Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: 6DVaknsUde6FVmj5g0PH7pie+Xv244iVpWicIAzT4qk=
Subject key identifier: F9:20:DB:90:34:D1:48:38:F2:54:54:E0:C9:DA:B7:CA:A0:B6:1E:B8
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 0197493179148F0A030CAD9E7329B70E6E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 1423
Signing time: Sat 07 Jun 2025 07:01:08 +0000
Manifest this update: Sat 07 Jun 2025 07:01:08 +0000
Manifest next update: Sun 08 Jun 2025 07:01:08 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: /7EHcBXo3xxOnKw1bARHZZTw8g+JSxB0GN25VBQNCtE=)
2: B1dTi0f_of0kmb1xPgeCM0wY_So.roa (hash: AUmVPkVAQPCmSbSqHlAfz6SLH5DutLJ3OBZdx5Ql8g8=)
3: g4GI57zRcwc78atAcKzvcX8O_Jg.roa (hash: I42VDUXmjO3wztnHcn35mdQWvB1AtZN/AkJrcxSWDOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:79:14:8f:0a:03:0c:ad:9e:73:29:b7:0e:6e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Jun 7 07:01:08 2025 GMT
Not After : Jun 8 07:01:08 2025 GMT
Subject: CN=f920db9034d14838f25454e0c9dab7caa0b61eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5d:a0:c6:27:4b:6b:b9:f5:36:03:d5:a6:c1:
84:b1:cc:76:e0:21:94:f1:67:63:6e:ae:44:b0:de:
e0:b0:9b:94:68:1d:82:dd:4b:1c:83:41:c9:f3:bf:
c8:00:23:75:e0:b3:5c:da:da:5e:0e:95:61:05:2b:
31:5f:a3:49:0f:50:c1:e6:0a:e7:0f:26:fc:3d:21:
89:13:8a:c0:0c:a5:90:07:5d:67:5b:36:b4:c3:64:
eb:2a:ee:92:17:a0:37:bb:ae:41:cd:6d:11:6c:a8:
9b:d6:d6:73:eb:31:20:56:f2:f0:a6:72:df:1e:d8:
58:71:66:55:ca:e1:55:38:d5:ce:f9:66:60:9e:fd:
b1:43:bf:0e:fb:87:45:39:fe:13:c3:a6:0b:64:83:
38:8f:4c:98:ed:03:ef:82:59:a0:ff:4d:d0:1e:35:
fa:69:b6:17:53:d9:5a:e7:e6:2f:81:f8:34:fe:53:
1a:0d:b3:41:6d:31:5b:3e:2e:50:e6:7f:2d:d9:e8:
01:82:05:44:88:cd:fa:cb:4f:c4:ec:23:e5:ee:28:
6d:1c:d6:f4:7c:54:b3:24:56:e0:16:f4:f4:c8:36:
ce:21:86:96:e0:67:f5:6a:2a:3f:f3:8e:d0:81:0e:
cc:f7:f6:f5:60:50:5e:53:68:2e:ec:0f:6f:b1:32:
df:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:20:DB:90:34:D1:48:38:F2:54:54:E0:C9:DA:B7:CA:A0:B6:1E:B8
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:42:32:e2:ff:10:d7:b8:c0:0f:55:f8:fc:79:57:d8:92:c4:
ce:61:9c:64:b7:e6:c4:6d:2d:ec:69:5d:e9:bc:e3:a9:03:cc:
eb:ee:ec:b4:2a:ca:1b:46:5b:10:c3:fc:a5:35:be:29:c5:73:
0e:bd:5b:8b:8f:0a:70:85:89:d5:47:6f:c6:9b:c0:c4:a1:b3:
2e:14:ea:62:f0:19:9f:54:8c:da:2a:ab:fb:9b:e2:38:e6:be:
61:74:ef:86:d7:8b:67:5b:2a:9f:70:1f:d5:d1:ec:7c:f5:89:
67:0b:d3:a2:c9:c1:13:2c:87:fd:c6:a9:58:5e:44:83:8b:cf:
47:b5:ce:6b:bc:b2:3a:84:ac:80:42:e6:06:e0:16:f5:6d:75:
b5:68:98:fc:b9:d3:20:95:17:1a:71:c6:04:a3:49:bd:43:04:
62:7b:aa:92:22:79:c2:be:68:e6:b8:06:3e:94:e6:2b:b0:ad:
8f:25:b2:f6:03:fb:47:9f:3b:06:70:4e:e5:90:c8:f3:3c:10:
82:ad:01:ed:08:0c:4f:9c:c8:83:cb:63:ad:16:71:f9:7b:0d:
dd:fb:70:d6:cf:2f:bc:90:5e:11:00:19:7e:d5:4d:0f:46:2c:
76:3b:a7:6b:b1:16:56:2b:b7:31:84:68:45:80:e2:5a:0a:ec:
49:90:3f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:15 2025 by rpki-client