Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
File: 1-9W1c_sNJpmSp5qea0XN1iDezBE.mft (raw, json)
Hash identifier: xeBZFYjYj1jLXZEIXeOe8XodZcESOKwCVxDPj7770Eg=
Subject key identifier: F9:69:DF:5F:E3:B0:41:E9:40:F0:DE:72:B1:E5:F8:D8:B9:86:C4:8B
Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
Certificate issuer: /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Certificate serial: 0197B7EA5F85C3A7EB0521B533908F9D81B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
Manifest number: 0640
Signing time: Sat 28 Jun 2025 19:01:19 +0000
Manifest this update: Sat 28 Jun 2025 19:01:19 +0000
Manifest next update: Sun 29 Jun 2025 19:01:19 +0000
Files and hashes: 1: 1-9W1c_sNJpmSp5qea0XN1iDezBE.crl (hash: 0CTELmbDqm8ZfE3nzWS8bYNZsoiaUoQxnKYwmfBWJwA=)
2: xxpwWq99h2UC8fGaA57WvXmJQIY.roa (hash: hB0aBJhUko4vLE69LgJZtcXWGS9cGGQQvN4ZagAecyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:5f:85:c3:a7:eb:05:21:b5:33:90:8f:9d:81:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Validity
Not Before: Jun 28 19:01:19 2025 GMT
Not After : Jun 29 19:01:19 2025 GMT
Subject: CN=f969df5fe3b041e940f0de72b1e5f8d8b986c48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:80:ff:17:43:cd:8e:fb:bf:fc:54:5a:41:f0:
9a:e0:db:0d:59:b4:dd:07:40:c1:27:f5:0d:b4:9e:
ea:8c:fd:09:a4:89:95:67:c5:70:b3:70:e7:25:98:
c1:9c:8d:cd:89:d1:14:c1:2c:23:76:d1:89:4e:09:
f3:92:55:aa:bc:bc:af:5e:2c:e8:67:f4:1f:f1:1e:
6c:1d:84:64:e6:af:1d:44:69:77:f0:16:1e:c4:8f:
bd:3f:94:c4:94:20:05:1b:12:15:d0:ce:b2:b2:17:
77:5d:3d:31:a5:ff:e2:f8:cc:52:2a:9b:f3:ce:4b:
29:c6:8c:3e:ce:f2:ca:8b:7e:b9:c4:ff:a7:28:99:
e3:49:b2:ff:89:6e:ac:94:a5:88:d7:d4:5e:25:5c:
5d:1a:02:6f:ab:21:7e:4b:73:01:87:f1:d7:93:45:
49:13:65:08:9f:5b:7d:ea:da:c1:05:06:57:6d:e2:
a8:fc:bf:89:62:cc:73:7c:ca:26:26:88:62:33:e1:
26:75:2a:07:4b:9b:7c:dd:db:55:b0:86:f9:c9:04:
69:9b:01:3b:12:58:6a:a9:69:f2:4f:0b:5d:2f:20:
30:fd:f6:8b:41:cd:11:0e:ea:5e:33:ac:f2:23:9d:
60:b5:b0:eb:bd:0b:57:f3:1b:bf:9f:d3:46:8b:62:
84:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:69:DF:5F:E3:B0:41:E9:40:F0:DE:72:B1:E5:F8:D8:B9:86:C4:8B
X509v3 Authority Key Identifier:
keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b3:be:af:6c:76:cb:7f:46:35:68:34:eb:55:7e:d8:56:24:
f9:3b:cb:1c:2a:9d:f1:d1:c7:6a:fc:9e:58:89:72:6f:f5:82:
3c:91:c1:1d:a0:ee:b1:23:a0:bf:1a:f8:b8:10:77:ef:38:16:
e5:46:9c:9e:a8:b4:2d:f9:4e:3d:6c:c1:01:53:05:e4:7d:97:
e0:db:6f:fd:be:7a:de:1a:78:f9:23:da:1b:23:74:fa:72:b7:
29:0a:c6:d6:dd:11:94:da:60:32:ae:1c:fb:f7:a4:99:22:48:
86:0f:4c:e0:8a:65:b2:16:a4:e6:d0:d0:7c:eb:4c:21:42:42:
11:24:d5:e4:d9:e7:62:37:19:20:37:04:34:d5:2c:a2:e1:0e:
44:b6:3b:5e:73:b7:7e:f3:44:b3:da:1f:82:77:34:2c:1c:c9:
9a:dc:d6:83:6a:ce:2b:bd:74:1b:42:15:5f:a7:a4:03:4e:ff:
17:3d:02:b0:63:08:63:1f:e9:24:d5:43:c7:ce:c0:0e:b1:44:
43:48:93:aa:42:6d:e3:64:91:53:c2:00:c9:ab:63:0e:1b:ec:
ca:c0:62:0b:bf:db:ec:be:28:f7:bc:7b:27:54:b0:8a:f8:56:
1d:00:31:e8:cf:92:fc:56:2f:d7:59:ee:46:23:3b:64:cf:2d:
77:f6:9f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:23 2025 by rpki-client