Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
File: F88SpliemYyb7BOa-PznCsR1rXI.mft (raw, json)
Hash identifier: Znf52L1KompxIrMn7yp14lQZ+x/Xx0+jGzX+aqEJCQQ=
Subject key identifier: 46:AA:59:EE:59:DC:06:0B:A2:D8:0E:09:51:A9:37:24:BD:CB:0C:7D
Authority key identifier: 17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
Certificate issuer: /CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Certificate serial: 01974D0E00D5C4DEDDE6959241818EAEF011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 01:00:52 +0000
Manifest this update: Sun 08 Jun 2025 01:00:52 +0000
Manifest next update: Mon 09 Jun 2025 01:00:52 +0000
Files and hashes: 1: F88SpliemYyb7BOa-PznCsR1rXI.crl (hash: kZHFa0abrA0QAwEqtDAJgs/8rP8VF9Yi8HzOrGPf0l8=)
2: dAIhcdZ8fwYvVo-M_emgqHoK7ZU.roa (hash: SjeXAqHoVFgHw2EHHXptMICe3kneOtC1TL1zW8otQdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:00:d5:c4:de:dd:e6:95:92:41:81:8e:ae:f0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Validity
Not Before: Jun 8 01:00:52 2025 GMT
Not After : Jun 9 01:00:52 2025 GMT
Subject: CN=46aa59ee59dc060ba2d80e0951a93724bdcb0c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:bd:02:09:ae:8d:47:9d:a2:66:3d:45:ea:
75:b5:32:72:96:cd:ca:d8:45:74:3d:02:2b:cd:3e:
20:e2:a6:11:6c:dd:87:a7:bc:71:8a:fc:1b:64:e2:
b4:ff:8e:9e:94:be:3d:95:58:38:83:bc:57:0f:77:
94:64:7b:eb:a1:2c:e2:03:bd:8b:2d:24:db:57:dd:
27:56:fd:32:78:89:49:e9:dd:62:25:1c:27:0f:15:
9d:82:0f:06:9d:cb:a0:19:20:bb:e2:97:43:2c:c6:
ca:40:20:13:72:e2:8d:3a:c7:28:dd:86:69:02:0d:
c2:1d:0c:02:bc:da:bd:9a:ca:4b:e0:dc:fc:ca:00:
0c:a9:af:d5:54:44:40:99:45:17:e1:27:3c:fc:75:
8c:2e:f3:0f:15:f3:cc:a4:ae:ee:03:c8:ed:63:53:
1d:8c:c9:a4:1b:06:0a:4e:7d:2f:30:9c:57:86:b6:
61:4d:2e:bf:b3:2d:5d:de:70:f1:39:4a:0a:3e:b8:
29:64:1f:2c:76:0c:46:6d:9e:c4:12:cc:9c:aa:0a:
df:f6:a4:1c:90:fa:38:a3:cf:78:27:49:c2:6f:7f:
42:53:49:18:4a:82:16:86:ee:70:67:57:4e:b4:9f:
97:d9:a0:47:a1:1f:77:f5:99:fe:85:eb:87:77:76:
e7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AA:59:EE:59:DC:06:0B:A2:D8:0E:09:51:A9:37:24:BD:CB:0C:7D
X509v3 Authority Key Identifier:
keyid:17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5c:6a:ad:c9:78:94:bc:76:91:0e:8d:4f:8b:ba:69:08:46:
79:c9:1d:0a:d6:41:fd:e1:fc:38:85:a9:00:a4:24:64:34:e9:
fc:ec:b9:ce:5e:c2:ba:a1:90:4b:36:3f:be:b9:2f:69:f8:41:
16:8a:d7:1f:b6:59:72:09:ec:81:f4:67:4a:da:14:93:f0:1a:
3c:0c:58:61:d7:51:03:8f:1c:e2:b6:b5:0d:cf:d9:dd:a5:a4:
a1:f4:f0:1a:81:71:b2:75:72:44:82:4b:e9:45:76:2a:52:8c:
8f:46:5d:58:35:cf:8f:e6:6c:1d:d1:31:cf:45:3a:c6:11:5f:
35:f6:ee:d6:5e:71:79:fd:ed:84:8b:ea:90:f1:3b:ad:50:b6:
af:44:af:4d:23:4b:70:35:de:86:6e:21:fc:be:8a:ba:9e:de:
60:ae:66:0d:9d:42:4c:9d:f8:b0:4e:1a:55:42:80:6b:9d:20:
84:cc:ee:f0:87:1f:65:84:98:c3:0d:83:71:ba:01:ac:b4:6a:
1b:c8:e4:4c:e1:f8:c2:71:a2:73:25:8a:b3:ea:7d:48:05:66:
2b:d3:a7:be:f8:d3:76:61:6d:a9:df:c4:b4:1c:73:e2:a2:97:
44:4d:8f:9a:2f:5c:07:1e:6b:0b:7c:df:78:47:2c:7f:c6:01:
62:23:5a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:26:48 2025 by rpki-client