Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier: k5qidDX8lGax3XHXqU0553fAkBDgcLaNkxioPQxjLmI=
Subject key identifier: 06:82:64:47:67:16:8A:E3:68:C6:C2:2D:E8:F6:5C:7E:C7:B2:0C:A7
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial: 0197B933AA9A0716B2B103563DE02181D083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number: 023C
Signing time: Sun 29 Jun 2025 01:01:00 +0000
Manifest this update: Sun 29 Jun 2025 01:01:00 +0000
Manifest next update: Mon 30 Jun 2025 01:01:00 +0000
Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: 5cXh5TCwRR4AL+3Em+PdrzTXFFWIjPDxd1bouOuCpTA=)
2: olYC3vt3bTWX5B6Daul0GiCdzRk.roa (hash: EU31+YZYAX7zRrR/hWxXMjIPU9jCSCk9p7wSptbJIM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:aa:9a:07:16:b2:b1:03:56:3d:e0:21:81:d0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Validity
Not Before: Jun 29 01:01:00 2025 GMT
Not After : Jun 30 01:01:00 2025 GMT
Subject: CN=0682644767168ae368c6c22de8f65c7ec7b20ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:86:ae:b8:8c:c3:79:0d:d1:71:a9:06:67:
bb:13:98:4c:a5:99:f8:64:ac:fa:46:fd:4e:bd:b3:
dd:89:10:dd:a5:47:77:df:a5:69:63:18:87:77:a6:
07:01:5f:08:c6:7c:2c:51:91:ae:6e:74:7c:75:8f:
4c:c7:73:49:1e:6c:94:c9:4b:24:8f:6a:5c:23:a5:
90:40:76:2e:e1:77:c9:db:d2:43:c7:10:6c:cb:ba:
41:9d:59:74:58:8a:c9:c6:24:00:09:12:1d:15:df:
2b:9c:b7:62:c1:a9:1f:34:ae:8e:05:88:7c:35:30:
5f:49:59:d1:d6:54:42:6e:29:af:88:0f:29:38:f4:
0f:d8:b2:0d:51:75:6b:eb:56:fc:31:23:a4:6d:0c:
f6:42:7b:0c:58:4d:b9:dd:a5:c3:d7:93:17:85:9e:
60:74:53:93:d6:1d:c1:76:f4:1d:20:f5:94:a8:3d:
bc:bb:d8:d3:64:94:9f:c7:f7:97:bb:e6:50:62:3e:
f5:dc:c4:ae:8f:9e:68:23:a5:da:be:e3:77:71:24:
69:ca:5e:46:19:37:5c:33:e5:fd:34:bd:4e:31:8c:
83:7b:1a:3e:3a:53:6b:f6:7a:07:18:67:da:86:a3:
f7:d4:4e:50:85:67:17:d2:3f:f5:1d:01:0b:8f:13:
66:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:82:64:47:67:16:8A:E3:68:C6:C2:2D:E8:F6:5C:7E:C7:B2:0C:A7
X509v3 Authority Key Identifier:
keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:57:7b:84:08:2a:77:89:99:19:c6:ba:bc:cf:61:66:e3:91:
e0:3e:26:79:b5:e5:8c:55:49:15:69:df:a7:7a:ff:a8:92:7a:
f8:38:05:30:9c:e9:e9:05:cf:76:15:e3:74:b9:72:5f:00:08:
33:fe:f7:0d:0f:74:97:c2:7d:cc:c4:b5:ba:5e:0c:f7:20:f0:
d1:e9:0b:7f:f2:5f:3b:ad:bf:ab:bc:71:0c:12:74:6a:5f:5d:
e3:7c:ed:f0:e0:fd:95:cd:93:b9:fc:37:b8:35:a6:e5:c2:50:
39:dd:f0:2a:00:0d:5c:ab:91:41:34:95:62:de:d8:f8:cb:19:
76:b9:88:91:d3:96:7b:fd:c2:a7:27:d3:b6:64:30:17:ad:e4:
4d:75:79:2e:1d:1a:47:f0:0f:30:ce:7f:a3:01:c9:a9:fd:60:
64:68:32:86:dc:23:38:fc:83:dc:ad:b4:a5:2b:04:0c:fa:82:
0b:67:32:72:8c:1e:c6:bb:f6:5c:c8:43:ba:56:d5:41:79:93:
e0:af:0e:a7:8a:c0:e1:3d:ee:f6:1f:46:e5:06:f9:5b:82:a1:
17:d9:37:47:a3:6f:60:29:0c:37:fe:2f:4a:36:a2:0b:10:01:
b2:ff:53:26:ce:ae:aa:9f:81:fb:69:44:0d:c0:27:93:e4:19:
8c:d1:19:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:20:19 2025 by rpki-client