Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json)
Hash identifier: Y+ljweZvIGhg6yKz/mTXpVFuxeoUyamdf/Xx67PAjvU=
Subject key identifier: 78:5F:E3:50:21:E1:88:EB:38:79:D1:2E:21:90:5C:C8:E2:A0:6A:C8
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 0197B77CDE5150194418A52799B89A350B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
Manifest number: 0FD5
Signing time: Sat 28 Jun 2025 17:01:43 +0000
Manifest this update: Sat 28 Jun 2025 17:01:43 +0000
Manifest next update: Sun 29 Jun 2025 17:01:43 +0000
Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: 2yeRZpNYCjrcrMZsFmgUFJjijLxKqxLP6KlX8tQQOQU=)
2: YWZ9Y-_nf9hJ3PCcQZw9nBpADV0.roa (hash: 8GJk/xJD9TDW949jEwNVPLQ5jxG7+jInYSsAj0hFBHo=)
3: hL7gjsE__TvimmJVNhYnW8HxcTk.roa (hash: fSQmS4KDtYP+UxUBfXGw0aeIOC4KTOr+x3hlF+s6H3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:de:51:50:19:44:18:a5:27:99:b8:9a:35:0b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: Jun 28 17:01:43 2025 GMT
Not After : Jun 29 17:01:43 2025 GMT
Subject: CN=785fe35021e188eb3879d12e21905cc8e2a06ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:34:a8:6e:84:00:3f:eb:91:f6:a5:66:e2:1c:
db:1e:98:3f:90:c5:ea:a6:d9:67:04:c8:d3:0e:6f:
95:a5:01:db:a0:57:42:96:92:32:45:bb:e0:ec:ab:
f5:57:8d:ef:af:f0:08:4e:ae:4c:7b:5e:98:8a:3b:
ee:5f:f0:40:70:fb:60:c0:4c:b2:81:c5:85:27:87:
f3:2c:7a:4b:79:f3:56:df:d5:fc:7c:39:38:77:fb:
78:ae:78:16:9b:6e:f8:e1:09:03:35:75:7d:10:0f:
6e:59:a1:72:29:62:b7:f1:aa:ab:ca:20:5e:fa:66:
ec:de:60:73:09:b4:b2:dd:4c:6e:3b:b1:31:e5:9e:
b9:9d:17:e2:60:55:2d:49:31:89:1c:ee:73:83:0c:
98:87:f4:62:bb:e3:04:cc:92:cc:39:ac:3c:c6:5f:
18:52:5d:cd:c1:47:b1:90:92:14:e3:b4:e2:3a:3a:
98:70:ee:51:45:e2:b3:75:da:4b:5b:93:91:cb:1b:
82:33:64:30:78:d0:4a:93:90:d3:65:91:d1:8f:81:
f0:f9:c6:5e:cf:66:3a:53:24:4f:29:76:d3:ab:74:
37:17:cc:a7:8c:db:9c:16:bc:6e:6c:92:c7:b9:27:
87:b3:b1:50:21:41:c5:66:29:4d:c2:87:ab:8c:9d:
71:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5F:E3:50:21:E1:88:EB:38:79:D1:2E:21:90:5C:C8:E2:A0:6A:C8
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2e:97:f1:19:6f:25:9e:4b:9a:c5:6a:c6:1b:99:17:fa:01:
be:61:a9:6b:91:9e:dc:66:cf:b0:c3:41:fb:ad:54:f3:81:5c:
81:1b:b0:61:95:7e:c6:2f:37:ca:71:1e:f7:01:76:ec:f0:98:
f2:03:5b:81:73:4b:72:55:ec:dc:46:36:ba:fd:57:a3:6e:67:
62:2a:80:87:d7:0c:63:46:e8:b1:28:82:f7:e8:a9:6c:f5:36:
d8:0d:33:d5:52:6c:b6:55:f4:50:57:c7:29:0b:46:10:ab:b3:
ee:5f:fe:25:20:a6:56:61:93:c0:a7:bd:c9:b4:f9:50:af:12:
41:e5:f9:65:81:ba:1e:bd:ab:6b:d8:d5:0d:68:b2:80:69:5a:
3e:49:fe:61:f2:3d:68:97:9e:f4:b1:06:b7:26:45:6a:ea:5d:
1f:4d:62:71:9f:08:6c:6f:e2:a8:0d:4e:82:e9:ff:b2:07:7d:
ef:20:70:f5:0a:dc:39:de:da:ae:28:54:53:52:7e:95:0a:f9:
7a:85:ed:53:04:eb:32:2b:35:64:78:8a:2c:32:c8:e3:8a:4f:
de:2d:b5:5f:20:1f:f8:0d:cb:80:80:46:7a:02:ee:74:96:02:
a2:9e:9a:ca:f6:72:cc:1b:5c:76:a5:4a:0d:e6:e7:60:8e:b0:
10:c1:8e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:46 2025 by rpki-client