Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File: 1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier: +kusLGVDEwK5m45T6YP1nqK7tElqaOouVPNsjXTfvCI=
Subject key identifier: 1A:AF:BA:AB:94:59:25:55:28:8E:D0:E9:64:71:B8:B6:25:18:96:D3
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial: 019747427812FCF46A5C1DCF6B0F9F9A1455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 22:00:27 +0000
Manifest this update: Fri 06 Jun 2025 22:00:27 +0000
Manifest next update: Sat 07 Jun 2025 22:00:27 +0000
Files and hashes: 1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: mViswG1LAjhYRsvjd9p0KLk1y+dmFW120rztX5311D0=)
2: nE72fRq5x2AdGCpsReX1DOqVoW0.roa (hash: LAILnXnxyWYExTH4qCTlNLIx2ujkg7Q+2T14oqEfAzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:78:12:fc:f4:6a:5c:1d:cf:6b:0f:9f:9a:14:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
Validity
Not Before: Jun 6 22:00:27 2025 GMT
Not After : Jun 7 22:00:27 2025 GMT
Subject: CN=1aafbaab94592555288ed0e96471b8b6251896d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:e7:ec:d0:f3:58:5e:10:09:7c:66:12:64:
bb:75:11:38:15:0f:70:62:58:00:3a:d7:36:b7:bb:
5f:30:b1:51:03:49:13:77:31:fb:9a:02:48:71:9f:
60:34:3d:aa:a4:2c:88:58:67:7c:42:df:c7:de:c5:
63:18:fb:c6:de:de:d1:45:a3:f6:df:a6:da:af:16:
83:07:d1:bb:1d:9e:d1:a9:1f:3e:88:37:07:f6:76:
21:9d:a8:a4:35:bd:89:6e:60:28:19:a3:15:55:d0:
a9:4b:cc:b0:59:a0:6c:04:f7:d7:0e:5a:9a:f7:c3:
2f:d3:46:61:8c:59:00:5f:25:1c:67:ad:de:10:42:
36:02:7a:f7:0f:7d:a3:1f:91:cc:16:87:c4:70:d2:
f5:96:6a:6b:62:e7:bf:05:1c:f6:41:10:bb:54:2c:
b6:da:78:ca:4a:2b:26:3d:7e:3a:dc:70:6d:61:cb:
dd:8d:12:b1:3f:0d:64:58:b9:c3:99:fa:34:7e:ab:
8a:db:9e:4f:4d:01:2f:dc:be:31:fc:55:3d:58:2c:
6b:c3:f0:7c:d3:48:41:c5:8d:b4:4c:52:67:6b:03:
62:81:3a:26:ab:5a:09:c1:c7:d2:9e:3d:8d:9b:72:
c1:f1:9b:c7:9c:09:f8:be:0e:33:22:55:90:90:2d:
0e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AF:BA:AB:94:59:25:55:28:8E:D0:E9:64:71:B8:B6:25:18:96:D3
X509v3 Authority Key Identifier:
keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fc:17:1b:f1:72:4c:af:48:33:45:5c:5f:08:83:4c:19:0c:
ab:c7:cd:17:9b:93:87:ed:a8:94:a3:81:b7:15:b7:3b:8e:06:
f5:7a:d1:4e:0c:3a:0e:29:ff:24:f3:c3:39:8e:4a:da:a1:00:
af:b9:59:e0:e6:0f:c3:f1:cb:d8:69:9d:80:12:2b:74:e0:26:
82:b9:1b:8e:23:3d:32:e8:aa:c1:de:4a:4e:83:97:68:f4:f5:
98:ca:f0:f1:f9:41:7f:77:72:66:77:d9:b2:4c:d7:7f:93:5d:
37:a7:69:f2:44:46:04:77:63:89:da:de:10:e3:3e:4b:e0:51:
79:71:56:a4:b8:b4:73:f6:05:3d:64:0e:de:48:47:2b:04:e2:
68:09:80:d2:2e:f6:71:44:f6:d5:bc:37:2e:fc:6e:28:f1:c6:
f3:d1:4f:26:67:06:b5:4c:cf:cf:24:61:2e:b0:2a:b9:4e:40:
2f:de:9e:64:6a:b3:a5:f2:40:c9:93:e8:62:fa:99:68:33:80:
f0:b7:4a:ef:01:66:d2:38:2b:32:59:a5:0b:3d:f7:c8:ad:5c:
db:c5:8a:16:ef:a0:57:1f:58:2b:8b:49:fc:c8:de:00:e4:00:
ae:5d:ee:7d:ce:01:21:59:24:ee:9d:c5:8e:1c:c8:f4:ba:45:
80:18:38:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:31 2025 by rpki-client