Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
File: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft (raw, json)
Hash identifier: /QHGJJHp7yvWN9eOsXWfHIe3iu+TTak3raEW1mWnuHQ=
Subject key identifier: C1:2E:8E:9F:A8:15:BC:1E:E8:27:E3:96:F7:74:60:DA:23:29:2F:DD
Authority key identifier: AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
Certificate issuer: /CN=af59d35331c9efe33c9530769325ae8ef550ffda
Certificate serial: 01974A0CD13B05AA3E5B14FE4A98435EBDFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
Manifest number: 13B1
Signing time: Sat 07 Jun 2025 11:00:43 +0000
Manifest this update: Sat 07 Jun 2025 11:00:43 +0000
Manifest next update: Sun 08 Jun 2025 11:00:43 +0000
Files and hashes: 1: d1cUGJ6v4aRMFVJ8jR6zf61KUZo.roa (hash: w1Q0yU0/JMksdYl+XzfFqraLhxZYw0tN1TBkWQdYmYc=)
2: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl (hash: PeLn26MLVkfjDFOBr3rgeTNOlMNJYMWICKQCrrjr8AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:d1:3b:05:aa:3e:5b:14:fe:4a:98:43:5e:bd:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af59d35331c9efe33c9530769325ae8ef550ffda
Validity
Not Before: Jun 7 11:00:43 2025 GMT
Not After : Jun 8 11:00:43 2025 GMT
Subject: CN=c12e8e9fa815bc1ee827e396f77460da23292fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:60:4b:04:30:d6:62:f0:2d:55:e4:3e:d4:81:
45:0f:9e:c9:ad:eb:57:9a:26:b2:52:30:a5:2c:5e:
0d:8a:ad:15:39:4f:75:56:64:18:14:ef:08:35:6d:
84:15:52:23:ce:94:c1:42:64:21:ba:84:89:09:95:
59:c4:91:db:23:2f:bc:25:45:13:8c:01:2c:9c:dd:
80:bd:76:2e:7b:5b:99:5e:7e:7c:f9:13:79:ff:4f:
98:d1:f6:79:30:b1:70:67:6d:6b:fb:1f:36:81:3e:
de:b3:50:3f:eb:7f:68:a7:b3:be:20:78:b8:36:4e:
ed:2e:93:f0:04:12:f8:6f:f2:90:61:03:4d:96:d6:
b3:f9:85:9e:01:31:f4:c5:01:d8:c9:2d:d1:6b:a0:
cb:17:4f:83:f1:73:7b:03:0c:02:e4:9c:fa:5d:30:
20:70:15:c2:17:be:74:3f:72:e3:c6:38:66:d2:43:
22:12:7c:ae:6f:a9:9d:2f:2a:09:bb:8a:5f:0a:bf:
44:58:07:46:89:24:fc:c5:6e:59:3f:a7:c9:ff:76:
39:45:6c:8e:5f:99:5b:05:05:3e:28:bb:9d:5d:11:
a2:0e:b0:6f:f9:1e:98:32:f5:56:ca:7d:62:32:75:
d4:66:1a:77:94:be:3e:a6:a5:2b:46:3c:28:0b:bb:
33:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2E:8E:9F:A8:15:BC:1E:E8:27:E3:96:F7:74:60:DA:23:29:2F:DD
X509v3 Authority Key Identifier:
keyid:AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:bb:4d:58:c1:31:52:4e:75:1f:c9:4b:13:71:26:c9:3f:40:
ee:7a:61:02:e8:d1:6a:30:f7:41:39:e2:0d:77:65:8e:86:ee:
63:f7:1a:04:18:50:b4:1b:b9:10:bc:7e:6d:01:7e:e9:2c:7e:
1f:80:6d:33:93:52:27:75:5b:33:e6:01:06:ca:85:3f:6e:cb:
cb:86:46:bb:a4:52:4c:a1:d4:5e:29:b6:05:e5:88:00:4f:a3:
16:ba:eb:07:fa:bb:25:3c:4c:3f:d8:9e:79:bd:26:4e:ab:f2:
56:7b:01:d4:45:7a:c0:6e:fd:64:b8:b7:c1:9b:c8:17:f3:89:
40:f6:95:a2:d8:91:9f:a1:26:50:c2:df:f1:bc:d9:aa:2e:14:
5d:1e:da:fd:e4:b7:31:47:f8:b2:41:ff:80:93:47:76:8c:d4:
2d:ef:f6:a2:d4:e5:79:5c:44:ec:05:bb:1c:3a:9f:c2:48:ff:
4a:f1:bf:70:34:f1:1e:7a:d0:34:a2:f5:ca:90:63:01:13:6d:
59:90:17:75:63:4e:62:64:0c:df:e3:5a:3a:76:0d:ba:4c:94:
09:f0:8c:6f:5b:48:66:7c:ec:30:48:b3:a8:31:fd:18:04:2d:
33:71:c6:52:41:3a:e5:94:a7:20:2d:13:8a:37:23:9b:c3:f1:
18:58:49:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:51:23 2025 by rpki-client