Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
File: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft (raw, json)
Hash identifier: qlTp9ODsZwBpwqU5muME2rDyD3+WBGx+2nE3jY/EMY4=
Subject key identifier: 3B:FA:41:77:03:DC:02:F9:E2:B0:9B:A9:1D:60:BE:DA:44:E2:4E:8F
Authority key identifier: FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
Certificate issuer: /CN=fab796d980fa60fe2514fce62646f45d12c95165
Certificate serial: 0197B70ED3A7D2D82476B287A2D02196B9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 15:01:31 +0000
Manifest this update: Sat 28 Jun 2025 15:01:31 +0000
Manifest next update: Sun 29 Jun 2025 15:01:31 +0000
Files and hashes: 1: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl (hash: ftE+9VNJ7F2jrjsEceU1TmqpNoIsoeNM7/dlS/TVGXs=)
2: t-kDZ60Ga6s9XyZB2kPkoXB6jwY.roa (hash: +ne5fdeCEiZZDZ8TkDgbzZo5fLLpzzbaivx2MhBIpe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d3:a7:d2:d8:24:76:b2:87:a2:d0:21:96:b9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab796d980fa60fe2514fce62646f45d12c95165
Validity
Not Before: Jun 28 15:01:31 2025 GMT
Not After : Jun 29 15:01:31 2025 GMT
Subject: CN=3bfa417703dc02f9e2b09ba91d60beda44e24e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4c:1c:3a:23:9b:b3:be:ef:e6:93:bc:a6:63:
13:45:4d:6c:60:1e:d0:4d:db:f6:91:e6:7e:24:94:
08:25:01:1e:f9:38:8a:ff:d7:2c:8a:0a:78:28:84:
26:9f:8a:de:b9:ca:a3:f5:d0:5f:8b:4e:88:99:8f:
11:25:8c:96:90:24:b5:c6:4c:9c:48:d1:c0:be:4b:
b5:d4:90:00:f9:76:69:23:66:ec:d2:ce:eb:7d:aa:
55:73:82:f0:2d:61:37:14:65:8b:8f:2e:0b:e4:78:
92:a8:4c:cb:bb:75:50:7a:e7:eb:e1:1d:f4:45:9b:
29:28:40:82:b6:8d:f9:b1:b7:76:07:35:5d:6e:56:
d6:d8:2c:49:2a:2e:d3:72:da:25:9c:07:fe:79:b2:
e1:d0:95:2d:2f:2d:56:de:c3:80:32:ee:6d:ae:13:
ac:14:49:54:81:a4:b7:da:1d:89:80:6c:79:9f:f2:
a0:9a:b4:ae:94:1c:31:9e:7c:a4:83:f9:80:de:dd:
ac:89:02:6b:79:b6:57:4d:2d:ca:6f:dd:70:9c:d8:
82:cb:6a:b1:57:b7:8d:0d:54:7d:ae:b4:24:b0:4b:
e6:c5:ad:09:4a:dd:91:da:24:60:cb:c9:b8:dd:0f:
df:21:22:8a:b2:49:f1:10:c7:40:4f:cd:49:d8:fb:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FA:41:77:03:DC:02:F9:E2:B0:9B:A9:1D:60:BE:DA:44:E2:4E:8F
X509v3 Authority Key Identifier:
keyid:FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:60:4e:47:d3:64:dc:24:28:77:69:4a:70:d0:56:dc:fd:22:
d4:68:79:25:09:ac:53:67:69:75:39:24:bd:53:dc:03:c5:97:
0c:04:fc:94:f0:e5:28:b8:67:9b:89:df:9c:87:45:ee:a7:da:
72:b0:5d:47:dc:96:5c:51:42:50:34:1a:78:71:84:f7:8c:27:
e9:6a:03:be:70:2c:4f:b2:3d:29:50:75:5a:fc:ad:7c:d2:f9:
2a:bf:28:2c:a1:7c:04:22:e7:27:ec:86:fe:5d:4f:04:7b:97:
54:bf:93:60:3b:98:79:de:f9:e3:b6:de:3c:9f:07:50:5d:f7:
71:ea:4b:65:49:67:7a:80:bf:c2:09:89:d6:ae:35:36:fc:c5:
65:2d:6c:e1:6d:7e:b1:8e:aa:5b:4a:32:80:a1:7e:cc:79:92:
a6:bb:f8:5f:b1:1d:08:ff:0d:a8:b7:c6:dd:0a:ab:b8:77:23:
da:28:10:0f:15:89:0b:6a:bb:a9:14:b7:33:ae:ef:53:be:78:
3b:8e:9a:dd:15:47:a0:a4:30:98:62:d2:92:88:7f:2c:f3:fa:
ce:07:30:0d:66:c5:62:d3:e3:b8:dc:bc:b2:b5:46:db:9f:c6:
d0:81:58:c7:aa:f1:93:b3:71:16:89:33:b8:b2:01:82:d4:e6:
32:0a:e2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:53:41 2025 by rpki-client