Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
File: 1-_YvdgYnP0GmzMjilWB288Ch61Q.mft (raw, json)
Hash identifier: cMZih+RQ6Crku4W0t1EYLAygEjSTBQpxfl5FVuu52x8=
Subject key identifier: 85:AC:8A:AA:60:8E:E2:D1:02:93:8F:F7:18:93:A3:00:53:3B:65:83
Authority key identifier: FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
Certificate issuer: /CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Certificate serial: 0197B89085795EF71F42B5B9A4E496FDE175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
Manifest number: 15D8
Signing time: Sat 28 Jun 2025 22:02:48 +0000
Manifest this update: Sat 28 Jun 2025 22:02:48 +0000
Manifest next update: Sun 29 Jun 2025 22:02:48 +0000
Files and hashes: 1: 1-_YvdgYnP0GmzMjilWB288Ch61Q.crl (hash: /RwdlDVf3lSmsDurGmDI7C00cIg8aCdzNWchGdVY1RI=)
2: gVx18rt52MyPf0oqDqUou5AuUBM.roa (hash: vA3SGzj0FAH1RwjbpG6kC2zF7wZB8RzhXo7xrGq4Z4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:85:79:5e:f7:1f:42:b5:b9:a4:e4:96:fd:e1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Validity
Not Before: Jun 28 22:02:48 2025 GMT
Not After : Jun 29 22:02:48 2025 GMT
Subject: CN=85ac8aaa608ee2d102938ff71893a300533b6583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:61:67:19:d7:d4:e6:c4:a1:92:69:9e:b8:
34:5b:28:63:ed:c7:93:3b:36:17:a9:a5:eb:01:00:
96:cc:09:88:33:4d:bf:f9:5e:09:c9:42:43:6a:6e:
e6:97:cd:9c:69:00:ee:6f:44:b8:01:2b:4e:e8:26:
f2:fe:91:74:f4:f1:10:7a:7b:16:12:4b:97:81:f2:
0b:dd:7d:52:c5:99:4e:59:91:ec:9a:dd:e2:1c:6c:
d8:3b:ab:71:ed:b9:49:25:db:39:1c:66:b0:5b:3e:
ca:19:2d:41:3d:40:be:19:28:32:e1:9c:3c:48:f2:
da:87:c6:a4:86:71:6a:af:00:d6:46:df:b6:3c:07:
5b:d9:db:ec:18:a5:b0:4b:a0:96:49:37:2e:4d:83:
0c:b4:b1:52:c1:1b:73:d0:00:b9:d9:f9:5b:29:e8:
25:ab:d8:73:7d:5f:a7:2d:65:bd:12:c3:35:4b:15:
08:07:a9:cb:e1:1c:29:ab:9c:32:42:01:17:ee:0f:
54:ea:24:ce:6c:8f:39:c3:c6:3c:7a:b6:37:53:73:
87:ab:d0:81:34:4b:8a:ee:40:ec:c8:7a:af:bd:b4:
ff:48:db:49:da:d2:74:23:9f:8c:0b:9e:b8:27:73:
2f:36:b6:76:a9:42:ee:0b:10:1c:cc:9f:df:fe:44:
66:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AC:8A:AA:60:8E:E2:D1:02:93:8F:F7:18:93:A3:00:53:3B:65:83
X509v3 Authority Key Identifier:
keyid:FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f6:96:d3:21:0e:ee:2d:e6:f1:77:c0:5b:95:93:6b:2e:28:
b7:0e:07:83:d6:b6:2c:99:fa:b1:fa:6c:da:9d:a0:af:01:d1:
1a:68:27:fa:cc:e0:81:7f:12:f5:60:3d:49:2e:d2:47:37:fb:
92:0b:e5:01:6d:e2:8d:1a:d5:c1:88:9c:1e:41:84:37:c9:43:
47:58:b0:36:ae:ad:24:8d:21:6a:32:7d:2e:4f:ba:e9:05:d6:
12:5e:21:36:d6:7b:6e:a1:fb:02:3a:fe:11:0e:88:b8:de:9b:
83:07:63:f1:67:8a:2c:3c:ea:a2:26:83:e8:40:fa:66:01:54:
27:b9:ca:5c:87:ee:37:f6:1b:43:cc:e3:e7:c2:7e:50:56:36:
71:f2:1f:d1:27:e6:04:4a:1f:68:cb:65:e7:3f:51:d9:d7:da:
0e:f3:f2:f5:c0:7b:67:97:39:0e:fa:d7:e6:bd:2d:3b:4e:6a:
8c:15:04:e4:17:52:c6:43:7d:b5:97:57:79:bc:39:25:c7:1e:
1c:52:a6:12:2f:ac:b3:94:7f:ea:c3:e1:86:2e:e6:07:4c:51:
21:93:00:f0:af:d0:4d:2f:ae:b8:81:92:14:c8:01:68:98:cc:
a4:36:5f:7d:ab:6c:78:02:e1:67:de:e4:d7:ed:9f:b2:d1:8d:
4c:66:cb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:47 2025 by rpki-client