Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier: zmpQ0YXN3/8sKBvd1FKFDbUbbS9fuKKYcq5pbYgvA9g=
Subject key identifier: D8:60:9B:8F:3C:0E:72:24:EA:69:EF:F7:21:31:11:84:7E:C2:B7:0B
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 01973FF721AF2413E0A583AB92330F281A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number: 12F0
Signing time: Thu 05 Jun 2025 12:00:49 +0000
Manifest this update: Thu 05 Jun 2025 12:00:49 +0000
Manifest next update: Fri 06 Jun 2025 12:00:49 +0000
Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: sHLHTd4BZV/YUijOWQkTsXByQgrCcPj9VI4pjxFbfCk=)
2: wiMZyenwx3I7xwOHgp4nhnMI51s.roa (hash: Qx/P/QV7oNsKOLP9lE01kMvoM8G9Aq9IlKHXWkjW/bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:f7:21:af:24:13:e0:a5:83:ab:92:33:0f:28:1a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: Jun 5 12:00:49 2025 GMT
Not After : Jun 6 12:00:49 2025 GMT
Subject: CN=d8609b8f3c0e7224ea69eff7213111847ec2b70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4f:90:f3:e0:0a:cb:da:9a:73:93:64:6e:9c:
cb:85:1e:c1:0f:c2:c8:5a:49:36:04:19:f5:c6:cc:
6a:b2:c9:22:2d:14:6c:c0:0b:4b:45:97:9c:4b:a6:
ed:45:39:a5:a9:0e:1a:56:56:b5:88:f0:56:23:20:
11:5a:77:01:65:e3:08:05:1d:9c:f3:12:55:19:73:
cd:d0:21:a5:2f:7d:68:80:77:ac:ca:ea:4c:80:28:
bc:79:9d:fe:e7:5d:e9:7b:d0:5b:ce:8d:2d:ac:82:
93:77:2c:ce:56:84:a6:c5:69:ca:45:e4:28:26:61:
a2:f0:e8:77:09:c1:17:b3:cb:c9:3c:39:f0:00:89:
99:5d:63:bc:e5:0b:be:e8:ea:eb:ef:7a:f0:a4:41:
5a:88:3f:bb:20:c1:60:89:bb:23:54:86:7d:64:ef:
48:4b:41:17:da:d9:a9:66:27:f3:7c:c6:9e:06:e8:
cb:1f:d4:d3:70:d1:27:6c:2b:48:4b:34:8d:a8:85:
0a:4c:4d:d1:d4:c6:71:e3:f3:7e:19:03:95:99:c7:
a0:19:45:fb:cb:94:ca:4f:c7:00:c0:2f:6a:12:34:
d2:d7:2e:fd:2a:a0:0b:c5:84:2d:cd:c0:6c:bb:4b:
41:cb:80:a9:16:e6:f6:12:50:4c:20:9a:69:4a:b5:
55:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:60:9B:8F:3C:0E:72:24:EA:69:EF:F7:21:31:11:84:7E:C2:B7:0B
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:68:f2:22:5f:aa:91:7e:2a:1f:ff:85:af:5a:92:3a:21:d2:
04:2e:a3:23:e6:90:f2:9b:ad:f3:79:95:61:97:99:ff:d4:e8:
3c:8a:06:2f:3c:0c:c8:94:5c:6b:26:12:ad:88:41:d6:0a:fd:
cd:c4:c9:21:c2:05:a1:76:d5:de:69:0e:d9:c4:4e:1f:43:d2:
7f:e3:7a:8e:44:87:69:b3:73:f8:d0:c3:d1:23:37:47:a9:e9:
c6:4d:a0:25:74:09:b0:7a:17:cf:61:28:d7:81:f0:ff:e2:17:
78:1a:d0:84:7b:cc:7f:e5:a4:04:8d:0f:c6:fc:3c:6a:94:c2:
02:e9:61:2b:6d:35:a1:d2:27:00:d0:bf:39:a1:a0:d5:30:c6:
ac:c9:e4:9e:05:91:9d:ab:5e:64:99:ca:1d:d6:ee:9b:c7:9a:
30:4d:18:88:50:05:5f:2b:09:f8:60:22:07:47:ee:4c:be:54:
88:aa:21:46:8d:74:a6:86:06:e6:5a:cc:56:f5:1a:41:4f:aa:
e6:cc:db:64:0f:05:39:98:e9:5f:8c:7b:ba:44:f5:6b:86:a0:
c5:9a:f7:4e:e8:50:f4:cb:68:81:b1:d6:42:c5:65:31:c0:4f:
a0:30:9e:8d:52:ee:15:05:a3:6d:56:d2:98:67:69:79:f4:4f:
9e:89:66:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:27:28 2025 by rpki-client