Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
File: 1-zZG-6aQRe3l745cOaL8F_nw0tw.mft (raw, json)
Hash identifier: PQ9s9eLJmDC4dZutwfi9F3MyqvedIxmqfxTM36MnTqo=
Subject key identifier: AB:CE:4A:DF:55:A0:0B:25:B2:55:1F:11:D0:A6:54:CB:DD:1B:5B:23
Authority key identifier: FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
Certificate issuer: /CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Certificate serial: 0197B820EDCD6FB4F9A963FD9934FC3E4135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
Manifest number: 0CAC
Signing time: Sat 28 Jun 2025 20:00:54 +0000
Manifest this update: Sat 28 Jun 2025 20:00:54 +0000
Manifest next update: Sun 29 Jun 2025 20:00:54 +0000
Files and hashes: 1: 1-zZG-6aQRe3l745cOaL8F_nw0tw.crl (hash: RFMRN3FBrhDG2A3+jGD2Wp5e8xmT0OGGKs3wVKukPF0=)
2: FLK4BXajTTtzozg6zwS2W0dW8TU.roa (hash: TZ26mwHHQp1z9Q90vDXRes8PV7AQXwe9m95HyPKhgHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:ed:cd:6f:b4:f9:a9:63:fd:99:34:fc:3e:41:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Validity
Not Before: Jun 28 20:00:54 2025 GMT
Not After : Jun 29 20:00:54 2025 GMT
Subject: CN=abce4adf55a00b25b2551f11d0a654cbdd1b5b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:ed:63:3e:fe:f9:f1:ca:aa:e0:26:09:fc:
08:16:7a:bb:f4:43:1e:c8:a3:e1:7c:6f:5d:44:7c:
01:b0:54:6c:3d:35:e6:b3:c5:5b:75:6f:e9:c9:58:
93:77:1b:55:6e:89:cc:af:5a:26:94:7d:87:45:b8:
c3:be:0e:9f:51:32:93:b1:be:fb:1c:d0:33:ba:e7:
40:a0:ef:29:99:19:ee:99:bb:79:2e:eb:19:00:38:
6d:a7:48:04:94:e1:bc:71:de:bd:8d:52:27:ad:06:
17:92:12:8a:1e:3f:ce:ed:d7:99:b6:b6:84:69:af:
4d:85:40:58:76:62:6c:ac:7f:d6:a6:49:87:39:96:
ce:48:12:4c:ca:5c:c6:5d:0c:28:ba:b1:98:86:aa:
a3:b6:53:f8:58:9a:c7:ad:f8:88:f3:1f:5e:11:39:
99:92:93:fa:b8:6d:b1:ce:8b:1b:28:7b:74:e0:48:
4a:91:37:f4:45:f9:e7:81:52:b6:d7:23:09:77:3e:
e0:76:e3:3d:46:e7:c7:fe:76:29:ce:73:8d:f7:04:
cd:c5:f0:4f:eb:ca:86:fd:e3:38:54:0f:cf:6c:57:
40:88:6a:14:14:ba:d2:e3:49:3d:67:d2:b5:5f:ca:
7c:d6:36:01:0c:b3:dc:74:a1:05:65:c3:a7:e1:90:
03:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CE:4A:DF:55:A0:0B:25:B2:55:1F:11:D0:A6:54:CB:DD:1B:5B:23
X509v3 Authority Key Identifier:
keyid:FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2d:b8:c5:5e:80:8e:28:fa:ff:ef:e5:c7:35:16:df:b3:00:
b5:bb:e6:c6:ee:3a:5e:d7:e1:e7:86:a9:2c:de:03:a2:a2:e0:
7b:d9:d5:34:5a:62:5f:9f:fc:b3:0b:09:10:7e:d0:86:c5:f2:
2e:f0:73:da:77:26:01:c6:f8:b1:72:c8:6e:e9:33:4e:d0:f9:
cb:1b:11:42:4e:e0:c8:ff:0d:cc:3f:d4:34:64:b7:1c:e0:38:
44:0b:bb:7f:62:35:e2:e5:9e:1b:ac:f4:c3:fc:eb:da:45:26:
45:57:bd:ea:72:ce:db:9b:c2:b8:ec:56:0d:cc:a9:04:1e:c5:
a3:6d:76:a6:91:9a:7c:9e:42:78:6f:f9:b0:5e:fe:6d:74:a9:
73:a3:89:54:0f:ed:cf:9f:70:f9:a3:4a:6d:6e:98:35:1f:28:
5b:90:5e:da:2c:c4:0a:bd:b7:c2:92:47:5d:90:d9:b7:ce:23:
c0:ea:0e:79:32:a4:66:60:a3:dd:cf:30:da:f0:80:92:b8:6a:
d3:73:79:17:5e:14:85:5a:46:d0:4d:be:2b:9d:d6:fd:b0:47:
36:16:2c:58:ed:37:f6:e3:cc:8b:41:8b:74:ea:6d:ec:99:34:
0d:d9:c7:03:24:4d:5a:f0:ad:d8:f2:11:0e:30:01:8a:fa:8b:
24:38:ac:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:25 2025 by rpki-client