Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
File: 1-TVqludOotcrZUXIfHnSEtcqe94.mft (raw, json)
Hash identifier: /gsKWIoud4xq9eKtt+WdTYnUOVSvFNDebjWAce7sLgw=
Subject key identifier: 03:07:71:DA:38:0B:5B:C6:95:F3:B6:66:14:E2:A8:F5:38:DD:69:F9
Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
Certificate issuer: /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Certificate serial: 0197499F65DDDD4E7FC80A594E4F69864D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
Manifest number: 144F
Signing time: Sat 07 Jun 2025 09:01:12 +0000
Manifest this update: Sat 07 Jun 2025 09:01:12 +0000
Manifest next update: Sun 08 Jun 2025 09:01:12 +0000
Files and hashes: 1: 1-TVqludOotcrZUXIfHnSEtcqe94.crl (hash: W9e3lGpi/qug8Z1VkGKbVu7OeLBIX3CTfYfQVUMRyiQ=)
2: 40BuKq_ENsetJ0coeTja2uim-XM.roa (hash: jFKs1Nj/rGuvWwuXC1CAsi/+KiI87gmidC/b6O4pmJ4=)
3: Ozsn4JoKAsG2v5UbV7B2BGsrTbM.roa (hash: 3pxKTq3sMKN1NqkN5QM+NnGuUJMn7eGHWu6Nl0xki4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:65:dd:dd:4e:7f:c8:0a:59:4e:4f:69:86:4d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Validity
Not Before: Jun 7 09:01:12 2025 GMT
Not After : Jun 8 09:01:12 2025 GMT
Subject: CN=030771da380b5bc695f3b66614e2a8f538dd69f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:1c:6a:10:b5:39:44:f5:57:e5:e3:af:c8:
2c:5d:4e:a6:6f:04:64:da:8b:62:b6:f2:86:e7:40:
97:13:d0:67:8b:fc:fa:52:61:57:94:16:17:69:5b:
83:5c:48:28:51:30:24:a3:d0:97:90:be:7c:da:29:
e9:6f:95:e4:03:40:b5:bc:4c:ec:7d:46:58:58:7e:
60:fa:b7:90:11:1f:9e:f1:c6:f6:40:57:bd:ea:bf:
de:ad:f3:b2:0a:6c:d1:3d:ed:a3:5f:a4:af:ce:5b:
1f:8c:3b:95:ee:0e:ec:b1:ed:92:73:22:df:eb:e4:
bf:d9:b5:fd:5e:74:a1:0d:05:11:b6:06:f2:69:14:
38:bf:7c:1c:55:c1:50:45:7d:10:3b:5e:e4:96:1e:
35:86:05:c4:bb:ed:b1:56:93:06:8c:b0:50:0c:3d:
0f:86:bd:87:eb:fb:9d:bf:56:2c:28:ed:a5:d7:9e:
1a:e6:42:2e:a8:85:38:17:e0:50:0e:19:12:dc:52:
c6:f3:11:7a:87:ae:2a:ae:e6:e3:34:6e:af:50:bc:
5a:b0:50:da:5c:2d:b1:64:e5:3e:88:e3:54:b0:d8:
b9:7a:a5:8b:b2:74:b8:2d:41:f8:46:0d:72:fe:bf:
7c:81:c6:00:ca:8f:2a:f1:27:34:a0:59:85:4d:3b:
ce:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:07:71:DA:38:0B:5B:C6:95:F3:B6:66:14:E2:A8:F5:38:DD:69:F9
X509v3 Authority Key Identifier:
keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:05:99:b6:6d:bf:e9:11:8c:a9:19:48:e4:30:09:7f:f3:38:
4c:bc:b6:b7:43:91:ad:a2:ee:ea:04:ab:a7:fb:dd:7e:73:9b:
af:bb:ec:fe:07:bb:60:ea:ee:41:56:7a:c6:16:64:71:7c:34:
c8:d1:f2:bd:8b:a5:b3:c8:b4:77:98:8d:21:3f:31:dd:fa:32:
b6:b4:69:a7:71:01:fb:64:9b:f5:4a:9f:d9:df:70:66:d4:1c:
24:82:52:56:53:9f:55:6c:51:e9:38:7f:57:59:90:43:7f:3a:
12:df:46:d4:22:7c:80:1a:36:d1:b1:d0:15:60:f0:32:88:7d:
74:27:9c:47:1b:8d:b6:37:e8:32:8d:a7:3b:f1:59:e4:e4:db:
42:a2:89:ed:e9:59:a4:c1:d6:76:4f:7c:ef:38:66:f2:60:a8:
9a:d2:a8:45:50:3e:38:98:25:ac:f3:f9:45:39:80:2d:01:1b:
a5:1e:3e:40:f1:2e:98:46:93:21:ef:c8:4e:e0:45:a1:78:88:
a1:8f:e7:ea:b5:cc:5c:8e:7a:ef:96:0e:ad:58:ba:30:45:b7:
78:13:78:d6:ac:84:53:08:4d:d0:6b:84:68:bf:8c:d2:3c:73:
1a:f1:69:3b:ed:dc:0a:68:5a:33:f9:a8:92:49:4c:eb:9e:24:
12:f6:43:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:09:37 2025 by rpki-client