Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: Ht3qJlSHjILvOMpnL1jsPkcEFvoHmhuDOUCD/LA5M0g=
Subject key identifier: 96:4F:DB:E7:17:F8:8C:D3:7B:C0:64:65:5D:E1:07:69:01:0B:52:D5
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 0197B77C0A9C2D41025437E46C287C8DB4B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 0F5B
Signing time: Sat 28 Jun 2025 17:00:49 +0000
Manifest this update: Sat 28 Jun 2025 17:00:49 +0000
Manifest next update: Sun 29 Jun 2025 17:00:49 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: H0cZFuvdhguk13vPJ1H++6EsmOyDvjCzdvF4fcQMXsY=)
2: VXcC-Aoxwj-rTTGa_uO04BMN16g.roa (hash: VurFkBc53EnvckMEwSnM6ZAN10rC6gV5KJRXaTV9e/k=)
3: jyRg9rzyp13wzC9lPn-bQBVk9SM.roa (hash: DykO+WlsvnZBAvuruj+gmcKA6ANC0St445Gn0td25pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:0a:9c:2d:41:02:54:37:e4:6c:28:7c:8d:b4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Jun 28 17:00:49 2025 GMT
Not After : Jun 29 17:00:49 2025 GMT
Subject: CN=964fdbe717f88cd37bc064655de10769010b52d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:31:1f:17:be:bb:d3:18:dc:96:59:84:1b:
6d:f5:77:8b:c9:ba:3f:30:42:d8:b8:eb:b6:af:19:
4c:c4:35:a4:34:cb:3c:36:61:6e:70:30:06:6a:ed:
73:5c:e1:cc:90:af:54:32:61:4b:7c:3c:40:be:90:
2a:44:66:ab:40:7c:85:f5:ba:2b:d0:70:c5:a7:02:
c1:53:2b:a3:2c:cf:6e:83:32:87:8a:f8:e3:8c:72:
17:a7:ce:e5:3d:bd:31:66:ce:d8:de:dc:de:13:2b:
20:8a:cc:e7:2c:de:ed:34:43:d6:15:a3:82:38:fe:
ba:2b:1c:5b:22:91:72:1b:c9:8d:af:87:09:33:6d:
e1:fc:ef:9c:91:2a:41:fe:25:21:1b:c3:93:2d:79:
93:ff:32:f8:1b:42:d4:85:55:ca:35:65:81:4f:ce:
d2:2a:f3:fd:ba:3e:d1:d3:03:eb:57:c6:88:95:71:
11:d8:51:1d:64:8f:05:79:9b:46:8b:4f:40:78:ef:
59:61:26:61:1a:31:6d:0f:5e:b5:de:df:7c:44:6d:
29:f2:96:40:25:ce:e3:f0:61:cf:92:6e:d3:d5:c3:
37:7e:86:80:74:ba:63:4e:47:a4:bb:f9:de:ab:63:
f7:93:84:78:ab:78:af:23:03:81:59:5f:9e:64:e3:
f4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4F:DB:E7:17:F8:8C:D3:7B:C0:64:65:5D:E1:07:69:01:0B:52:D5
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8f:79:5b:40:b3:06:be:db:37:b9:84:02:d5:a7:fc:7d:ac:
11:af:54:c7:c2:cc:11:37:e9:ee:b0:aa:c7:34:f8:68:8a:7c:
16:65:10:b2:f9:51:de:c4:de:2b:15:4c:6f:3e:5d:1a:a4:00:
6f:05:97:01:13:44:7f:e5:22:e6:1f:7d:12:08:0b:21:8a:58:
56:41:8d:4e:46:18:a4:7d:53:9f:cc:ac:79:54:33:f6:60:18:
05:a0:ad:88:98:d4:3c:5b:26:c9:20:b5:79:c3:a8:26:55:2a:
e7:53:a6:d1:0e:90:85:0a:29:b6:2f:83:61:9d:fb:de:fb:57:
2b:d9:34:15:fd:ae:0c:fd:34:16:58:b0:4c:08:3f:a2:b4:99:
9e:5b:cd:de:f8:c3:c2:3d:ac:32:f3:8e:31:2a:45:89:59:23:
bf:b7:0f:7d:61:d4:2f:b5:20:2d:b0:fa:e6:a3:91:aa:43:52:
37:63:69:b5:db:e6:b4:83:51:b8:58:93:b4:97:db:69:b8:dd:
a6:e2:af:38:02:ea:e5:92:ae:21:e0:11:a0:bd:87:65:89:90:
62:c2:54:19:b0:4f:88:9a:e6:76:2a:49:42:52:58:cf:b3:25:
4e:3f:74:ba:d6:e6:3a:99:0a:6e:a2:ea:a7:da:19:24:17:09:
85:97:1b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:43 2025 by rpki-client