Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
File: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft (raw, json)
Hash identifier: 24uOiXtZUFHrxZPgTWcTfd+x4jbOT8eJhmh2xUXiIzA=
Subject key identifier: 33:57:48:09:F9:C8:16:16:7E:CA:A2:D2:AF:6B:47:6F:6B:9E:6D:34
Authority key identifier: FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
Certificate issuer: /CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Certificate serial: 019748FAAE5EF3C7163C2838A19BA6053AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
Manifest number: 1121
Signing time: Sat 07 Jun 2025 06:01:17 +0000
Manifest this update: Sat 07 Jun 2025 06:01:17 +0000
Manifest next update: Sun 08 Jun 2025 06:01:17 +0000
Files and hashes: 1: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl (hash: uIhJimRbb2SdofttbrAetgTu+gkuqmifl+MO0ofoFUU=)
2: h0w_kFKT0XqvvDjFWN0hbdP6R0I.roa (hash: HwjG9qWbKXQOPWt9s3bE5FAbNnpfV2VmVkVACeqa+SM=)
3: mduo7I3wNgYNMDFTnFs9bATZw0U.roa (hash: cwDJD0pk/dLmG1tNo7Q1h2nrGc/1dBKFJ1gp1DO7kqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:ae:5e:f3:c7:16:3c:28:38:a1:9b:a6:05:3a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Validity
Not Before: Jun 7 06:01:17 2025 GMT
Not After : Jun 8 06:01:17 2025 GMT
Subject: CN=33574809f9c816167ecaa2d2af6b476f6b9e6d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:82:35:99:95:44:d2:5b:a8:eb:5c:4c:76:77:
a1:63:fa:93:91:13:d2:60:a9:3f:86:df:2d:50:a6:
e1:54:48:d1:a6:b8:3b:9c:69:da:4c:00:29:24:10:
29:2d:71:ac:03:fb:13:4a:e6:07:6a:2e:9b:a3:ab:
f9:11:75:57:a2:29:51:88:67:f1:43:f8:4c:de:45:
00:8f:ac:b4:8c:b0:a8:0d:1e:19:c2:ef:1c:a7:32:
a4:b9:12:04:0d:4d:74:41:e5:24:7d:c8:03:44:f3:
38:ef:6e:67:1b:ad:47:31:1e:c9:df:a2:89:21:3d:
a0:0d:ed:ab:a6:82:10:69:07:07:47:b5:27:11:f9:
b3:d0:04:66:31:6b:71:a9:4b:25:c3:ca:96:d3:2e:
8a:53:ff:2e:1b:bc:1e:4c:c6:fd:a3:07:78:41:05:
4b:be:07:a3:e2:06:ec:ad:13:9a:55:fe:15:47:3b:
89:56:d6:67:4a:15:56:6a:01:44:4a:c2:d0:2d:44:
c9:28:71:99:72:65:54:fd:7c:d0:0d:43:a1:20:2a:
a6:63:b2:7d:c8:4f:d3:d4:06:77:7c:a4:4a:d6:82:
1b:42:0f:1e:12:10:59:40:3a:41:ce:46:f9:19:e3:
ee:07:54:54:20:ac:8d:9f:cd:96:d9:ff:c8:f3:05:
88:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:57:48:09:F9:C8:16:16:7E:CA:A2:D2:AF:6B:47:6F:6B:9E:6D:34
X509v3 Authority Key Identifier:
keyid:FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ba:dd:ac:46:ea:a9:64:7f:18:30:9a:b3:8f:4b:72:8c:8d:
b4:4d:33:68:51:85:ad:84:a1:e6:48:c6:fb:3a:5f:fe:0b:cc:
aa:a5:d2:66:08:35:47:1c:f8:2d:6e:94:6f:f6:10:8b:1f:d1:
78:23:bb:fa:27:b2:35:69:5b:72:48:fc:f5:36:d9:df:62:9a:
40:a1:67:4f:bd:8e:a4:2a:77:08:bb:7e:e7:29:c3:f0:c8:e6:
04:44:d1:4b:f2:a3:17:dd:46:5b:71:5e:fa:04:d7:be:9c:f1:
54:17:63:97:ae:5f:4c:2d:83:22:96:23:31:94:ff:fb:28:7e:
3e:51:64:2f:dd:e9:ee:30:c0:a8:28:5f:77:49:85:67:ec:25:
63:db:06:e9:9a:63:ae:74:4e:dc:c4:e2:91:2e:eb:1d:a5:61:
98:64:27:4b:d5:25:7a:9c:fc:4d:23:db:ad:b5:38:bc:20:19:
61:1c:1a:d0:ec:75:62:6c:4c:17:72:4e:39:4e:32:af:ef:e2:
bf:92:67:0a:6f:02:53:9e:4f:d6:aa:92:20:1a:19:e5:19:c9:
1e:89:c7:fa:57:7d:49:19:0c:ca:73:02:79:38:dc:9e:0e:32:
95:0a:6a:5c:ec:d9:35:4b:4c:92:18:d7:b5:0f:9b:36:26:3f:
6d:af:6f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:31:52 2025 by rpki-client