Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
File: 1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json)
Hash identifier: 79EnAqju+SL1nneZ8AGYL1XBRSlbaqHPualSB8CARTI=
Subject key identifier: DC:09:48:8D:69:FD:5F:B2:EB:A9:5A:54:06:4F:0F:B8:73:A9:59:F3
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 0197B70E56A16E33814333E37AA656497BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 15:00:59 +0000
Manifest this update: Sat 28 Jun 2025 15:00:59 +0000
Manifest next update: Sun 29 Jun 2025 15:00:59 +0000
Files and hashes: 1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: sMHV2CVYEJ2eermMLZ5P/J56hvzOFcVbx3W8KwTtuQs=)
2: ApRmxFrIHgDq0uE514jDIHsfIeg.roa (hash: wwR59HFeyAkBUrzznAPWkLGe9T2sf1JpKPVH96BNgPU=)
3: LDvMOjEUxjVrAxBBKwXZ2WWq0ic.roa (hash: lSJbEniX1S5iq6pQApVmxDosGfWL1zz6nfIQW1JNw3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:56:a1:6e:33:81:43:33:e3:7a:a6:56:49:7b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Jun 28 15:00:59 2025 GMT
Not After : Jun 29 15:00:59 2025 GMT
Subject: CN=dc09488d69fd5fb2eba95a54064f0fb873a959f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:7d:ec:bb:5c:57:27:d8:5b:a5:1d:c4:5d:
49:94:a5:09:dd:eb:77:6f:7b:f2:ea:bd:09:84:7c:
81:90:71:a2:bf:70:07:f2:25:a1:d2:8e:12:6f:97:
26:bd:20:e4:c5:39:5b:a2:08:de:9b:06:dd:64:52:
4d:6d:01:4e:c6:5b:7e:7c:03:a4:37:52:64:ad:fe:
73:29:2a:3f:42:08:98:a1:f0:fa:98:13:fd:41:8f:
a8:0d:e7:66:1d:0b:63:c4:1d:28:51:28:61:ef:46:
0b:bc:fc:c2:b4:c3:91:3f:b7:17:2d:05:94:02:ef:
45:ee:25:e4:8a:fe:a2:7b:4a:9e:2c:35:9f:86:b3:
34:b9:e7:0f:a8:f3:3b:98:7b:23:a3:dd:61:f4:1b:
03:bc:38:bc:3a:77:52:bb:23:18:a3:69:da:33:1e:
f9:35:ca:4a:28:a8:d3:a7:5e:bb:13:6f:3f:72:2b:
f2:df:34:99:b6:fb:89:af:08:03:6a:c0:e7:4c:0f:
8e:ee:42:2c:83:58:65:04:38:6c:08:7e:72:34:1d:
2c:d2:1d:24:ff:be:8a:b2:89:48:ec:d5:ba:2a:1f:
ae:31:ac:c1:9e:cf:aa:e6:e2:07:3f:e8:de:2b:07:
6b:95:f9:a5:5b:cd:82:89:24:e0:11:72:f9:eb:8f:
65:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:09:48:8D:69:FD:5F:B2:EB:A9:5A:54:06:4F:0F:B8:73:A9:59:F3
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:bd:20:cd:0c:63:15:39:ea:91:25:f4:27:41:7d:8d:c2:de:
3f:1a:67:05:a9:a5:cb:cb:9c:6f:97:fc:1e:67:6c:73:b8:a6:
c6:ee:34:6d:76:43:27:db:b0:a7:ee:00:c6:ee:01:1e:8e:7c:
17:21:66:72:20:3d:db:2b:c2:ef:5d:07:90:1e:be:67:7e:6b:
ae:25:f1:80:6f:de:4e:99:40:4f:f4:29:4e:4e:51:e7:32:68:
f5:23:5c:79:cc:b0:57:a5:b4:88:f8:68:12:ac:fb:e0:fa:88:
67:5e:32:47:cc:32:14:b5:71:33:e2:a9:fe:3d:34:9e:d4:43:
bc:e0:88:8e:9f:27:7c:47:09:ff:bc:71:d0:ad:39:8a:bd:e2:
40:be:54:f9:f1:fd:2d:a9:79:d8:f4:fd:8b:50:da:db:45:26:
99:04:f7:00:8d:51:00:10:b2:05:52:3f:6f:d2:df:4a:28:bb:
22:03:db:aa:d2:aa:b6:ed:a0:d1:90:3a:2e:e8:95:22:78:54:
51:3e:2b:a7:bf:95:f4:0d:66:3f:25:ad:8c:36:a0:97:28:09:
70:3f:a0:1e:41:b7:a1:98:6f:2f:bd:0c:fe:9b:eb:ac:1b:1e:
1e:d5:da:69:91:c5:12:5e:71:d0:c3:5b:84:aa:da:e4:2c:08:
ac:23:36:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:36 2025 by rpki-client