Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
File: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft (raw, json)
Hash identifier: xH/NdNX66PVhLXEI/9ReLx4DcN2AeMMWMvNH4Pzx6W8=
Subject key identifier: 8D:CD:66:DA:C1:0B:76:44:1D:D0:BD:0B:60:8A:BF:6C:06:DC:94:C0
Authority key identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
Certificate issuer: /CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Certificate serial: 0197B6A1AC41D45A921FAC19F5D79F300183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
Manifest number: 01AA
Signing time: Sat 28 Jun 2025 13:02:18 +0000
Manifest this update: Sat 28 Jun 2025 13:02:18 +0000
Manifest next update: Sun 29 Jun 2025 13:02:18 +0000
Files and hashes: 1: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl (hash: qwZJsC/ig0In8qHnkT/DmOWUzgzrcHypQHfDD+Pepao=)
2: CG9KoNDYQYANjw8jkpEMfgifFYg.roa (hash: a/8GNnkxdjWR/BpDGvDmUNc0bdNHqrlCI9YD9Z7wQW0=)
3: cZUoXKNyODDdYDJJ689IFt9l7Fg.roa (hash: 2dlPle1Oc1/h21vw5YqVsut1uxLZie17Tr86ybW+M80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ac:41:d4:5a:92:1f:ac:19:f5:d7:9f:30:01:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Validity
Not Before: Jun 28 13:02:18 2025 GMT
Not After : Jun 29 13:02:18 2025 GMT
Subject: CN=8dcd66dac10b76441dd0bd0b608abf6c06dc94c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:97:36:7d:ef:aa:99:44:91:04:d4:30:81:38:
c5:f3:a8:36:a6:ca:75:11:6e:dc:29:2e:77:98:f5:
74:ee:a6:0a:08:d8:cf:93:23:ed:d2:8d:e0:d1:24:
04:67:6a:5c:b2:84:3a:5c:99:0f:e6:87:79:74:a6:
6c:8e:c7:67:3b:72:de:66:e9:c3:17:c3:9b:0a:54:
c6:f5:d8:f4:f3:bb:b0:f3:10:88:96:08:11:dc:07:
95:8e:b5:4f:cd:10:b7:08:f4:13:76:c9:7d:29:b0:
88:8d:8a:50:16:0d:02:a5:f7:54:8b:71:be:ea:2a:
4c:8a:23:36:db:a3:ed:b0:0b:fa:73:05:06:4b:e6:
e8:02:3f:5b:19:a8:35:a3:b2:a9:ce:29:81:5f:c6:
09:9a:64:41:2e:b2:4a:d0:a9:81:f6:22:c9:67:39:
a6:6e:07:00:c3:e0:ea:09:40:90:3d:ac:01:b0:e9:
89:1a:af:25:dc:a6:fe:77:98:f8:8a:3d:bb:9b:fc:
f9:dd:b1:93:d4:bf:aa:b3:d4:32:d5:33:a3:bc:81:
2f:16:6d:e8:40:88:60:ec:51:9d:48:6b:82:4a:02:
6d:4d:bc:a5:23:06:0c:a5:b1:84:a9:07:59:e7:ce:
2c:a4:a1:5d:77:39:3a:7e:13:01:a9:2b:f6:e1:4d:
c1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CD:66:DA:C1:0B:76:44:1D:D0:BD:0B:60:8A:BF:6C:06:DC:94:C0
X509v3 Authority Key Identifier:
keyid:D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b2:2f:19:7a:04:6a:bb:4e:b6:2a:eb:48:dd:1d:54:56:c5:
72:2f:44:15:4d:c4:eb:59:16:90:bc:01:7d:94:0a:86:6a:02:
e0:66:76:f2:95:56:9a:b4:28:59:5e:6a:95:44:95:8d:e9:66:
66:d3:a4:f3:86:fb:fc:45:37:3e:0c:41:ca:d7:b1:df:03:ff:
a7:26:a3:3f:af:12:aa:81:b3:0f:eb:09:ed:5c:25:aa:4c:ed:
ae:61:bc:b4:02:1c:fc:5e:4b:be:56:74:23:49:24:03:1d:57:
7a:6b:cb:41:b9:0d:38:56:1e:35:6b:59:9d:85:70:4d:6d:33:
ec:05:b1:11:25:fa:79:83:e0:9e:a7:6f:f2:60:90:aa:dd:3e:
e5:55:66:6d:4f:64:97:b2:96:36:54:fa:63:65:bf:65:db:4a:
dc:7c:74:e5:57:7f:59:b9:0f:8d:a5:6c:c9:f5:c9:5f:fc:01:
13:bf:4b:2d:47:0e:0e:b7:b9:4e:ad:6b:03:0a:a9:f8:96:a5:
a3:58:46:5e:dc:05:f9:24:f7:e8:c4:62:eb:26:a5:9d:0b:7e:
42:4b:57:8f:54:d6:68:b2:c3:3c:dd:7c:25:92:48:7a:e4:44:
c8:30:74:ce:61:9b:bd:4b:7e:e4:14:9a:62:ab:94:d9:c4:44:
33:99:e0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:58 2025 by rpki-client