Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: VRDJozu83pPwmSAcmqmDjrIz7cPn6aol6e6czxA22Ck=
Subject key identifier: 0A:C7:B4:2A:10:69:4F:56:F1:A3:82:DB:4A:44:EE:5F:23:F0:61:EA
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 0197B7B37DF69A025F43AA4097C934267113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 18:01:23 +0000
Manifest this update: Sat 28 Jun 2025 18:01:23 +0000
Manifest next update: Sun 29 Jun 2025 18:01:23 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: SILLBptNc6hLYFZNIfhXa9gf6a1nPdmBerlMEwbQ86k=)
2: xXvr5N3cdjjVXwcVtqed053TqTM.roa (hash: RPXbgfGCQVhnjZtFi6ez4KE4+8jSRCf133mSXRnDHCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:7d:f6:9a:02:5f:43:aa:40:97:c9:34:26:71:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Jun 28 18:01:23 2025 GMT
Not After : Jun 29 18:01:23 2025 GMT
Subject: CN=0ac7b42a10694f56f1a382db4a44ee5f23f061ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:25:a2:f5:95:70:70:1a:8b:65:14:63:fa:
2f:6f:d0:f6:eb:70:84:76:1b:0e:f0:db:b8:9a:74:
15:7d:d6:9e:ff:1a:e9:3f:df:bf:87:0c:cd:f9:b5:
36:97:21:75:3d:ff:ae:f8:7c:d6:6d:23:31:ab:96:
24:9d:e6:ff:8e:63:7e:9a:fd:1a:71:4b:38:a1:20:
42:e7:db:be:e1:2e:4b:3d:bc:27:f8:3e:71:be:3a:
bc:95:cd:58:f6:94:90:22:06:56:5d:ae:2d:cf:3a:
83:cc:cb:7f:b5:47:8e:ed:c5:28:6c:d2:be:e7:79:
61:c4:be:2c:73:9f:3c:22:2c:fd:b7:88:32:27:e9:
a0:a7:99:1c:6c:1f:6f:b5:15:28:df:71:97:17:8b:
19:99:7f:7e:7b:01:b9:eb:a4:46:fb:38:08:4e:66:
f8:35:44:99:ee:bd:2c:34:71:85:62:14:cb:34:94:
93:54:53:69:6a:d9:7b:56:ea:d4:a4:1b:db:c3:1d:
58:99:2c:14:94:fe:e5:5e:25:60:91:82:54:ff:23:
d2:0c:f7:83:10:8f:03:1e:36:d4:c1:97:5e:ff:05:
00:82:e7:be:f6:a5:db:11:8c:41:62:3d:b0:75:dd:
86:73:f5:e7:62:7c:35:b8:29:43:89:df:d4:6b:40:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C7:B4:2A:10:69:4F:56:F1:A3:82:DB:4A:44:EE:5F:23:F0:61:EA
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5a:96:32:f8:8d:e0:d5:c1:02:52:94:4b:6c:c7:cb:b0:61:
16:81:7f:d5:75:0e:8d:69:53:b0:94:79:60:05:98:16:ad:32:
aa:d0:0b:0e:57:85:25:5f:b3:60:d4:ad:85:32:22:55:d2:3a:
74:7e:f0:50:2a:8d:e3:15:60:b5:5f:bf:63:ad:73:fb:49:6a:
61:ec:7a:d0:14:4c:fd:6e:d4:ab:f9:fe:a1:60:ab:82:bc:c6:
67:ee:a8:da:e1:c3:c9:1d:ca:40:26:b9:f8:6c:c2:35:43:2a:
64:8a:5e:d6:2e:1c:bd:37:22:71:53:94:41:15:62:7e:85:e9:
2e:47:9c:8c:d6:58:84:e6:10:d8:6a:63:b6:b3:01:5f:7d:45:
ab:42:0d:9f:cd:44:5f:59:f2:95:0e:1a:be:c9:00:ea:e8:89:
f8:86:60:b1:56:18:5f:eb:6c:94:4a:49:de:00:08:b3:61:da:
07:e9:a0:c3:2b:45:97:ac:3c:c2:27:af:58:2c:e7:2d:bf:5e:
fb:cb:2b:ae:71:34:3f:23:e6:76:f5:e9:61:d3:2e:68:13:dd:
32:8a:79:c8:9c:3c:6b:c7:b7:7d:95:17:e5:ef:33:de:7a:b1:
29:f3:a6:a0:c2:d1:01:f7:9b:58:41:b2:b7:0a:2e:73:a8:50:
83:e1:0e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:23 2025 by rpki-client