Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier: 5lZmCJgYUs//Jl8e2EVagD96F9sWih8qWDn7LNGl/ZE=
Subject key identifier: 8D:6B:32:7D:18:6C:1F:C4:E1:77:2E:E1:51:36:5F:D1:B9:8C:8D:D1
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 0197B70E707E813464AB9D4085D3A5E8806F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number: 03FD
Signing time: Sat 28 Jun 2025 15:01:06 +0000
Manifest this update: Sat 28 Jun 2025 15:01:06 +0000
Manifest next update: Sun 29 Jun 2025 15:01:06 +0000
Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: OLUjAlHgSj3lZcs6hzDA9yKai9c1u0vWOytpgeEbio8=)
2: zlH1YpMBnNZnNtFhgB3H0QDkGsY.roa (hash: YxbEBWdcoPz8a52GzX2VTy8310RPqgqc10/H2kW+jig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:70:7e:81:34:64:ab:9d:40:85:d3:a5:e8:80:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: Jun 28 15:01:06 2025 GMT
Not After : Jun 29 15:01:06 2025 GMT
Subject: CN=8d6b327d186c1fc4e1772ee151365fd1b98c8dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:4b:dd:6c:ea:0d:7d:9d:29:9e:45:f6:3b:
a7:fa:bc:ca:6e:83:0e:3c:d0:65:ff:88:47:10:f2:
d1:33:40:38:fa:7d:3d:26:fa:35:65:ad:e3:92:67:
8b:d3:3e:e8:43:67:78:84:66:51:a4:8d:fc:77:75:
af:29:6d:90:65:7c:de:60:2e:20:d2:a5:2f:74:75:
46:cc:f5:b0:48:3d:8d:86:15:7a:a9:5a:0c:ec:23:
79:0e:f0:ce:0c:0c:44:c2:6a:62:6e:cc:00:ec:b7:
4e:c0:98:ce:bd:ba:81:d3:64:15:56:2a:da:c9:24:
03:d1:b7:7c:ee:1b:6b:22:ed:2f:75:4f:b1:d2:97:
fb:83:e7:1c:01:4c:3e:32:f6:e3:e6:ba:1a:fb:20:
08:bc:64:63:41:41:a1:cd:e9:83:6d:c5:6d:15:82:
f5:f3:8a:f6:3b:06:13:e5:84:03:db:e0:e6:e1:81:
de:a7:01:83:36:3b:53:70:40:23:a1:0f:4d:45:cb:
7a:4d:81:92:9b:0c:06:06:f0:2e:5c:0f:c9:20:f2:
a4:3c:27:c4:e2:b5:f2:00:96:7c:4f:3f:2f:4a:4d:
77:21:25:f6:92:b7:28:ef:2d:71:c7:b1:51:87:f2:
b8:79:92:29:a6:b9:e6:7f:3d:00:15:35:40:7a:2b:
8d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6B:32:7D:18:6C:1F:C4:E1:77:2E:E1:51:36:5F:D1:B9:8C:8D:D1
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:36:62:2c:ed:1d:71:56:72:44:ce:c9:c1:6c:3b:ea:74:49:
4b:7b:23:1a:ca:62:10:71:c0:9a:d9:3b:b1:9f:e9:0f:1e:a5:
4a:34:57:1c:b3:68:82:bd:7b:e2:ae:37:98:25:42:19:43:77:
43:6a:7f:cc:5b:9f:81:f0:4e:9d:09:a8:88:9d:25:c9:09:aa:
19:5d:7b:f4:6f:4d:42:e2:6d:18:e1:69:88:1a:f4:53:f4:8d:
d0:1b:c4:e1:3b:92:d3:ba:04:03:6e:6f:c3:7d:ab:c6:9a:c5:
7e:d7:1a:6c:eb:15:20:fb:e7:5b:34:19:0e:80:4e:6d:9e:87:
f0:1c:3c:f7:e2:05:17:1c:88:ba:76:a9:7d:84:83:12:ff:1d:
b4:4f:da:2b:82:05:f8:35:ca:4c:b3:57:d6:4b:60:03:15:51:
34:5a:82:67:97:6a:71:c5:39:d5:b7:19:54:70:84:57:c1:85:
58:02:65:41:83:6a:03:2e:2c:76:d0:f4:e7:30:64:e8:3b:7b:
4d:1a:5a:6e:e6:fb:4b:f5:26:fb:84:53:9f:a5:ec:41:75:4c:
66:c9:08:a7:29:f3:57:84:37:8a:19:ad:41:80:bd:d4:bc:7e:
05:60:d2:1b:91:d8:39:c9:1c:23:52:ca:c3:ef:c1:1c:37:de:
7d:dd:52:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:18 2025 by rpki-client