Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
File: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json)
Hash identifier: dnCM1UTO+m3yvbUBfMKX9LqVu6Ez7CuXTeq+5uJEhK0=
Subject key identifier: 62:82:65:24:8E:9A:C9:19:7D:E6:92:22:C5:8E:2D:CB:16:A5:48:8D
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial: 0197B96AD6737A79CAFD6DC9F31CA2E248FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
Manifest number: 1258
Signing time: Sun 29 Jun 2025 02:01:16 +0000
Manifest this update: Sun 29 Jun 2025 02:01:16 +0000
Manifest next update: Mon 30 Jun 2025 02:01:16 +0000
Files and hashes: 1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: xdWQC1sGv/XRcFTjLuY6gX441xlK1ZyAveLOs0X0vJs=)
2: T5P1uF0UtYOhlxgIVxyPu_E24ZA.roa (hash: D5TZHibqLUW4oTHKSJ4ExAAZayO10mFfTENppWTtXa0=)
3: fEMD1Qw1-K78TFax9wsXAdNUiZc.roa (hash: zI5YMBWWK0MgL2oV8W3UKZtv3pFv7wUr61mj7J1xZ8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:d6:73:7a:79:ca:fd:6d:c9:f3:1c:a2:e2:48:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Validity
Not Before: Jun 29 02:01:16 2025 GMT
Not After : Jun 30 02:01:16 2025 GMT
Subject: CN=628265248e9ac9197de69222c58e2dcb16a5488d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:f2:41:5d:ab:24:ec:0d:fe:bc:87:38:c7:
2b:92:5e:2a:3e:85:71:70:fe:e3:a6:c6:5a:17:36:
13:d5:19:d1:7e:5c:8a:0f:cb:85:bf:46:0c:f8:dd:
6b:f8:ac:f8:a3:29:25:6d:64:73:75:29:7d:63:08:
33:6b:dc:fd:38:6f:80:2f:9f:9d:cf:8d:19:e2:7f:
6c:ef:03:10:04:b8:0d:87:85:47:f0:cf:25:e7:f9:
5a:1c:0d:15:b2:19:8b:e2:77:9d:b3:b0:19:e9:ea:
39:19:0a:d7:25:ba:6a:cc:5c:cf:19:d9:cc:5b:4f:
df:84:14:26:b8:fd:71:94:e7:ea:bc:55:fe:52:da:
83:31:20:f5:54:47:23:89:17:d4:1b:dd:c1:e8:91:
2d:16:5b:ba:08:0d:af:e0:44:5d:af:38:87:4e:c2:
65:97:65:71:64:26:b2:11:0f:2b:5c:07:aa:22:28:
2a:f8:53:63:af:b0:1e:26:c7:8a:c3:6d:16:db:0f:
6f:3a:a3:4e:d3:bc:76:fe:a8:c3:b4:20:02:ec:a1:
71:21:34:7d:6d:77:6b:06:2f:33:6a:21:5f:94:4f:
a2:32:71:dd:4c:7f:45:a8:d2:a5:45:37:75:0b:bd:
2e:05:9d:93:7e:c7:7d:77:7c:16:47:90:c7:95:64:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:82:65:24:8E:9A:C9:19:7D:E6:92:22:C5:8E:2D:CB:16:A5:48:8D
X509v3 Authority Key Identifier:
keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:35:11:8e:20:f0:50:bc:8a:ba:0b:bd:2c:93:85:06:ba:5d:
d5:90:64:89:27:7c:d6:4c:59:42:46:c8:1a:99:a5:14:ec:57:
c8:e1:46:14:3e:a1:91:2c:91:a0:20:1b:aa:dd:c0:20:0a:b0:
99:af:05:5a:e7:15:f0:ef:37:b9:ec:db:d5:41:f4:4a:9d:59:
26:cb:b3:e8:b4:21:62:07:70:70:be:e1:ff:30:41:7c:3b:ea:
27:a3:36:d0:b8:79:6c:80:15:82:e8:6d:42:c7:d1:41:cd:e4:
73:98:b4:5c:f4:f2:15:e4:e7:57:e8:d1:13:76:02:3a:b1:bb:
cd:6d:9a:c2:a4:5f:93:ff:b1:eb:12:24:27:44:50:92:b3:8c:
66:71:c2:69:58:22:3f:e1:af:d8:e9:14:4e:0c:06:69:7b:24:
9d:55:76:ca:1f:9f:58:38:8c:86:51:93:6c:10:b1:b5:84:5d:
06:30:50:58:d2:31:a7:d0:8f:bc:32:37:85:68:df:5a:83:ee:
70:93:dd:52:e7:e0:e0:69:22:00:eb:8a:53:17:04:c1:cc:31:
a9:c0:e2:22:16:a9:46:a1:81:3d:1b:23:4f:c9:2b:df:d2:b4:
08:9a:35:0f:17:c6:9d:90:ce:27:28:7a:fd:99:7c:8e:70:0f:
42:f9:a7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:24:25 2025 by rpki-client