Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
File: 1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft (raw, json)
Hash identifier: HekgQKQN71nmDuSgHpgvY/HRIal0xtPeRbv6sx6f4/o=
Subject key identifier: 6D:50:AD:1B:19:2B:35:1E:8A:BC:76:27:A6:41:C4:F6:89:18:49:1D
Authority key identifier: FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF
Certificate issuer: /CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
Certificate serial: 0197CE3B2B571A4FA3AA5CDAEC41BA77E903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
Manifest number: 15C3
Signing time: Thu 03 Jul 2025 03:01:13 +0000
Manifest this update: Thu 03 Jul 2025 03:01:13 +0000
Manifest next update: Fri 04 Jul 2025 03:01:13 +0000
Files and hashes: 1: 1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl (hash: 5nSdenZXwWTOlawcjAtAtvocaH410wKwDYaPfpl0qoU=)
2: 1-O3-eEOj4WNMKkx6AjJ5BztCQfA.roa (hash: 3XCfpEftkyfw/udAWZHLu6olWarQDCfoueNYZe4wmqM=)
3: g9Xis0X9LNCOyDX1kA4xgId4bUU.roa (hash: eAC0STaybazrwMkwNWuW4cD5J/cTK9sETsg7k83JaD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:3b:2b:57:1a:4f:a3:aa:5c:da:ec:41:ba:77:e9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
Validity
Not Before: Jul 3 03:01:13 2025 GMT
Not After : Jul 4 03:01:13 2025 GMT
Subject: CN=6d50ad1b192b351e8abc7627a641c4f68918491d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:21:6a:ff:6f:b8:9b:74:9b:61:a7:49:72:
41:f8:cd:c9:de:91:94:aa:dc:e8:81:ea:4f:91:7e:
78:c0:e3:a5:b5:fb:22:cc:3d:58:22:5f:c3:74:cf:
13:ba:42:ef:20:ca:6c:0f:ca:61:8b:b8:57:6a:e2:
06:85:2e:a6:ef:6d:d6:c4:12:30:17:92:b0:78:5d:
60:a9:47:79:b9:18:e9:d2:79:b5:dd:0e:be:ae:32:
df:d0:f3:9f:94:30:a6:b7:3f:a4:b5:2c:46:fd:2e:
3c:b5:4f:ac:93:cc:5e:44:e4:6e:ae:44:78:3f:c8:
af:85:0d:28:42:e1:46:ca:85:9e:93:43:93:35:78:
8c:27:6e:4c:5f:cf:50:cf:e8:d0:c4:d3:25:25:b7:
0f:1f:dd:88:1b:34:d0:97:e5:cc:f8:3f:61:d1:ed:
c0:59:dc:a0:5f:e1:c9:7e:d6:de:86:dd:be:c7:b8:
06:ab:f5:d4:25:92:4e:d4:d2:ac:58:95:d9:a7:f5:
f8:b0:e0:50:b0:aa:57:56:fa:a0:b1:39:a1:7e:7d:
4f:2c:8a:a3:4e:07:91:ab:cb:28:cb:55:cf:91:c3:
7d:61:7c:32:ac:df:62:5c:19:7e:27:c4:94:4b:93:
ac:db:52:5e:0c:7c:1a:32:b2:7a:10:1a:c2:d2:5e:
1a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:50:AD:1B:19:2B:35:1E:8A:BC:76:27:A6:41:C4:F6:89:18:49:1D
X509v3 Authority Key Identifier:
keyid:FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a0:e3:84:88:c1:bc:f1:a8:b4:70:30:75:42:2d:01:ba:02:
d0:18:58:22:0c:88:3b:9f:5b:f8:74:b8:62:77:d2:6a:4c:0d:
5e:66:92:1c:7e:e4:fd:56:ca:85:56:d0:4e:52:9e:6b:f2:04:
dc:ee:a6:aa:1e:9d:7e:a6:c1:19:94:fb:44:85:45:0a:ad:64:
33:e6:80:2e:2c:4a:69:ae:2a:ed:86:cf:93:1f:d5:b8:6b:42:
aa:2b:a4:69:1d:d0:67:35:0a:40:d8:ab:cf:1d:2c:89:c9:80:
46:82:1a:54:ad:21:84:4b:bc:85:35:db:84:d6:db:81:c0:02:
b4:5e:4b:bf:bc:9f:ac:e2:3e:02:58:78:79:41:d1:81:74:8f:
70:e2:43:86:90:92:73:bc:8d:3b:fa:33:7f:65:9c:92:00:69:
20:69:4d:28:60:28:b7:c6:b4:7a:6c:73:a6:ea:11:32:34:ce:
5f:61:78:01:5e:ef:96:d4:81:d7:b2:65:d3:39:98:6a:9d:e1:
a7:b1:03:7e:aa:43:79:2d:eb:83:9e:d0:68:46:56:dd:61:13:
e6:94:58:e2:69:a4:42:95:93:85:c1:a7:4d:14:f2:dc:c2:b3:
9b:43:1f:c9:60:bd:19:43:6f:64:10:ca:43:ba:ee:fc:10:b5:
7f:99:4a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:49:56 2025 by rpki-client