Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
File: 1UCrGFzzmd5s2zykXe0pa2vmj-o.mft (raw, json)
Hash identifier: 1p6dVJa/sVCAE87HslHwRZz4mlzdRKTqK26ZYh6WZkQ=
Subject key identifier: A6:E7:04:65:35:DF:5A:96:A5:12:DC:AB:10:3A:E9:11:39:40:42:FE
Authority key identifier: D5:40:AB:18:5C:F3:99:DE:6C:DB:3C:A4:5D:ED:29:6B:6B:E6:8F:EA
Certificate issuer: /CN=d540ab185cf399de6cdb3ca45ded296b6be68fea
Certificate serial: 01974E8E2F156AD7183B0E123BC096ECBEA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UCrGFzzmd5s2zykXe0pa2vmj-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 08:00:30 +0000
Manifest this update: Sun 08 Jun 2025 08:00:30 +0000
Manifest next update: Mon 09 Jun 2025 08:00:30 +0000
Files and hashes: 1: 1UCrGFzzmd5s2zykXe0pa2vmj-o.crl (hash: Ze0aYBA4uQku+gCDhx1+BGC8EUHh4VTA/YRpyH9OmYA=)
2: evwk9Zfy0oSug_OT-JqAYLVFN48.roa (hash: p8vwbzaWZAlgsI4s0YE3pDc8vzWrcDuiDp7ZJjKpleM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UCrGFzzmd5s2zykXe0pa2vmj-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:2f:15:6a:d7:18:3b:0e:12:3b:c0:96:ec:be:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d540ab185cf399de6cdb3ca45ded296b6be68fea
Validity
Not Before: Jun 8 08:00:30 2025 GMT
Not After : Jun 9 08:00:30 2025 GMT
Subject: CN=a6e7046535df5a96a512dcab103ae911394042fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:d7:39:34:cc:0e:38:0b:c4:b3:00:bf:d0:
58:59:dc:53:eb:b7:3a:fb:47:78:33:95:44:ac:eb:
ba:8d:17:42:0a:2a:dd:f7:a9:cf:e9:7a:d3:38:e7:
0d:26:f3:5d:44:c8:9c:19:60:d5:2c:28:26:4b:77:
5c:cc:3f:93:32:09:47:73:0e:12:95:54:98:a1:a0:
2c:f4:2f:a6:33:7a:28:90:1a:19:24:ae:45:7c:83:
3a:22:7e:60:b1:e3:3b:f6:4e:c0:94:2e:94:64:68:
c2:34:ed:2f:0a:92:91:fe:7f:6f:4a:76:64:e8:8c:
87:40:cc:0b:8c:dc:5f:b9:b8:61:0f:74:83:c2:7e:
98:44:dc:f1:09:c0:a1:5f:7d:67:38:82:15:f4:73:
b3:04:8c:28:8a:63:d9:88:80:fb:f3:b0:6b:89:89:
03:b7:d1:03:d6:4f:7c:de:72:90:b2:11:a1:5c:0b:
3e:ae:2c:08:71:ec:b8:b5:9a:ed:39:17:8e:5b:48:
ca:e7:22:95:79:5b:0e:67:ff:7e:64:03:63:67:96:
46:6d:cd:54:33:5a:c5:6f:4e:a5:0b:0d:86:d7:b3:
c0:ad:64:0b:6c:c6:69:85:be:28:35:8a:fd:13:2e:
b8:4f:46:f9:d1:6f:6d:37:db:50:b5:c8:c4:bd:4f:
99:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E7:04:65:35:DF:5A:96:A5:12:DC:AB:10:3A:E9:11:39:40:42:FE
X509v3 Authority Key Identifier:
keyid:D5:40:AB:18:5C:F3:99:DE:6C:DB:3C:A4:5D:ED:29:6B:6B:E6:8F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UCrGFzzmd5s2zykXe0pa2vmj-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f7:46:f2:84:6b:e6:dc:69:ca:e8:6a:a7:7b:bf:fd:9b:94:
39:1a:43:68:40:bf:ae:7c:4b:47:3c:b4:aa:a2:e9:d7:60:d3:
9a:bc:f0:1f:8f:88:62:09:f0:17:d9:0c:c2:32:4b:09:97:81:
e9:87:47:8b:a6:d0:0d:78:cf:42:3a:a5:b2:df:7b:61:49:63:
30:e6:2d:48:46:fc:9a:40:7d:65:22:8b:28:1e:c4:21:d8:ad:
15:11:4e:e6:f3:a0:6c:27:02:d1:70:04:07:c0:80:5d:1e:21:
85:4b:cb:34:97:a2:04:e0:d8:a6:f0:a8:e8:e6:d0:19:21:83:
1e:23:9a:30:aa:58:00:11:90:71:83:03:4f:2d:58:19:72:97:
d9:4a:14:96:c8:9a:b5:d6:75:f2:9e:a6:cc:e8:c3:2a:3b:64:
ef:69:03:5e:ce:54:21:5a:44:14:c6:57:ec:72:c5:f2:31:62:
a7:b2:0f:e8:6e:32:1c:60:db:71:89:b1:d7:34:29:ee:37:cb:
29:db:51:e1:b2:82:a9:a1:31:25:77:1d:bb:1e:0b:e0:ab:04:
95:1b:7f:42:e6:16:51:15:f7:f6:ac:43:19:50:ce:18:04:ed:
39:b7:cc:eb:20:2d:98:af:49:be:f4:d4:c7:62:d3:ba:e5:72:
54:1a:dc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:11:01 2025 by rpki-client