Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
File: 1sJp-ek7D7i8SxyUerxbIfIfIwU.mft (raw, json)
Hash identifier: KoXeVrUNLcPTRgjIVH2WQYgeEt4jr4cKORp83HtRN0E=
Subject key identifier: C8:E1:EF:5B:B3:B8:32:8A:68:A5:FA:46:F3:72:31:82:70:19:7A:B8
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Certificate issuer: /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial: 0197B7EA663F1BD86E7E62A5B6AFC0D97FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
Manifest number: 04F5
Signing time: Sat 28 Jun 2025 19:01:21 +0000
Manifest this update: Sat 28 Jun 2025 19:01:21 +0000
Manifest next update: Sun 29 Jun 2025 19:01:21 +0000
Files and hashes: 1: 1-4EUUJ60y6tCuL7fMYLuUTMussI.roa (hash: ZCZ3I6CzJy+9WHfI/N/oUofNXCUICsdPSdQOOtiTJMs=)
2: 1sJp-ek7D7i8SxyUerxbIfIfIwU.crl (hash: yq/I0G7poXTukMmIaeRl00cDbxh0ev/i/61jtFKH9AA=)
3: AJ8BcEY-DdXcTmxMdYHCmI3RxoU.roa (hash: 3dzyfVQpkuELs7hezXS9c0EUIsSeRiw+pnrqw/PWP6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:66:3f:1b:d8:6e:7e:62:a5:b6:af:c0:d9:7f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Validity
Not Before: Jun 28 19:01:21 2025 GMT
Not After : Jun 29 19:01:21 2025 GMT
Subject: CN=c8e1ef5bb3b8328a68a5fa46f372318270197ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:c8:81:57:7b:2f:e6:81:9d:6a:45:25:2b:
fa:bc:de:3c:b5:a4:f7:4a:51:61:9f:c9:c7:91:ba:
b8:1b:60:f0:66:95:d2:c3:f0:1e:4c:c3:39:f9:16:
04:34:ff:df:6c:85:e8:31:47:84:be:45:aa:c1:af:
31:f1:0e:32:c8:a4:15:64:52:24:c6:54:ae:9b:ba:
46:34:a2:69:a8:9d:f9:e7:30:d9:ce:84:20:3f:ea:
52:20:37:1d:26:44:5a:84:ed:01:e6:10:45:39:99:
1c:e8:d2:ea:5b:32:fd:d8:9f:42:1b:d3:4e:04:42:
38:e2:14:1a:f6:73:81:d9:d4:42:00:dc:35:6d:22:
92:1c:82:d2:80:90:d8:81:ea:64:d4:44:2c:66:47:
be:3f:c8:ea:18:7d:4b:12:7e:0f:0d:95:c3:24:29:
f2:8a:d8:92:11:e5:3b:e5:00:ff:49:2d:f7:9d:e3:
ec:72:ac:25:56:2c:b3:53:2c:50:e9:13:70:61:36:
a1:c3:f1:96:a7:9b:46:82:08:8a:1f:7d:86:d4:39:
06:ac:b6:d0:34:68:61:a3:bd:e2:a4:20:c1:eb:f0:
7f:76:86:7a:c0:b7:52:3d:c0:de:18:ad:b4:09:37:
ff:1c:bb:9e:15:5a:2c:08:2c:82:9e:fc:4d:64:91:
70:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E1:EF:5B:B3:B8:32:8A:68:A5:FA:46:F3:72:31:82:70:19:7A:B8
X509v3 Authority Key Identifier:
keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6d:f6:be:6f:7e:c8:2d:a7:c1:84:90:f7:1f:22:28:8b:bd:
78:55:fc:ab:1e:0e:a4:33:f7:5b:36:95:80:44:ad:3a:8f:21:
40:b5:97:49:f7:94:31:fa:bd:cb:b1:8d:7a:f3:06:32:f1:63:
a7:9b:f9:44:b1:d1:ce:ba:83:01:ad:0c:f7:d2:e0:22:5a:af:
1d:bc:40:32:fd:2d:79:2d:75:74:05:4d:0f:40:03:ff:db:cc:
27:33:c1:4e:69:ea:e8:3f:19:4c:6f:e5:88:69:19:f7:94:55:
22:0d:05:2a:ee:37:18:b9:6b:15:4d:0c:35:30:f8:76:85:cd:
25:a9:a1:d6:e5:bf:87:0b:5a:a8:59:43:17:06:a8:7c:c2:ee:
8c:e2:34:82:e6:a4:f7:f4:ea:c2:22:fc:9e:71:de:04:97:6e:
1c:9f:5e:60:30:a4:e2:43:27:c7:59:d8:61:e1:c2:63:a6:33:
55:d2:1f:69:05:5f:6b:d4:b9:f0:e8:68:e6:2d:7c:85:15:e4:
27:fb:f7:0a:3d:44:3c:80:19:81:29:77:ec:01:d9:43:46:f3:
ce:e1:7b:18:32:27:c5:b0:7b:5f:b1:2c:f5:f1:51:ed:9d:c5:
7b:59:7f:3c:9b:7f:e0:b9:dc:ee:d7:f3:c2:97:57:53:3c:02:
62:4d:a3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:16 2025 by rpki-client