Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft (raw, json)
Hash identifier: U7hpGYqk8tFRG9kfDoFWad4XPPhj3pUowwOSRhQmTVk=
Subject key identifier: 60:BF:E8:B5:0A:8C:89:5C:1A:CE:EC:81:C7:85:53:FB:0A:3E:60:83
Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Certificate issuer: /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Certificate serial: 0197B5FC775240E0B6E0158AA42DA3DADA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
Manifest number: 1585
Signing time: Sat 28 Jun 2025 10:01:51 +0000
Manifest this update: Sat 28 Jun 2025 10:01:51 +0000
Manifest next update: Sun 29 Jun 2025 10:01:51 +0000
Files and hashes: 1: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl (hash: fHapSHNPSBGQhalj/3/A9KlSpHkjJn7hHr2CKJEspOI=)
2: U9Nd4lA1nfYgFbzG2ZpmfKjrQ9c.roa (hash: lVZokALnBnr4+UddkLMCY202V6rmOp2F9LXdZYcTxX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:77:52:40:e0:b6:e0:15:8a:a4:2d:a3:da:da:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Validity
Not Before: Jun 28 10:01:51 2025 GMT
Not After : Jun 29 10:01:51 2025 GMT
Subject: CN=60bfe8b50a8c895c1aceec81c78553fb0a3e6083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:20:5d:43:d8:a1:91:4b:a1:ba:f8:a7:a2:09:
f4:4f:c8:34:00:54:43:83:4f:c2:0e:cb:20:4c:29:
a9:28:5d:39:54:d7:a1:a2:93:95:0b:da:4b:5c:c8:
96:88:f2:e6:70:3d:eb:da:c8:22:57:cd:cc:e0:ed:
7f:f7:8f:55:b6:25:c9:f1:91:e8:48:8e:2a:de:b5:
6d:5d:1c:8f:b9:28:8b:88:57:d9:ea:54:46:b2:f1:
8e:90:e1:34:8b:fc:51:9c:58:25:3b:8d:54:51:46:
95:93:c4:65:04:8c:a7:a6:08:e3:e0:1c:f6:8d:b6:
8d:cb:75:17:29:1b:52:3f:74:c5:36:24:aa:23:1a:
6f:b8:69:9a:72:1e:39:e1:37:8d:24:b7:1d:52:94:
d2:75:ef:43:90:43:54:ff:92:81:59:7f:8a:02:64:
c0:ca:e4:ec:37:5e:10:35:8a:06:fd:91:74:b7:0f:
33:85:24:0a:5b:53:ee:34:93:be:3e:20:6f:a8:21:
ef:19:36:8c:64:2c:55:37:74:9d:19:ec:7c:3e:df:
2b:a4:eb:5b:11:ec:4f:65:37:1c:9d:6d:b4:5b:7e:
1a:e3:d8:23:b4:0e:1a:f2:dc:8a:8b:1a:b1:f8:14:
62:ca:60:86:4d:36:6e:25:28:89:34:a3:08:19:99:
ae:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BF:E8:B5:0A:8C:89:5C:1A:CE:EC:81:C7:85:53:FB:0A:3E:60:83
X509v3 Authority Key Identifier:
keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:78:78:8f:5a:39:3c:ad:01:32:7f:4d:61:6c:06:94:48:15:
48:e9:55:00:1a:2d:2f:f6:4e:a9:58:42:84:e3:f8:4e:a3:e9:
7d:81:42:0a:31:7e:c7:95:9e:a9:c3:83:57:1e:82:ef:b0:47:
a3:19:4c:9c:ce:c1:ca:c8:57:b9:2c:2c:31:c0:cb:b3:23:ef:
a8:8a:56:fb:e3:47:cb:5c:aa:d4:e8:e1:d6:03:e3:6c:3a:6f:
f4:d1:36:c6:5e:dd:32:fa:1e:16:74:b3:52:3d:e7:10:1a:a2:
50:99:4f:a6:dc:9b:0d:63:96:3a:55:82:51:cf:db:13:7d:e6:
cb:6d:bf:5c:e4:4f:a8:be:e5:de:aa:44:d1:9c:87:d1:99:6a:
d4:6d:1e:f6:66:eb:5d:c0:e6:a6:19:e0:22:53:bc:2e:75:5c:
63:96:c8:70:9b:68:5f:0a:44:22:a5:db:79:7f:29:95:27:f9:
c2:f2:6c:af:ab:77:88:f2:77:21:7d:5a:02:06:25:6b:6d:24:
cf:eb:3e:d9:74:57:97:d1:a9:23:e6:7d:93:d0:7d:4b:dd:37:
2b:ef:06:cf:d1:f3:cf:c7:81:db:2c:7f:05:78:65:86:38:a7:
5c:32:ab:57:85:2c:c2:01:5e:a7:66:36:3b:a1:55:cf:b0:bf:
c2:7f:c2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:21 2025 by rpki-client