Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: 0zD4b/yNhPRybER5ajQYbMtXBeQMziB5VujZe/yxj80=
Subject key identifier: 6D:83:21:5A:57:7C:C3:35:B4:F0:55:87:6E:E1:1A:76:95:3E:95:7F
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 0197B820D23A43AEA3AD919CF7E08CCC4D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 1534
Signing time: Sat 28 Jun 2025 20:00:48 +0000
Manifest this update: Sat 28 Jun 2025 20:00:48 +0000
Manifest next update: Sun 29 Jun 2025 20:00:48 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: fviEjLodyH/au45MwDapXuUvd3dhdlJK8JUTbmLmtXw=)
2: 8Ja6nLmqn5rWkD8bJIXyJiseunA.roa (hash: 0Zo4/0JR5pHj4KIYK41VyhNWjJ7czQTS1SR9Du+4qQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d2:3a:43:ae:a3:ad:91:9c:f7:e0:8c:cc:4d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Jun 28 20:00:48 2025 GMT
Not After : Jun 29 20:00:48 2025 GMT
Subject: CN=6d83215a577cc335b4f055876ee11a76953e957f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:f4:e9:cc:5b:36:b3:e4:fa:5e:ff:1b:a5:
1b:e9:d9:ad:18:f9:dd:c8:f5:2a:77:15:c9:09:41:
cd:d6:4d:2c:cf:25:8e:18:7d:ed:a5:7d:bd:64:74:
b5:84:6f:c5:c3:a2:79:d5:f5:8b:8f:23:a7:7c:74:
62:e5:72:eb:8c:d1:a9:31:cc:0b:f5:d8:07:e1:19:
17:98:98:91:06:d5:12:9e:bb:61:49:a6:7c:ce:f0:
fc:e2:b0:b9:1e:30:33:9c:60:5a:a6:8c:66:c3:86:
d5:13:b6:4f:2b:8c:0e:97:ae:96:09:f0:cd:ef:b1:
b8:af:cb:a3:06:d9:9b:32:4a:4b:bd:00:d1:e2:9b:
16:bc:6d:b4:5b:82:5a:e4:82:cb:44:0b:2b:82:40:
c5:a7:a9:c6:14:b7:10:1f:e4:e7:25:33:15:7b:e4:
95:64:b8:ed:e2:33:ed:79:df:ff:c1:14:b9:af:e3:
45:70:84:16:78:2b:a8:d6:ef:32:60:7a:97:19:9a:
f1:83:35:b8:99:f2:8e:30:ba:eb:46:b8:b4:2b:3a:
ec:25:ce:e7:4c:18:78:e2:00:15:b9:01:2e:0f:98:
c4:ec:5a:75:79:cf:50:16:b4:42:f8:40:f7:2c:99:
6b:99:cc:83:3b:a4:16:be:25:e4:2a:17:66:4f:76:
31:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:83:21:5A:57:7C:C3:35:B4:F0:55:87:6E:E1:1A:76:95:3E:95:7F
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:42:35:63:bb:2d:e0:d5:a0:4c:9e:c5:d3:ce:05:47:90:78:
45:04:3c:fa:8a:5a:3c:d3:53:dd:49:08:f6:26:b3:37:31:58:
23:94:67:a4:f7:b3:c1:73:d1:73:f9:7c:0a:36:ea:7c:74:68:
2f:02:e7:2a:2f:fd:d5:af:dd:ab:42:34:cb:b0:a9:04:bc:29:
3b:05:b5:b3:db:33:39:cf:31:b0:81:8b:16:1e:bd:ad:64:58:
43:0b:d2:18:47:d6:cf:7f:54:1f:8c:53:ef:98:55:07:4b:d5:
23:02:11:56:6b:93:4d:9c:93:98:e9:f1:d5:15:f9:73:a7:3f:
c9:45:46:69:47:0a:14:58:92:37:68:c9:2c:e0:35:33:dd:9b:
5f:55:c7:16:fc:3e:36:1b:6e:b1:3c:f6:9e:2b:fe:6a:d3:57:
bd:25:22:a0:df:74:8c:8e:e5:e3:0d:1b:59:49:88:ef:5c:5b:
83:1f:0f:ad:64:cd:2a:74:9a:aa:95:4b:ac:d5:85:cd:c0:d8:
e2:3b:fe:0d:f3:7b:f1:fd:9a:f5:a0:83:57:88:92:69:40:c0:
90:70:1e:ef:4e:4d:3b:d1:91:58:87:69:d4:e8:bf:4b:66:3b:
b7:b8:6b:24:51:5b:ec:ed:41:d4:a4:d5:e4:22:2e:1e:43:19:
7b:da:17:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:29 2025 by rpki-client