Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
File: 1vgHZgvyzZKu45FEKlNDr3GMGMc.mft (raw, json)
Hash identifier: dtH2OkDfWMtR9IMkMZDnrpI3ybxhXLC7xi8TjYP07o0=
Subject key identifier: DA:98:07:C4:F7:59:7E:AE:78:45:11:FA:9A:B4:BA:16:5A:5F:8B:3C
Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7
Certificate serial: 0197499EED2B12EC8D0314210F06C5B8CD15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
Manifest number: 150F
Signing time: Sat 07 Jun 2025 09:00:41 +0000
Manifest this update: Sat 07 Jun 2025 09:00:41 +0000
Manifest next update: Sun 08 Jun 2025 09:00:41 +0000
Files and hashes: 1: 1vgHZgvyzZKu45FEKlNDr3GMGMc.crl (hash: FGgRkxkhbYbnIX8EQHCS2L/RY08fJXqf9biISyRlZVA=)
2: KWwJmTARHeAHpXQEJKYr4FNXsos.roa (hash: 1063ws7p1tPR9qPGeDgdtnc+pragLeBe3JdEiKbe844=)
3: axQ4QcGTmWCvhs7XYE0LSyL0bR8.roa (hash: jnmoj5c8hE+D/ASpXs+Aut4m2SL0NpIhMDG7HImlpO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:ed:2b:12:ec:8d:03:14:21:0f:06:c5:b8:cd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7
Validity
Not Before: Jun 7 09:00:41 2025 GMT
Not After : Jun 8 09:00:41 2025 GMT
Subject: CN=da9807c4f7597eae784511fa9ab4ba165a5f8b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:4b:5c:c0:d7:09:0f:c7:a3:7f:ec:c3:bb:
4a:1f:67:24:da:8e:c8:c4:c8:34:1c:17:da:da:f9:
ac:c1:d8:4a:1c:74:93:f3:c9:27:4c:fd:36:9c:90:
d9:dd:28:be:a6:c6:3c:a2:fe:11:97:fd:cf:d6:3c:
a4:38:b4:2e:c9:40:f3:55:d2:fc:d2:e2:fa:09:34:
20:83:63:4a:40:89:13:40:f4:23:f8:64:a3:55:1d:
21:cf:ee:38:c7:07:e0:e9:ec:5c:4e:f9:1d:8a:46:
f1:23:53:25:67:e3:56:c9:d8:63:d8:83:ba:2f:ca:
92:df:ba:8c:91:59:40:cd:d9:19:4e:ca:50:13:df:
c2:62:0f:0a:77:92:60:92:15:61:24:09:ad:5d:0c:
65:b0:72:1e:71:f4:a9:83:b3:73:7a:4c:fa:f1:15:
36:26:75:b4:2c:8d:70:8a:f3:fb:a0:79:31:de:17:
77:b4:3d:eb:f3:9e:ee:0e:d5:28:d6:21:79:36:97:
d2:ca:6d:5f:70:73:5c:0f:90:b3:5a:b6:ff:69:4b:
78:1e:2e:12:a6:80:94:9e:99:65:fd:6d:d8:2e:88:
ed:cb:91:0a:73:ca:84:a3:0e:45:4b:8a:47:7d:dc:
3e:eb:70:b1:d5:ee:62:99:6e:ac:6b:82:83:bc:ac:
01:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:98:07:C4:F7:59:7E:AE:78:45:11:FA:9A:B4:BA:16:5A:5F:8B:3C
X509v3 Authority Key Identifier:
keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6e:4c:43:54:f3:4d:fa:76:7e:b2:77:67:10:1c:42:48:7c:
70:dc:12:ef:a2:c3:5a:12:36:10:6e:d1:24:b2:3d:0c:5e:3d:
b2:28:ea:b1:0f:ab:ba:c8:ac:78:db:39:bb:45:ad:eb:e5:ee:
58:0a:6c:13:51:1c:f0:85:ec:bb:da:d5:54:6c:7c:9d:d5:9b:
70:10:b2:8e:a6:0d:b2:3f:21:b8:db:ba:1d:57:62:fd:83:16:
ed:72:a0:19:1a:b3:d5:24:66:9d:5f:7e:8a:4b:20:cd:a8:ad:
d4:1f:f4:8e:14:f5:64:bc:2b:d0:b7:61:ef:61:57:38:c8:c6:
1d:67:46:e3:03:19:52:d0:5f:de:c3:10:58:33:e9:37:2f:fb:
5b:1f:87:0f:cf:0d:a0:3e:44:e3:45:f6:4d:d9:74:2e:0a:82:
ca:4c:aa:92:34:c1:46:b4:13:55:39:ed:b9:aa:08:5a:a0:e4:
03:f2:1b:6f:1f:fe:af:75:cb:2c:99:36:53:1a:26:c7:56:3d:
47:2c:98:f5:89:d7:11:47:59:b8:48:8a:98:61:98:d1:f9:7e:
bf:b8:7d:c4:59:d1:0a:75:81:72:28:de:e2:0b:5c:b3:55:9b:
12:80:8e:15:e3:2f:8e:ca:83:e7:21:f8:46:dc:2d:c0:e7:24:
af:e3:2b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:12:23 2025 by rpki-client