Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File: 1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier: 4azLV/ZMPnwnrzGQhZkri+keNbM5oqGkG7f6/qaXKRM=
Subject key identifier: DD:49:3C:B5:6F:86:20:85:F5:00:40:57:47:CC:F4:7D:2E:6B:F1:02
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 019770757FC3B5D5F018AA830C0E540019DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number: 0D02
Signing time: Sat 14 Jun 2025 22:00:37 +0000
Manifest this update: Sat 14 Jun 2025 22:00:37 +0000
Manifest next update: Sun 15 Jun 2025 22:00:37 +0000
Files and hashes: 1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: Can3Vf3Ax6Km1reQFt/xlKsFcCXQLhsbA2p5kwMU2sw=)
2: X106OsUC0FAl9jkdnlr5gWlzbbQ.roa (hash: JYZSAqgEH1ZLu6PBGCZjtxMtu36xGzGi2+VOR9jTAy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:7f:c3:b5:d5:f0:18:aa:83:0c:0e:54:00:19:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: Jun 14 22:00:37 2025 GMT
Not After : Jun 15 22:00:37 2025 GMT
Subject: CN=dd493cb56f862085f500405747ccf47d2e6bf102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:dd:f2:0c:97:df:1a:81:24:9e:08:f2:3a:
67:07:29:f2:5b:3c:c1:3e:61:f7:b3:3c:0a:cc:02:
e0:ab:cf:5d:ac:b0:84:3a:1c:56:eb:48:b5:47:dc:
17:2a:a5:a9:03:45:a3:68:8b:9e:9d:fe:c8:09:9c:
16:8e:e6:b9:0a:67:05:29:40:71:fd:27:64:33:37:
15:53:e0:63:38:ac:9f:98:bc:4f:69:dc:ac:fc:be:
f5:8a:48:89:3d:f1:91:e2:ef:2c:e3:d0:26:67:e8:
17:34:e6:b2:de:6a:c2:24:8c:25:0a:70:65:b2:7d:
20:93:a6:cb:9d:de:5f:b5:8c:ed:c9:17:40:96:60:
11:05:a7:48:46:a0:8e:ae:34:f8:ec:5c:56:4f:08:
d3:1f:a1:be:b2:31:e5:29:cf:d4:d6:44:9b:5c:ab:
7a:c8:57:01:b8:41:d6:7d:58:1d:d8:40:94:55:1f:
d9:06:de:81:54:59:2f:a2:da:bf:2b:84:1a:e8:65:
20:dc:4f:ac:12:e3:55:a1:d7:fd:72:26:49:44:ed:
b0:9e:c1:6c:b5:19:3b:42:e2:45:4c:ed:26:4b:95:
29:56:1a:ab:f1:8d:c2:0e:7c:68:e2:e7:eb:11:49:
5a:af:36:e0:a8:6e:ad:df:ac:57:02:ab:36:c4:e0:
58:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:49:3C:B5:6F:86:20:85:F5:00:40:57:47:CC:F4:7D:2E:6B:F1:02
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e9:25:5f:c4:1d:75:cd:6a:bf:07:70:d2:92:c1:43:b8:09:
9f:a0:25:f7:e2:fc:fc:9b:8d:d0:94:81:95:3e:8b:77:e1:9a:
ac:4d:94:68:8b:a7:53:13:e7:2f:a2:2e:1f:1f:8e:58:c5:ee:
58:8d:fa:fe:31:8a:da:b0:78:0f:c8:9c:64:4b:7a:6e:54:c7:
66:a2:f3:5a:cb:f0:51:12:c4:24:d8:c7:95:79:07:99:d6:82:
35:87:9a:b0:08:5a:b8:52:66:d9:10:b8:f7:cc:2f:5f:29:bd:
65:c1:1a:55:99:4e:ca:8b:41:de:dc:b0:66:cd:64:27:88:6d:
4d:6c:10:db:db:88:82:04:1d:13:99:22:a8:80:d3:2c:42:38:
8a:72:78:05:6b:26:66:b5:32:64:07:d8:d9:ca:b4:4a:1f:49:
57:1b:1d:10:5c:21:81:60:82:bc:00:10:54:80:85:93:08:00:
ca:29:f8:51:df:f5:16:e2:c2:6e:34:59:df:0f:99:c4:38:af:
d1:6b:b4:7f:0e:81:b5:b8:a8:21:c1:75:78:9a:ac:4f:4f:5b:
85:32:df:66:86:ba:c4:4f:7c:51:73:10:eb:51:7c:bc:fa:ec:
47:a5:f6:57:92:ea:5c:8c:b1:af:02:d7:68:64:a6:57:32:20:
8e:01:7c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:54:45 2025 by rpki-client