Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
File: invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json)
Hash identifier: DKxsfp39RsZUbphnpRE9fjU1wn+yDzKPXyQcSDjHYqg=
Subject key identifier: FB:A4:D7:A7:27:ED:70:7B:47:AF:26:DB:45:16:09:45:F3:F1:22:99
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Certificate issuer: /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial: 0197B6A1A01EE1B8B37829EB72A8B1DA6ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
Manifest number: 0346
Signing time: Sat 28 Jun 2025 13:02:15 +0000
Manifest this update: Sat 28 Jun 2025 13:02:15 +0000
Manifest next update: Sun 29 Jun 2025 13:02:15 +0000
Files and hashes: 1: RyuUu8aSOA4RRrkxjhCMyWt8M-4.roa (hash: N00rEgshheQJFJlnzMgkGFoydAhTWl79InbpFappf/8=)
2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: 08jySgenH0Cca1RU32hGkEtyaP21HB3ThFwfNnHqGFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a0:1e:e1:b8:b3:78:29:eb:72:a8:b1:da:6a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Validity
Not Before: Jun 28 13:02:15 2025 GMT
Not After : Jun 29 13:02:15 2025 GMT
Subject: CN=fba4d7a727ed707b47af26db45160945f3f12299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:1e:39:a9:af:c7:57:6f:9e:ea:e8:d4:3e:
ae:33:5d:f1:8f:ea:bf:22:a5:5d:9f:fe:0a:94:90:
3a:e0:0f:b5:20:a7:6e:df:d8:5d:95:43:7d:72:db:
a1:34:75:a9:6e:11:50:5e:c7:fa:12:4b:de:ae:14:
8b:4f:b0:f9:58:9a:2b:10:cb:67:d7:78:52:9e:2c:
36:18:9a:44:34:eb:f0:5f:e3:ed:cf:d5:ed:51:7f:
64:2d:2c:2c:e6:9e:2d:27:d4:3b:c2:f8:f9:19:07:
17:b5:24:1e:00:b3:ce:99:27:1d:74:5a:f2:3b:70:
9b:f7:47:4b:64:6e:16:bf:e6:31:a4:1e:5d:15:cc:
46:43:5d:c5:81:a1:4f:88:de:0f:ac:45:dd:7e:e2:
f1:1c:d2:34:79:d9:9b:34:c5:ad:89:af:40:a8:f6:
7a:97:9f:ea:a6:9f:cd:05:dd:6d:25:77:05:1f:6d:
47:6f:c2:ea:0d:30:36:cd:3b:c5:ab:1c:05:10:36:
4b:4d:1c:72:d2:e4:09:3e:36:02:d1:42:cb:bb:45:
fb:fe:14:70:c5:4f:06:34:07:11:91:c7:31:71:d9:
25:dc:2c:62:cf:ae:87:cd:13:57:8f:4d:0e:01:aa:
d0:ac:89:ec:b8:99:8e:c7:2a:90:eb:44:5c:7b:86:
6b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A4:D7:A7:27:ED:70:7B:47:AF:26:DB:45:16:09:45:F3:F1:22:99
X509v3 Authority Key Identifier:
keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:bd:9e:02:65:b3:58:dc:8d:44:17:23:bf:38:a9:9f:c3:a1:
3f:c7:9b:1f:ad:46:5d:42:49:89:f5:84:2f:cb:33:b1:b9:9d:
26:76:18:27:62:3a:05:85:e2:1e:d2:0a:f7:e0:dc:b2:4a:4f:
8a:22:e7:e1:9d:e2:51:36:8a:10:e4:9d:ad:ab:98:25:b3:4a:
85:d3:81:d1:95:81:a2:14:5f:eb:ee:38:25:e4:c8:c2:a7:74:
57:00:34:74:d1:b7:47:f1:e0:de:8d:a9:a1:81:74:81:81:06:
32:d0:28:7d:32:98:45:08:02:d1:37:2b:44:62:1b:64:f7:3a:
a4:58:4e:cc:9c:ae:27:ff:ff:04:2b:33:76:49:8b:22:bc:fb:
93:ce:07:21:c7:c8:df:87:95:df:24:55:d7:c5:68:f3:21:55:
20:04:1a:65:3e:a1:da:9d:a5:03:be:5a:8e:4a:75:41:7d:2e:
6b:9f:48:69:f7:17:d5:4f:48:a4:8e:45:63:37:58:95:a1:08:
07:d4:f6:75:e3:7d:2d:63:ff:c5:ac:4f:88:83:38:9f:87:df:
38:13:9f:8f:89:44:cb:1d:8f:97:15:fa:a0:9c:ec:36:c9:ee:
6e:ad:85:f2:4e:2f:4b:57:44:e2:40:04:c6:d5:be:ba:b4:07:
18:d8:a7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:59 2025 by rpki-client