Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
File: rf_xvXcSh87UxN1tioUdKtdwZh0.mft (raw, json)
Hash identifier: YCz5VnNI6khUc1QBe1OptwbLEILUNhcbGoC4yYOQidE=
Subject key identifier: 4D:37:D4:F1:4C:1E:36:94:C2:5A:0E:47:28:DD:03:AC:D5:78:50:A3
Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
Certificate issuer: /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Certificate serial: 0197B7EA212BDBF7DC56769E80D18976379D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 19:01:03 +0000
Manifest this update: Sat 28 Jun 2025 19:01:03 +0000
Manifest next update: Sun 29 Jun 2025 19:01:03 +0000
Files and hashes: 1: a5yaKlijnL4kZ_oj1IyssANoPrY.roa (hash: Ldfc6br/bRY5cT98+AAZmtT6be1fhfXCxblPXo1RRow=)
2: rf_xvXcSh87UxN1tioUdKtdwZh0.crl (hash: l9YcaAyRqSaOMSm9taBOI5Cw/ZBipb8pYHyMoCteSMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:21:2b:db:f7:dc:56:76:9e:80:d1:89:76:37:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Validity
Not Before: Jun 28 19:01:03 2025 GMT
Not After : Jun 29 19:01:03 2025 GMT
Subject: CN=4d37d4f14c1e3694c25a0e4728dd03acd57850a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:f9:2d:de:5b:6e:82:83:e2:2b:5d:40:7d:
ec:5d:c7:92:9f:12:49:d2:aa:ac:c4:16:c3:a1:6d:
30:7d:2f:40:91:85:07:cd:33:62:ab:e1:5e:8b:3c:
e5:1a:56:8f:b5:7c:7d:80:1f:a5:5a:5b:80:7b:6a:
4e:29:e5:14:59:26:6a:ce:42:7a:7f:3f:4c:45:62:
d0:0b:be:f1:d1:04:c2:39:f1:d7:d1:0f:59:0a:5f:
dc:1c:8f:98:b7:99:29:ab:b9:83:27:03:05:7c:13:
22:bb:fe:5f:5e:cb:ec:d2:37:7b:a0:fa:14:a3:8f:
5b:a0:95:4f:37:ca:29:ad:30:6d:21:51:de:e1:45:
f0:dc:7b:88:d0:9c:e4:36:3a:0f:94:95:fb:47:8b:
36:19:df:7f:f3:0a:80:72:cf:fa:14:4a:13:6d:8e:
5b:c8:dc:e9:13:06:36:0d:53:20:11:e0:a3:86:12:
67:7d:e0:3e:ec:be:6f:0a:0f:19:b4:72:73:b0:f2:
52:58:c1:75:92:34:be:9d:d3:49:52:58:92:dc:af:
c3:e1:58:9a:dd:e9:34:f2:11:36:d0:ec:2d:1a:5c:
a4:9b:78:b5:ba:7b:0f:a0:28:13:13:aa:14:57:ae:
43:38:8a:ea:d9:0d:ce:58:25:cb:e9:65:1e:af:da:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:37:D4:F1:4C:1E:36:94:C2:5A:0E:47:28:DD:03:AC:D5:78:50:A3
X509v3 Authority Key Identifier:
keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:cd:fd:c8:9f:ce:49:04:75:76:71:00:ec:44:2e:37:54:3a:
80:1a:bc:bd:49:51:3a:4e:52:67:5a:e0:90:07:ac:0c:07:25:
21:71:5d:6f:6c:1a:1c:43:f2:c3:f8:ba:95:1f:ed:54:b8:41:
cf:f6:e8:fa:e5:2d:c5:01:ff:98:cc:53:8f:89:1d:e8:b5:b4:
a2:49:a4:82:d4:c4:d5:ec:90:4a:59:11:ce:d4:81:0f:7d:e6:
3e:00:c6:fa:8a:71:fa:4c:77:5a:9a:94:70:6a:c4:53:7d:41:
39:46:dc:75:ac:5d:7b:4e:65:7e:2d:f3:44:b6:d8:59:c2:06:
3b:47:dc:b6:d4:03:4f:ca:08:d7:b4:5f:e1:25:30:f6:3b:ac:
87:4a:9c:2a:2e:76:a1:89:86:b4:6c:11:6f:bd:f3:36:b6:4a:
b0:ce:b6:55:2c:26:8c:9e:c7:db:28:8d:93:61:58:55:71:c2:
b5:7d:c4:27:2e:7f:f0:bc:c2:9e:ab:80:6c:f8:1a:bc:49:14:
cd:9f:31:4e:ea:49:c2:97:e0:3d:11:90:90:7b:78:3f:ec:4a:
f2:05:33:45:50:d2:e9:ed:5b:aa:d9:1a:1c:90:bb:d5:f3:78:
a2:2b:fb:b7:52:99:46:9c:22:91:25:d1:9e:33:b2:f1:2d:dc:
35:ab:b1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:24:18 2025 by rpki-client