Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
File: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft (raw, json)
Hash identifier: YgBndRFmu+mL27AbCPG2UtFBrN/GtNdx1CajRtx6it4=
Subject key identifier: F3:EB:29:05:E0:D9:42:6A:B1:5D:6C:6C:9A:90:7D:1F:7A:22:16:BD
Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
Certificate issuer: /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Certificate serial: 0197B6A1F4734A2FF8D523B210AF24810268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
Manifest number: 095F
Signing time: Sat 28 Jun 2025 13:02:36 +0000
Manifest this update: Sat 28 Jun 2025 13:02:36 +0000
Manifest next update: Sun 29 Jun 2025 13:02:36 +0000
Files and hashes: 1: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl (hash: Mempk0RPJUWkvCrCY92FqabcIILmRf9TWYDA95+AbIo=)
2: nyuERDVJh6-PTXV2ajcksYw_55g.roa (hash: K7CKnx/jM/EuzQ/IpR2qcCsRtlnJ0y6qFH+bAbkXnGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f4:73:4a:2f:f8:d5:23:b2:10:af:24:81:02:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Validity
Not Before: Jun 28 13:02:36 2025 GMT
Not After : Jun 29 13:02:36 2025 GMT
Subject: CN=f3eb2905e0d9426ab15d6c6c9a907d1f7a2216bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d0:f3:7a:19:f5:1c:d4:8e:aa:16:46:39:49:
56:7b:e9:52:5e:81:d3:7d:a5:a9:4c:99:97:82:ec:
e9:6b:22:2e:f6:2f:1e:74:a4:07:44:6f:f2:bb:fc:
8e:77:b5:f5:03:4f:b5:45:54:e2:75:6e:d3:bd:21:
bc:5e:55:59:27:85:25:6c:5e:23:6b:04:9a:6e:7a:
d8:43:6f:e1:1a:a1:d4:45:30:f5:62:f3:b3:fa:56:
b3:5e:ff:5f:eb:99:ed:cb:74:2f:07:53:c6:86:ae:
b5:73:27:9d:a1:8b:ad:e6:e4:f0:d7:67:c3:90:63:
1a:ff:9d:55:57:ce:1a:df:6e:bf:6b:3e:13:c0:7b:
55:1e:80:ec:e5:77:98:a1:d7:89:8a:6a:00:32:84:
0e:27:75:f4:d1:07:c7:76:c2:fd:2d:c7:91:71:62:
9e:05:77:71:d7:a9:24:29:8a:d5:e9:58:55:a3:06:
f2:c4:0f:41:8f:a8:61:75:0f:39:9a:12:45:e2:35:
d9:67:6d:6f:af:ab:9b:5f:fa:36:74:41:1c:44:99:
4c:47:57:f9:71:ab:fc:7d:99:c7:9a:fd:91:c3:a5:
f9:d8:82:5c:08:94:e1:92:a4:81:ac:b5:6a:72:90:
dc:46:34:59:2e:b4:e3:de:b8:0a:92:80:f4:96:64:
68:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EB:29:05:E0:D9:42:6A:B1:5D:6C:6C:9A:90:7D:1F:7A:22:16:BD
X509v3 Authority Key Identifier:
keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c0:63:43:fb:f0:4f:cf:d7:01:2e:f5:36:f6:d9:c6:ad:a8:
6b:21:e2:c0:77:9a:97:03:ad:80:f5:b8:9f:68:b7:f7:20:33:
da:de:d2:2e:4e:2c:6d:38:2c:3a:ba:87:66:25:38:e1:bb:d7:
b9:3e:e7:34:06:53:14:41:e9:35:9d:46:0e:b2:75:97:fd:ae:
24:7b:92:f3:93:e8:50:c6:46:62:0a:1d:52:d3:54:07:bf:56:
1e:0a:2f:e3:92:c4:22:99:e0:78:13:e1:a2:44:ab:15:c6:6b:
5e:a9:0b:37:8a:d6:fb:b0:c6:a3:00:a6:d4:ef:9d:7c:73:56:
72:d8:89:8b:0c:e2:1d:2c:22:49:e3:31:76:53:2d:59:4f:ed:
67:6d:20:bd:d1:64:57:d8:93:04:39:ed:bf:3c:6a:78:31:e9:
a2:09:d9:33:1c:66:13:a8:39:e8:e5:a4:22:db:f9:91:5b:d7:
f5:c8:75:98:c3:39:a1:40:dc:5c:bd:f2:fa:17:c5:3a:27:77:
7e:de:7e:f2:4a:e5:42:9d:a1:0f:3d:69:d0:4e:01:30:e7:92:
f0:4c:3a:a0:44:4a:cd:f5:68:d7:6c:db:3a:10:3f:60:71:76:
71:75:5b:5f:c9:d1:58:b6:c9:94:77:4b:4e:d2:e3:9f:e0:a3:
6e:d6:f3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:55 2025 by rpki-client