4d:e0:d1:da:e8:c7:ae:9c:b8:3a:3e:ad:
6d:3b:34:87:62:24:f0:87:be:71:12:90:87:ed:8b:
43:e3:65:4c:a6:e3:39:d7:80:7e:2f:30:0a:c9:18:
88:7d:6b:eb:a0:63:2c:c1:f8:56:c7:b2:88:53:17:
63:d2:aa:65:30:a7:10:2f:ec:61:74:0e:68:26:22:
01:58:2a:a7:30:81:78:41:37:7a:50:23:41:83:43:
39:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C2:8E:A9:1C:29:95:72:1B:6C:67:6A:BF:38:8D:DE:B3:B2:1F:7E
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d8:c8:71:8f:36:37:b6:dc:88:68:e6:2e:70:6b:b0:47:e7:
6f:d2:45:9a:d8:b6:d3:a1:5e:96:0c:fd:6d:41:85:2c:2b:17:
7f:63:4c:08:9d:6b:66:47:d1:a5:c4:c4:3b:f3:9c:c5:6f:b0:
b2:4c:2d:32:0d:8b:8b:ca:8f:99:30:f9:b8:39:95:31:fb:d1:
5e:0d:22:ac:3c:82:28:06:5e:da:a8:04:a5:e6:d7:80:8a:90:
1b:92:c9:82:a7:fb:87:81:ed:f4:90:1a:fc:58:d2:7a:ec:e0:
b9:3b:ff:d2:b9:7c:78:fd:3c:9f:e8:d9:e2:2d:4c:4d:5b:23:
38:32:47:02:94:81:d4:2a:f4:f2:8a:42:71:2e:c9:60:5b:58:
f5:5a:da:0f:59:3b:b4:c8:63:7b:08:22:e6:39:4f:0d:67:fe:
18:50:30:84:5e:15:93:aa:77:ea:c2:34:eb:44:8b:c7:66:9c:
ac:9c:20:39:cc:a1:ea:60:b4:84:fa:5e:35:94:21:cb:fd:ad:
6d:bb:cf:56:cb:a0:0c:ea:c7:71:fc:c4:8f:29:22:88:b6:be:
48:5d:7e:f5:5b:4e:13:e4:72:cd:2b:e4:e0:19:7a:bc:6d:8c:
5f:c6:df:8f:cb:6f:e6:a1:27:ce:21:02:c9:15:a2:35:d5:8a:
71:9d:79:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:05:29 2025 by rpki-client