Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
File: f1Eig3R0LfVEqpMFjFo709FkIZk.mft (raw, json)
Hash identifier: eDsIBkaOSr+FO98d5gZEBl8FXQ6kJcN9SZ37YN/H/Tc=
Subject key identifier: 4D:84:C0:93:79:15:32:D9:2D:48:FA:F4:ED:9A:4C:CF:80:68:AB:23
Authority key identifier: 7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
Certificate issuer: /CN=7f51228374742df544aa93058c5a3bd3d1642199
Certificate serial: 0197B6D762AB7BC9AE56126EC8C0AA6F10B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
Manifest number: 0D25
Signing time: Sat 28 Jun 2025 14:00:58 +0000
Manifest this update: Sat 28 Jun 2025 14:00:58 +0000
Manifest next update: Sun 29 Jun 2025 14:00:58 +0000
Files and hashes: 1: f1Eig3R0LfVEqpMFjFo709FkIZk.crl (hash: CXmSBOBdLoJfPG3JcSN9J74FXO2zOVAWlmuhc6AUEAg=)
2: uNHn3nGofmcHl4lM7HkivQe_5zI.roa (hash: P5wPJ1eLs+Pe8c3zQ6YiOWLNnnfuv2xAEXiikikIGBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:62:ab:7b:c9:ae:56:12:6e:c8:c0:aa:6f:10:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f51228374742df544aa93058c5a3bd3d1642199
Validity
Not Before: Jun 28 14:00:58 2025 GMT
Not After : Jun 29 14:00:58 2025 GMT
Subject: CN=4d84c093791532d92d48faf4ed9a4ccf8068ab23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:93:68:16:30:97:a8:15:6d:76:81:37:41:bd:
ab:38:8b:48:b9:60:eb:6d:8d:50:b7:cd:cd:ba:a1:
81:6a:c0:13:9e:0b:ee:96:97:c7:73:20:9f:bc:06:
b0:9f:b4:8f:2b:79:db:71:ee:b7:71:3f:35:e6:89:
9d:33:ba:e3:d5:37:3f:3b:4c:a4:33:f9:94:af:3e:
3d:87:ed:e7:06:d1:e4:a6:20:7b:ba:b4:83:3d:75:
bf:24:b6:18:b4:9e:8c:c2:34:f0:9c:04:3b:3e:34:
7f:0d:50:e5:b5:b9:f9:a3:a6:35:2b:97:f5:6e:fb:
31:ee:d5:d7:e7:e0:63:d3:bc:5e:6d:c2:a8:ca:ab:
b3:2b:2e:5b:a4:ca:87:87:a6:3d:73:4b:b8:12:be:
88:75:70:37:0e:27:e2:ac:6c:57:c0:d3:7c:bd:f5:
89:4e:4c:31:e5:f1:12:47:16:96:96:96:e5:05:eb:
0a:8f:cf:60:99:5e:52:8a:8f:57:a5:db:8a:a0:9f:
5e:12:42:84:a8:ff:34:67:e5:24:e2:c0:d5:95:8d:
60:8a:fe:ca:a1:7f:c3:43:a7:a3:b0:52:49:9d:8b:
ad:dc:88:58:75:72:1e:08:70:4c:57:b4:ab:71:39:
35:99:70:1d:0a:48:0c:e2:31:93:b9:c6:f1:e8:9d:
f9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:84:C0:93:79:15:32:D9:2D:48:FA:F4:ED:9A:4C:CF:80:68:AB:23
X509v3 Authority Key Identifier:
keyid:7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a8:0e:e4:2c:b7:e1:a1:0a:ae:52:eb:6e:b3:e8:fe:80:ca:
11:35:72:ac:5f:c7:d3:fc:33:47:fc:3e:86:ad:ba:9e:d4:5d:
7c:66:b9:70:e8:1e:61:2d:0e:3a:56:cd:d7:c4:96:8e:ac:30:
6d:dd:99:77:8e:3d:6d:69:64:9a:68:b0:e1:4e:b4:30:74:15:
db:7c:b0:a4:a0:c6:9c:8a:7d:a3:b7:5a:ac:7b:97:16:e0:44:
ed:0a:26:83:31:44:11:93:dd:94:35:5d:cf:39:e4:29:1e:7c:
a0:12:ec:6c:84:21:ec:05:e7:d1:42:86:c4:23:70:03:c8:62:
c7:10:ea:23:b5:35:8b:35:c3:73:31:e3:1f:ba:c9:6a:3c:d0:
d9:62:33:45:f6:f6:0f:c2:19:01:44:b8:b8:53:99:c6:64:26:
d2:6b:e5:c8:40:81:73:7d:cd:36:66:74:3a:2a:99:a8:b2:8c:
a2:31:87:88:66:93:d6:27:93:5d:e8:ee:5a:64:ff:4c:a6:e5:
1b:91:7e:94:48:df:c9:86:97:41:57:5b:0c:3b:2f:e8:48:b6:
44:b7:df:e2:b8:4c:71:a2:59:df:12:af:f9:3f:28:69:ea:b2:
fd:16:ff:01:09:56:01:2f:85:28:18:25:fd:a8:d3:96:73:a6:
a2:9b:1d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:52 2025 by rpki-client