Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
File: 1ITgzuV1xhkFP47isQBMxEL9LO0.mft (raw, json)
Hash identifier: jRLv2drYtyvYotG4Nr3KIyJW7BnsMPm2xbrC0NebBvI=
Subject key identifier: 14:84:14:69:5D:DE:4E:4B:9A:6C:64:41:88:04:57:E0:14:85:EF:7D
Authority key identifier: D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
Certificate issuer: /CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Certificate serial: 0197BC6D72467831770BF301A215AF54A45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
Manifest number: 13E1
Signing time: Sun 29 Jun 2025 16:02:58 +0000
Manifest this update: Sun 29 Jun 2025 16:02:58 +0000
Manifest next update: Mon 30 Jun 2025 16:02:58 +0000
Files and hashes: 1: 1ITgzuV1xhkFP47isQBMxEL9LO0.crl (hash: XMcnRmWPVgVlIb83W7Q56hXFtD3iz1Pk3f7WnqQvm/c=)
2: LlAa--5nsX3tUHGAFZ_HSMFrn7I.roa (hash: 3b1C9Ph3SGavY+PSGpBTlLw28V2WqXhlaeYP73oghL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bc:6d:72:46:78:31:77:0b:f3:01:a2:15:af:54:a4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Validity
Not Before: Jun 29 16:02:58 2025 GMT
Not After : Jun 30 16:02:58 2025 GMT
Subject: CN=148414695dde4e4b9a6c6441880457e01485ef7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:b3:22:82:58:ef:af:53:03:14:42:f4:bf:
11:cf:6e:be:df:51:db:d3:33:49:6d:22:65:54:9a:
1e:3a:87:a1:4e:07:5a:a7:1c:79:09:c4:3e:a0:80:
de:ba:86:bd:f1:08:0f:be:19:8c:35:cd:34:b5:17:
5e:71:00:dd:61:82:07:5e:85:17:75:8b:91:ae:df:
35:83:32:30:a8:bf:9a:ad:d9:d4:1d:8d:bf:1b:ee:
33:99:98:22:cf:57:bb:d1:a7:4c:77:60:0e:c9:a7:
68:20:d2:0a:e0:0b:da:f1:1f:d3:57:74:c2:19:05:
08:ad:69:2c:03:41:11:f1:14:b3:6c:0d:63:97:b4:
e2:83:2e:46:18:6e:54:cd:c4:82:f7:21:34:7d:7e:
4e:aa:a8:a2:d5:35:9c:92:39:79:a5:2d:77:a0:55:
a5:c6:6f:02:6e:81:28:3c:12:52:9f:0c:26:08:26:
00:dd:d7:e2:d1:59:2f:fa:51:fc:ee:6f:ee:00:31:
cb:75:de:6d:3a:a5:6c:1a:27:d2:fa:28:4d:36:06:
47:44:fe:01:a7:2e:3a:30:f8:e5:26:37:6c:d1:76:
66:ab:20:00:3c:74:d0:f5:ec:70:6d:55:b2:f8:c8:
24:49:67:b5:19:8d:ec:b7:93:51:00:0e:a5:a7:d3:
d3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:84:14:69:5D:DE:4E:4B:9A:6C:64:41:88:04:57:E0:14:85:EF:7D
X509v3 Authority Key Identifier:
keyid:D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:44:7a:bd:ca:41:c8:7d:9c:ce:28:7c:d6:9a:2c:eb:41:b4:
66:74:bc:f4:80:14:b5:6e:c6:d0:4b:fd:b6:30:dc:46:e3:48:
e7:07:b5:d5:a8:38:d1:84:a3:22:81:fe:d0:bf:f7:b4:69:0f:
77:54:65:92:2d:d9:8a:ac:97:83:ce:f9:ad:d3:d7:fb:ea:aa:
e2:20:cd:72:ba:e2:2d:a1:ba:5a:f7:1b:9d:ee:41:97:a3:bf:
64:dd:a0:ab:35:7a:77:1a:d3:1c:f2:1f:63:c2:9f:86:50:d2:
a7:4f:4a:10:8a:ec:5d:a8:33:43:8c:b0:00:65:73:3f:38:02:
ad:6b:66:dd:15:4f:fc:12:28:1e:15:7d:0d:01:49:70:39:65:
9d:1e:6c:5f:d5:2b:0d:51:cf:f3:5f:42:a4:42:61:d1:2b:71:
61:cd:4a:dc:8a:66:9f:6a:47:5f:ca:43:3c:99:e7:22:77:dc:
92:ad:f4:e1:71:25:0e:dd:cd:86:67:9d:47:cf:d2:ec:db:02:
f7:c5:20:ec:ec:13:27:01:a5:a0:29:45:f3:58:24:ec:04:29:
4d:ac:6a:59:b5:7c:6d:01:80:ab:8c:ea:89:54:51:1d:de:5f:
2c:ff:29:30:fe:11:8a:6d:4c:f6:a1:66:ee:da:8b:34:93:c6:
0a:fd:2f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:04:11 2025 by rpki-client