Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
File: 1-DzK75yREg7G-xT_TExXRaAjm3c.mft (raw, json)
Hash identifier: DKlD44G4qhL3nqGwGT1edH/z/gPsqyidlVx5o0Q3dqo=
Subject key identifier: C2:1D:6E:79:33:03:5F:53:87:98:C6:FF:D1:B1:06:10:A2:20:A5:A5
Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
Certificate issuer: /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Certificate serial: 01974DE9E0AB77BF2F1D9269061F7C8F7BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
Manifest number: 14C3
Signing time: Sun 08 Jun 2025 05:01:02 +0000
Manifest this update: Sun 08 Jun 2025 05:01:02 +0000
Manifest next update: Mon 09 Jun 2025 05:01:02 +0000
Files and hashes: 1: 1-DzK75yREg7G-xT_TExXRaAjm3c.crl (hash: Rmnz0TEpz+7bN0HBoGqltFwN41m4D+Sor8Op8IhPWCQ=)
2: gi2nB3ojIWFvbp9ceI5eykRUnBQ.roa (hash: SdF/4kUgrmuoBf7uz2K1ONEXYqOeDgBsypfMdmo+6rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:e0:ab:77:bf:2f:1d:92:69:06:1f:7c:8f:7b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Validity
Not Before: Jun 8 05:01:02 2025 GMT
Not After : Jun 9 05:01:02 2025 GMT
Subject: CN=c21d6e7933035f538798c6ffd1b10610a220a5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3f:ac:e6:38:66:09:e0:2f:74:5d:9b:1c:2c:
70:60:0f:c5:0b:49:b8:65:ab:08:f5:aa:bd:5c:41:
aa:fb:f5:e0:7d:5a:36:f8:55:b0:f6:e7:67:99:1f:
bd:17:d4:1c:60:0c:ba:55:11:dc:6d:67:06:18:5a:
a0:9b:9b:39:09:11:14:19:f1:4a:a6:32:9b:f0:4a:
fa:c8:0b:9e:4f:b3:e1:cc:b7:fa:b2:5e:5b:e2:b7:
27:9a:54:bf:65:7c:9a:17:38:1f:36:0c:d6:1b:e6:
04:90:29:22:e3:00:4a:03:84:ac:1d:53:e8:59:a3:
29:e3:a4:cd:2b:8e:f0:3c:8d:f8:07:c4:2e:b1:be:
da:41:af:ea:c4:7c:19:8c:4b:09:25:df:f9:0a:f7:
c6:68:9f:71:1f:8f:e0:59:7d:1d:da:49:b2:ea:b4:
0e:df:7a:ad:e0:ed:b7:55:fe:80:4f:92:ea:43:3a:
38:0b:b3:5f:bd:3d:af:2a:e7:19:6a:1a:a9:4a:6a:
6b:cf:fe:8b:2d:b5:41:a1:13:4d:d3:28:ae:cd:c5:
33:ab:54:10:22:2c:f9:8c:9c:8b:03:49:29:67:5d:
bf:e0:a7:a3:10:ae:8c:36:11:12:2f:9b:c9:96:b9:
91:f5:73:7f:98:1a:ab:07:bd:fd:b4:10:9a:92:bf:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1D:6E:79:33:03:5F:53:87:98:C6:FF:D1:B1:06:10:A2:20:A5:A5
X509v3 Authority Key Identifier:
keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:de:5d:c6:13:9f:ea:b9:ed:7a:68:33:00:3b:58:28:03:ae:
25:16:56:d9:92:45:49:37:90:ab:ac:13:00:b5:e0:87:cd:85:
f2:90:56:1d:1c:3e:bd:d5:88:15:32:b0:dd:af:61:f9:08:d4:
a0:0b:3f:84:aa:85:48:3a:d1:49:8f:5a:09:8b:08:8a:41:f8:
a3:ae:28:e0:36:a4:35:30:a1:5c:21:f0:e3:04:b0:09:0d:bb:
26:db:06:d5:3a:62:10:89:de:18:90:8d:fb:c2:b3:4b:08:8f:
e1:12:d0:d8:05:cf:f0:83:22:5c:14:1f:01:c1:41:6b:a0:a3:
d8:e9:fb:7d:c6:b2:f6:2b:13:b0:42:3d:22:91:21:45:95:fd:
fc:a0:13:08:ae:ab:5c:05:d9:2d:d4:b9:d0:b3:83:24:c2:ee:
03:7b:6e:59:1e:dd:de:03:65:ec:1c:11:58:40:54:c4:83:8d:
78:c1:c0:ac:8b:9d:32:47:43:05:1e:b7:f2:3e:cc:6d:f8:44:
68:e3:04:2a:09:9f:32:a8:e7:56:0a:b6:d1:b3:87:7e:bd:35:
6c:ac:3f:9b:2b:c4:63:b3:27:12:3e:4d:9b:dc:f6:fa:51:44:
22:bb:1b:e6:43:0d:0d:47:36:71:6b:b2:c6:1b:22:43:69:81:
12:51:4b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:56:16 2025 by rpki-client