Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
File: 1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json)
Hash identifier: SnXEH42WeN3cLO9A01hRQFMrYgP3xvMQZI69orV9X58=
Subject key identifier: BD:3D:85:8B:DE:9F:2E:35:6D:75:5B:14:06:3F:1F:78:FB:F1:64:AF
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Certificate issuer: /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial: 0197B8902FF1B6E9EDD4DA899FA41BF1BE08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
Manifest number: 149D
Signing time: Sat 28 Jun 2025 22:02:26 +0000
Manifest this update: Sat 28 Jun 2025 22:02:26 +0000
Manifest next update: Sun 29 Jun 2025 22:02:26 +0000
Files and hashes: 1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: qHKxnw23HhMzHxcS4zSGnCkzNEz47GJxs0GpbDcKzq0=)
2: nuwLQIg-lK2envR_t0a0TNPRBGQ.roa (hash: 6zkhxyKXAGxELCe57hpSnoaGWnhmysqwWNpKa980lyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:2f:f1:b6:e9:ed:d4:da:89:9f:a4:1b:f1:be:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Validity
Not Before: Jun 28 22:02:26 2025 GMT
Not After : Jun 29 22:02:26 2025 GMT
Subject: CN=bd3d858bde9f2e356d755b14063f1f78fbf164af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:da:88:5c:4a:ee:05:37:46:d0:3e:a5:ce:
36:92:0a:00:e8:c0:7f:77:ab:00:54:db:82:6b:26:
68:1b:7c:43:66:0d:15:fa:a9:02:05:b6:a3:06:d5:
62:f9:7b:7d:3b:62:1e:ab:07:5f:c6:cb:23:1f:a4:
ac:2d:fe:18:1c:02:82:72:d1:d8:7d:3c:e9:04:4e:
75:bd:a2:31:74:0f:e3:8f:e6:a6:5d:ca:e3:b1:9d:
04:11:53:35:92:7a:df:80:0d:4c:25:98:3c:d2:ef:
95:e8:01:0f:e8:02:67:64:b4:d5:58:f8:44:23:88:
b0:50:a9:47:57:50:95:a5:67:e0:37:92:6e:c7:8a:
3e:21:97:e9:ff:7a:df:cc:44:90:42:27:39:83:53:
41:1d:e5:3e:f9:89:e0:ca:30:99:db:e6:41:17:ed:
a0:f6:9a:8c:d1:bb:a1:3b:52:41:2d:f5:bc:16:44:
1f:54:1a:a2:96:72:26:97:24:2f:49:d1:8b:79:a4:
8b:20:da:fc:78:76:40:eb:97:6d:e4:5d:e0:a5:00:
26:6e:a7:04:3e:5b:55:bb:5f:3f:18:76:7a:02:c9:
d6:d0:4c:ab:83:75:c7:83:a5:85:fb:52:2a:f3:10:
42:24:9d:89:f8:92:2b:8e:25:85:12:62:9c:07:aa:
4a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3D:85:8B:DE:9F:2E:35:6D:75:5B:14:06:3F:1F:78:FB:F1:64:AF
X509v3 Authority Key Identifier:
keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:17:48:9b:9a:b6:4e:ad:91:1d:6f:c2:58:89:89:ed:d0:74:
75:ad:2e:63:3a:77:5f:44:3a:97:cc:b3:99:a4:c4:1d:89:96:
9c:1c:42:cd:df:82:c8:65:bf:7b:3e:76:71:b4:03:3b:77:b7:
96:1b:88:28:f7:a1:47:30:cb:8e:ab:43:f4:07:df:40:58:96:
72:24:e5:65:45:a9:b8:40:d9:31:d3:56:7e:25:44:d7:b0:9b:
e4:65:de:61:1d:03:f7:71:85:3e:bf:71:67:6e:03:8f:f6:aa:
ee:0f:e5:58:e1:ef:94:19:a4:fd:f3:16:b6:f8:8e:09:4b:47:
ce:32:43:95:33:fd:6e:4f:53:bc:c3:08:41:8e:97:a2:91:6b:
46:00:b8:cc:ae:e6:83:51:d9:2b:d1:e1:06:c1:4f:c4:d8:ae:
6b:d6:ff:c3:d3:04:55:ad:b4:d8:64:9b:84:02:dc:5d:c3:0e:
7b:db:16:c1:bb:6e:7f:0d:9b:a8:fe:03:a3:ab:ad:10:84:62:
93:1d:ff:87:56:1c:38:c0:2b:fb:68:c1:c3:3c:03:31:48:8f:
52:27:6b:cb:80:34:e7:7f:6d:01:99:2c:41:6d:09:c8:a4:45:
32:79:30:c6:19:e7:6e:af:0d:62:a5:37:be:e5:d8:bb:a8:31:
bf:3b:0c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:38:55 2025 by rpki-client