Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: lBIZRk4Pz5NhBBtyJh/xeqJAT3m8gHfZf2+iMnZJZ6E=
Subject key identifier: BD:EF:3D:C5:01:F0:F5:9E:26:AF:90:A9:28:2A:4D:D3:18:BE:FD:FC
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 01974968027355F729402B9A7B8CE91A57C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 0D5E
Signing time: Sat 07 Jun 2025 08:00:42 +0000
Manifest this update: Sat 07 Jun 2025 08:00:42 +0000
Manifest next update: Sun 08 Jun 2025 08:00:42 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: rT9S8Rl6C8zKppaiv/de5wmR61MLKJ//hxRM6KSuvKA=)
2: ZrVj2s197OVZslr8l0eL6BOnr3w.roa (hash: MfbdU/hx9JIBrv7/G68X/y0zTkmoV59GNKmYnsQV+5o=)
3: mwni58KyYHbpUQER4Pt8qtMcan4.roa (hash: 1zAR9iZ3h0/evzy5xE5e6DnfwvHvR1HUWm8sNJWcti0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:02:73:55:f7:29:40:2b:9a:7b:8c:e9:1a:57:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Jun 7 08:00:42 2025 GMT
Not After : Jun 8 08:00:42 2025 GMT
Subject: CN=bdef3dc501f0f59e26af90a9282a4dd318befdfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:4f:6e:46:70:49:2f:f3:65:4a:19:a1:71:
e6:c4:45:32:a2:1f:f7:a5:55:99:5b:24:c8:e7:0c:
a9:ea:25:c3:3f:28:25:4a:62:00:4b:6a:70:86:1e:
5e:ed:f2:d6:d0:53:ef:86:fa:0e:9b:03:f0:0d:3e:
09:ec:b5:69:0c:b6:a6:b7:66:13:63:c9:cb:cc:b7:
04:06:4f:c2:ce:5a:fc:fd:fc:05:30:54:bb:7d:61:
4a:4c:d9:8d:e4:8e:3e:6e:7a:8e:2c:50:62:9d:b3:
01:8b:20:9f:a3:90:86:4c:0d:5e:b0:25:2d:3e:b3:
5b:64:0c:7b:89:51:e9:f5:ff:03:3d:56:93:26:d3:
e0:b7:51:7e:ea:3e:bb:66:49:50:ef:4f:7a:84:46:
32:1d:2d:32:e4:83:bb:3f:3a:fe:be:6a:7a:a8:45:
32:7a:b8:87:56:87:d4:46:07:66:42:ce:da:05:54:
5d:26:24:46:0e:4f:0f:42:2e:5d:be:ce:77:59:95:
6b:07:ea:41:5a:93:f3:c5:51:ba:b1:05:e3:6c:b5:
bf:7d:25:da:25:2b:66:d5:96:a7:f2:18:ed:f1:2f:
da:4a:63:37:9a:2f:a0:7d:ba:65:6a:d3:a7:e7:6d:
82:12:67:25:3b:29:a3:6f:04:a3:bd:ac:5e:58:d6:
0f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EF:3D:C5:01:F0:F5:9E:26:AF:90:A9:28:2A:4D:D3:18:BE:FD:FC
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:21:82:46:89:13:0c:1f:8e:07:be:ef:9b:cf:48:5b:c8:3e:
4f:97:32:44:4a:a5:84:dc:01:c2:c4:41:f4:19:42:07:d2:6d:
8b:41:09:4d:4a:54:37:9e:be:f0:e6:48:e1:1c:8d:c3:fd:4a:
65:bf:11:db:e2:62:76:86:99:ad:64:a0:bf:a7:83:27:a1:99:
33:f7:cc:ff:28:19:d8:2c:0b:58:18:c7:52:8a:64:be:27:88:
f4:d2:07:71:8b:65:a7:03:e5:f3:94:e1:57:09:96:55:c9:f7:
32:72:e8:88:dd:47:ec:40:05:69:d9:46:93:b7:25:5d:05:6f:
11:b0:2a:95:a9:33:c1:7e:01:dc:2a:41:17:1d:f8:45:3d:84:
26:77:ce:8e:76:36:b2:a5:88:b1:43:f5:07:ce:79:b2:26:a9:
0e:66:73:16:50:e0:c6:53:42:c2:44:f4:e4:3e:b9:e4:d4:3f:
c5:30:49:13:87:49:59:f4:14:98:dc:e0:bc:06:c9:10:3e:2d:
b4:6e:ac:81:f4:84:5b:56:3c:1b:10:49:34:79:1b:03:bc:44:
c4:de:df:60:42:fe:5b:54:e9:f8:97:21:64:b5:89:d7:54:60:
9e:82:aa:ef:60:82:ca:cf:48:9a:1a:2f:c3:eb:d3:42:60:07:
46:4a:9d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:51:10 2025 by rpki-client