Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
File: C-1D9AnLNc6153tW0LvJpMwtJpM.mft (raw, json)
Hash identifier: R1Hm6FvwP4T2U7iKy4GIxn6+dmg0K0LrqykPq4sPTFg=
Subject key identifier: 52:E5:FE:F4:03:C4:06:E9:25:78:3B:A9:30:BC:74:2A:66:83:FA:C8
Authority key identifier: 0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
Certificate issuer: /CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Certificate serial: 01974968550607C3161BA26008E458ED6682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
Manifest number: 1509
Signing time: Sat 07 Jun 2025 08:01:03 +0000
Manifest this update: Sat 07 Jun 2025 08:01:03 +0000
Manifest next update: Sun 08 Jun 2025 08:01:03 +0000
Files and hashes: 1: C-1D9AnLNc6153tW0LvJpMwtJpM.crl (hash: YBIRWDKcWE+DZVIA/JN+VIc9x98qTpNG7FJsmrD8E44=)
2: sBhtRIsrLGDcCHm1OuhjaCUr2_0.roa (hash: Ua22PTmfzyT5DTnVC3xgijxYiy9LNm1nh8SzeYUTwDc=)
3: sZiCl9lv80fsle91xuU3_BKnt_s.roa (hash: FzOmDkg8UvmI+LcJN7K+9dJBFFV57UBgPrTOJAC0yec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:55:06:07:c3:16:1b:a2:60:08:e4:58:ed:66:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Validity
Not Before: Jun 7 08:01:03 2025 GMT
Not After : Jun 8 08:01:03 2025 GMT
Subject: CN=52e5fef403c406e925783ba930bc742a6683fac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6c:4e:15:e1:19:ba:9e:17:74:b5:df:3e:68:
20:d6:f5:ed:9e:cd:54:d8:2e:bf:1d:13:1f:84:20:
ee:d6:35:74:09:62:d3:e4:5c:65:e3:35:6a:dd:63:
f3:8b:9e:14:35:95:d5:a7:55:9e:cd:2e:d6:32:11:
d3:1f:2a:58:29:47:f0:ef:ef:f9:27:de:19:94:e9:
63:f9:8a:23:0a:13:79:c7:44:11:90:40:9b:41:f2:
a4:eb:19:b3:53:73:c0:c3:8e:a2:aa:c4:09:88:34:
e6:18:0f:42:51:4c:68:1b:40:3c:c9:4f:f7:35:2e:
4c:53:83:8f:99:4b:30:d8:b4:fb:96:4c:2c:d3:0c:
28:a0:cb:bc:9d:5f:fc:b8:25:47:ac:e2:7d:49:2b:
6b:75:3a:f3:f2:74:a8:7b:72:eb:cd:1c:16:c2:d6:
71:da:c3:d9:6f:ad:8c:2e:28:b2:3d:8a:1f:35:72:
46:e0:6b:d1:03:1f:41:64:ec:93:6b:b5:9f:4d:43:
cf:3d:33:70:94:5b:68:49:ec:d0:d3:e0:96:7f:7a:
88:e0:55:80:d8:29:31:61:75:d1:89:16:df:c9:e1:
36:20:82:91:29:7c:42:89:33:66:b8:ea:bb:41:1a:
90:b6:75:a8:24:df:35:11:25:94:d6:da:6c:0e:68:
34:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E5:FE:F4:03:C4:06:E9:25:78:3B:A9:30:BC:74:2A:66:83:FA:C8
X509v3 Authority Key Identifier:
keyid:0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9c:ac:33:a6:4a:f5:27:65:f4:24:0d:45:78:3c:7b:eb:d7:
04:05:3e:54:8c:22:e3:6b:a4:81:28:21:d4:c0:6f:7d:14:b0:
f6:f8:8f:ce:9e:e4:77:8a:ae:79:ac:61:f7:a1:7b:96:b5:0c:
a0:c1:41:2c:fd:6d:53:74:f9:07:b4:7a:35:c4:f9:f5:c3:69:
9d:65:66:7e:1c:01:f5:de:43:d2:27:6b:c4:77:b5:44:c2:3d:
7c:26:d3:bc:19:48:40:26:41:c5:6f:35:be:20:cc:d0:e7:9c:
f8:f6:cb:5c:59:ed:9b:3c:c3:2d:74:c4:2a:de:ce:25:35:3c:
ae:73:2d:a2:28:e2:4c:b4:c5:5f:78:4a:14:f2:d4:65:04:6b:
2a:a6:b8:33:61:fa:9e:6c:e7:02:39:6c:71:a8:2f:a1:41:7d:
cc:53:0d:df:35:1d:f3:a2:46:76:a3:d3:e1:93:b9:fd:ab:59:
79:8a:51:89:ca:ad:04:01:7f:80:c9:d8:f6:2a:4f:dd:ba:03:
e8:67:5d:45:f2:6e:44:c7:e4:ec:92:5a:6f:db:f1:2d:32:21:
08:91:db:9f:49:fb:e5:0f:a1:6a:14:8c:b5:1f:20:93:60:c4:
35:3e:c5:df:1a:07:b1:a8:a5:e8:67:30:ff:db:83:55:01:b8:
8d:d1:48:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:57:22 2025 by rpki-client