Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
File: 1-d-A98aS6G081rdV0Gz3zpwTf_I.mft (raw, json)
Hash identifier: GP5vTYAhft6lzq60h1EsdmwjdgKFHLCXFH/6E67iu4g=
Subject key identifier: D6:00:41:A7:44:61:3D:30:54:AE:D1:D1:31:C3:19:B7:E4:E2:35:BD
Authority key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
Certificate issuer: /CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Certificate serial: 0197B6A1C0429A102757C4CC8828BE537218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:23 +0000
Manifest this update: Sat 28 Jun 2025 13:02:23 +0000
Manifest next update: Sun 29 Jun 2025 13:02:23 +0000
Files and hashes: 1: 1-d-A98aS6G081rdV0Gz3zpwTf_I.crl (hash: TJFJuma384LTs+shJZ1VuPhWdj1EuJGbEUs4rZjbrlE=)
2: GM9qrO2uL8x1ZY0DdW6CbnXZWBw.roa (hash: +PS0Zeo/h7j5Rz8hACgz8q1qwFa7bESNHkPZUu+sEMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c0:42:9a:10:27:57:c4:cc:88:28:be:53:72:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Validity
Not Before: Jun 28 13:02:23 2025 GMT
Not After : Jun 29 13:02:23 2025 GMT
Subject: CN=d60041a744613d3054aed1d131c319b7e4e235bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:05:44:64:c9:7b:77:59:ac:95:2b:8e:0c:
e7:1a:ec:72:13:4a:6d:ce:6f:85:7d:7d:77:5e:12:
bf:01:55:1c:01:5a:6d:1a:83:cf:54:ef:fb:7f:95:
01:ac:e8:4d:01:bc:3c:4e:b0:7b:9d:8a:9f:dc:0b:
8d:93:5b:95:da:54:d3:40:86:88:c9:12:9a:f9:8d:
ca:b9:c2:2c:5c:7e:71:2a:9e:b0:3c:97:87:a7:2c:
6e:a2:56:d5:72:f1:6a:71:97:89:07:44:b7:8f:6f:
d7:5b:c3:7e:c3:13:0c:ba:b1:57:bb:7c:68:ba:81:
35:0d:03:02:cc:bb:b7:a0:63:06:7c:ec:1c:c9:c2:
59:bf:47:c8:a0:ea:54:b6:aa:02:ed:6b:ff:7a:77:
d6:ae:50:75:70:a3:67:50:af:fc:bc:b8:15:be:f7:
c8:d3:2b:2b:33:aa:b7:03:eb:b5:b9:61:a8:ed:b2:
4a:2b:a0:70:69:53:09:03:34:68:8a:f0:df:8b:ac:
ac:3f:ca:9a:bb:06:5b:d4:b5:03:ae:40:fa:06:bd:
c5:ad:03:e3:31:22:3b:20:ad:21:0f:ff:15:59:07:
a5:01:41:30:56:37:2a:0e:42:4d:ea:35:c4:21:96:
9d:0f:53:d0:ee:1b:05:9f:b6:94:06:b2:0d:06:9f:
dd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:00:41:A7:44:61:3D:30:54:AE:D1:D1:31:C3:19:B7:E4:E2:35:BD
X509v3 Authority Key Identifier:
keyid:F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:54:fa:31:64:bf:f0:dd:35:7e:39:e5:b4:37:e6:bb:c7:fe:
ba:77:28:ef:d8:fa:f8:f8:46:ce:39:1c:a6:ac:ba:73:cc:2f:
7f:ab:45:04:9a:db:04:1f:12:e9:e6:fb:54:00:ab:95:46:7e:
f5:06:89:50:50:9d:dc:5d:5d:ec:bb:8f:08:9f:d7:f3:ef:e8:
33:21:70:18:95:73:a1:65:1c:cc:b0:ae:8a:aa:9b:15:c4:50:
6a:ea:c0:ea:70:a8:db:27:5f:a7:38:d1:65:23:f9:65:81:f2:
05:84:d7:2d:5e:a2:ce:11:56:7b:d9:39:40:b2:6a:4f:dd:4f:
ef:6e:e1:3d:f8:e7:06:45:0c:ef:b0:79:72:5f:d7:c2:d3:f4:
bf:8c:ce:74:af:05:3b:3c:4d:dd:2f:ab:e0:22:ac:98:92:83:
0b:f8:f9:0f:12:3a:89:3a:8f:4c:70:1e:0f:42:90:e1:7f:56:
69:5f:82:fb:ac:2a:c0:0e:53:c1:17:bc:d9:11:2b:17:e0:4a:
3d:27:42:74:db:9e:27:fd:ae:81:1f:13:06:b9:cb:da:10:e9:
95:c8:c0:82:68:fe:cf:33:65:4f:a6:d3:90:c5:37:2b:d0:9b:
d1:35:b5:2e:16:04:55:04:e7:b7:27:85:5d:86:d8:b9:c6:fa:
d9:fc:46:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:17:17 2025 by rpki-client