Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
File: v1M926H4p23i70lx_NUvlEHOCYk.mft (raw, json)
Hash identifier: mFGVuK0LSqB2HAqgavzqJ5ex8kXd7xF3eeeSYh7v2rc=
Subject key identifier: 1F:1C:48:F3:EF:C4:5D:BB:8F:A6:E8:56:DA:54:FE:B3:BC:39:F8:7C
Authority key identifier: BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
Certificate issuer: /CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Certificate serial: 01974A436190FC0443F544ED2CB87E126D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
Manifest number: 0FB8
Signing time: Sat 07 Jun 2025 12:00:19 +0000
Manifest this update: Sat 07 Jun 2025 12:00:19 +0000
Manifest next update: Sun 08 Jun 2025 12:00:19 +0000
Files and hashes: 1: v1M926H4p23i70lx_NUvlEHOCYk.crl (hash: 5yQgbIR9voh/aM15Sy2AUqFWeqUtMQr0IdVQTF4Zn6g=)
2: wIL-REFz4DYY-rRWvHtgF8VAa9w.roa (hash: 0FFPo6/uMpZSHo3dFvbnUBqikS2pyiKoisgVQpgN98I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:61:90:fc:04:43:f5:44:ed:2c:b8:7e:12:6d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Validity
Not Before: Jun 7 12:00:19 2025 GMT
Not After : Jun 8 12:00:19 2025 GMT
Subject: CN=1f1c48f3efc45dbb8fa6e856da54feb3bc39f87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4e:8a:53:74:02:ca:4c:99:79:0e:47:55:a0:
94:67:ab:2a:1d:77:91:23:5c:e2:ff:a3:09:92:80:
cc:bf:fd:5e:ba:0c:aa:79:3c:96:19:b7:8b:73:2d:
d8:69:c5:80:32:d3:57:ed:6a:6c:10:fd:6d:12:54:
7f:b8:15:2a:cb:35:e4:8d:8f:9c:c3:f4:94:2c:2c:
6f:f7:5f:e0:32:d4:2d:95:6a:56:b1:f6:4c:b1:01:
f0:09:f6:d0:64:a1:9b:8b:ca:c3:d7:90:c0:b3:fe:
c9:05:d8:67:f3:ef:8a:07:18:d4:db:2f:58:bd:62:
a3:a0:6d:3e:37:83:64:ed:48:c8:fc:91:07:58:e9:
6a:62:ba:50:0b:ca:1a:b2:7b:d8:53:57:27:99:b7:
fe:c4:7b:ce:cf:5a:a1:b8:84:28:cd:45:13:5c:5e:
10:2b:55:7a:37:15:9a:df:47:78:df:bb:b4:81:13:
9e:44:fb:b2:09:5d:fd:2b:65:48:f9:1b:2f:fa:87:
c6:bd:c9:d1:66:89:f6:6d:a4:5a:50:bb:9e:d8:63:
47:75:30:43:e0:80:c5:63:71:13:51:77:24:97:ab:
1c:0c:f2:19:7e:ad:4f:4f:3b:80:39:1f:92:20:53:
cc:54:15:79:37:cb:56:99:1e:72:e8:a9:8b:13:66:
1b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1C:48:F3:EF:C4:5D:BB:8F:A6:E8:56:DA:54:FE:B3:BC:39:F8:7C
X509v3 Authority Key Identifier:
keyid:BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3b:9c:a0:f5:d4:8e:a1:1e:2d:72:1d:34:4f:07:ec:9c:07:
24:45:55:fe:4a:85:1c:e8:74:01:9b:8b:11:02:65:1f:e3:6f:
6f:dd:d7:3f:8a:45:ac:8a:95:cf:31:3e:ed:da:72:b7:89:fd:
f0:11:a7:c0:29:6a:81:fa:11:72:57:3f:7b:8f:b5:05:32:27:
ea:f8:da:e3:1f:09:5c:02:6c:b3:99:27:38:8c:38:e3:9d:18:
2b:d1:19:5c:42:6c:7b:28:d1:3d:57:c9:24:ca:32:a3:58:a0:
39:59:3c:a7:09:9d:56:51:de:ac:a1:97:2e:13:d8:3d:29:da:
f1:f3:27:b3:7b:f6:9e:d3:2d:f8:a4:93:b3:26:bf:e5:04:a9:
f5:89:5d:75:f0:e0:20:b3:5b:c2:65:de:aa:a8:4e:f4:59:6e:
77:7f:59:95:e1:4b:c5:c4:7c:09:85:2c:db:5f:8a:89:fd:78:
61:67:fe:3c:51:85:08:f8:a0:3e:dd:da:7b:16:88:33:4d:05:
e0:4b:46:b6:9d:e8:ef:be:c4:fc:40:89:e2:e7:02:35:c5:0b:
f4:83:45:b4:f9:2e:9e:bd:d3:36:c7:83:b2:ce:0a:94:5e:d1:
3d:b1:37:c1:80:ec:7c:f5:96:6d:7b:57:34:e5:35:3e:2d:fd:
a4:ec:ad:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:31:26 2025 by rpki-client