Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
File: 1zeCTg_6efGLn8SdbLDdgcmmyig.mft (raw, json)
Hash identifier: cxd66zD7tacGsta2u33mt8wpD6HdhLLBYFEXiFyiU3s=
Subject key identifier: 58:F8:A0:C8:1A:C2:12:F2:3D:CD:DE:50:AC:C7:E8:D4:92:AC:E1:D3
Authority key identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
Certificate issuer: /CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Certificate serial: 01974177CF5FCDEAB43974811B04CF9B31CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
Manifest number: 0F72
Signing time: Thu 05 Jun 2025 19:01:00 +0000
Manifest this update: Thu 05 Jun 2025 19:01:00 +0000
Manifest next update: Fri 06 Jun 2025 19:01:00 +0000
Files and hashes: 1: 1zeCTg_6efGLn8SdbLDdgcmmyig.crl (hash: YEQAAZP59n8mkHf1CCnRskRLgEl7NfPjI2Bl5EgOXG8=)
2: gx5eiwrC9QRov09jLW6Ry8a41tM.roa (hash: +LsTPMN/8+zCvgXobio7naaWnMZxaGw5toiq6o6GEUA=)
3: kdM69EkWu9GxJCcShuJ7ttDKH4Y.roa (hash: vxcNPrB9DwOKLJbClf/tkagm/g99z1Vy26rmuXa9BjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:41:77:cf:5f:cd:ea:b4:39:74:81:1b:04:cf:9b:31:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Validity
Not Before: Jun 5 19:01:00 2025 GMT
Not After : Jun 6 19:01:00 2025 GMT
Subject: CN=58f8a0c81ac212f23dcdde50acc7e8d492ace1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:86:32:5f:a2:32:f3:96:d3:72:1b:fe:89:6f:
60:43:90:d2:b5:95:b0:03:7d:0d:be:b5:2d:3e:cd:
e8:b4:47:40:70:d1:37:a1:33:3e:28:5d:b0:07:6f:
0c:ad:af:7f:55:45:56:a5:18:71:ce:22:bf:b2:36:
51:d2:1a:8a:a3:6e:00:a4:b7:de:dd:52:c0:92:9d:
68:3a:4a:d6:c1:76:dd:c4:a1:ab:1e:17:b1:26:ff:
4a:6b:40:f6:3a:5b:1f:57:f3:87:5a:c2:cb:62:05:
a3:3d:df:18:1b:2f:b3:5a:d3:77:4d:40:cb:a8:eb:
18:1e:cd:e2:fe:f4:26:69:7f:e8:4f:03:ed:31:7e:
5a:fe:b1:76:bc:81:c7:74:42:84:a8:e2:69:40:86:
55:e8:5a:21:f6:ae:d2:82:3c:42:ab:7c:54:b7:c8:
b3:83:35:2c:d0:0d:70:16:82:aa:06:39:05:2a:55:
ab:3e:04:54:3b:f1:b4:dd:a2:4e:24:b5:c6:92:ec:
eb:8d:5b:03:74:c7:d3:23:e7:de:52:9e:f2:c7:14:
03:5b:1b:dd:65:5a:01:5d:23:75:4d:67:b3:e8:f8:
32:fe:b8:9f:9a:29:92:a8:ca:b7:1b:30:87:e2:80:
58:51:46:a6:04:1f:11:5d:3e:cf:3e:c1:28:67:34:
1a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F8:A0:C8:1A:C2:12:F2:3D:CD:DE:50:AC:C7:E8:D4:92:AC:E1:D3
X509v3 Authority Key Identifier:
keyid:D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:dc:93:70:4d:97:cf:ad:ba:d5:a7:c5:0f:de:a9:f7:7d:3a:
af:e4:47:fd:86:fc:ac:6a:cb:b3:05:6e:3f:44:b4:c4:08:3b:
ae:e2:9d:2f:8e:32:b8:90:4d:b0:c8:5e:6f:9a:f7:15:f1:4a:
6e:84:d4:e7:08:43:fc:9f:ea:22:82:6c:d5:eb:d1:6e:e3:e9:
36:95:75:c0:36:1f:fa:e3:8d:a1:b8:1f:1a:e4:65:e4:2c:55:
e4:3c:6a:12:e1:db:23:57:fd:7e:7b:cc:e2:8f:bd:6d:ae:04:
e5:a0:82:20:5c:a2:0c:15:e9:88:13:00:6d:ef:51:f8:a5:f1:
06:79:ea:d1:1e:97:50:4a:37:b6:45:39:48:a3:ab:33:38:49:
77:a0:f9:77:e0:dc:16:2a:3b:21:03:d9:34:82:6c:9e:18:0c:
22:47:72:f5:28:d6:e7:01:27:8c:9f:94:41:62:b8:6f:1a:6e:
b3:91:1f:98:50:c6:c8:e4:cc:d4:a8:30:ec:87:dc:49:63:45:
05:04:bf:03:9e:6d:68:ce:b8:cb:15:dc:b8:ee:77:9d:95:3e:
63:51:78:56:f5:fe:6c:29:2d:01:e4:c0:99:3f:2d:20:21:bb:
02:5c:6e:eb:c8:24:89:60:ca:e5:61:cf:61:05:33:39:1a:7b:
95:ea:72:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 03:38:37 2025 by rpki-client