Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
File: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft (raw, json)
Hash identifier: BKBSwA6pkgaR4aXbeD+XjVboLPDMjSizibTQ7JMeor0=
Subject key identifier: E0:E9:60:C6:51:6E:9D:FD:FA:7B:79:B6:27:E2:92:ED:06:A3:4F:57
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial: 0197B70F046BCF3F260818912B0F75FF6B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
Manifest number: 03A3
Signing time: Sat 28 Jun 2025 15:01:44 +0000
Manifest this update: Sat 28 Jun 2025 15:01:44 +0000
Manifest next update: Sun 29 Jun 2025 15:01:44 +0000
Files and hashes: 1: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl (hash: BKlgiuUD5cLrjHDFNpbvkG/ApZ1o3Itu+qvXQq39vGw=)
2: OWBphSnGzM3NfjUoWcPjDVRSYgc.roa (hash: Z7ei4v1I8GPTdYYpZ1qHi9JiBDA34PMAtoRsAnkH2B0=)
3: mcI_iz_jLMF0m2ytiShNIW2Y0XI.roa (hash: MlJtJ+9IYVgqHxEydx7ywPk31bzQHuAZBNNJFqPMbXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:04:6b:cf:3f:26:08:18:91:2b:0f:75:ff:6b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
Validity
Not Before: Jun 28 15:01:44 2025 GMT
Not After : Jun 29 15:01:44 2025 GMT
Subject: CN=e0e960c6516e9dfdfa7b79b627e292ed06a34f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ae:9b:1c:76:3f:53:3b:d9:b5:89:79:96:e5:
f8:7a:09:da:16:af:b1:b1:19:bc:3d:a4:23:4f:25:
5c:7d:c9:10:34:a4:80:f2:f2:0c:05:d6:f6:f7:4d:
53:0b:b3:42:2d:89:5e:d6:2d:ef:9e:14:ef:9b:f8:
fd:06:92:a8:69:61:85:0a:56:9c:6a:d9:1d:72:95:
1f:a7:01:15:c1:14:c7:54:c3:ef:52:3c:86:02:13:
07:0b:27:f0:3c:79:55:4e:82:0f:d5:30:dd:63:6a:
69:27:68:30:fc:eb:e3:57:b4:a5:dd:41:1d:35:28:
37:91:da:e9:ab:c9:81:30:56:60:1f:97:b4:9a:57:
0e:7d:0a:c7:00:aa:29:df:60:1f:5e:0e:bf:49:da:
d5:35:bd:6d:06:77:9e:f2:ae:98:03:b5:85:ac:cb:
bf:5d:f1:a1:30:a8:2c:37:b1:93:78:fa:be:80:d4:
d4:57:f6:d6:1b:8f:ff:74:ff:9b:6f:3f:a6:4d:80:
43:b1:47:34:0f:91:a7:e9:84:cc:e9:90:84:a0:57:
11:17:ce:a8:e7:59:1f:0a:0a:33:d5:74:3b:27:78:
82:24:cb:8a:ca:5b:8d:8e:55:07:89:1c:0e:dd:ec:
42:ab:67:e7:36:28:7d:18:89:02:5b:6e:1b:bf:cf:
6d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E9:60:C6:51:6E:9D:FD:FA:7B:79:B6:27:E2:92:ED:06:A3:4F:57
X509v3 Authority Key Identifier:
keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:29:56:4f:74:b6:9b:db:78:cc:b4:28:21:81:d9:66:af:37:
14:2c:4b:5f:fe:90:1a:ff:25:ae:83:17:05:de:e5:fa:a3:b4:
86:a8:1a:14:e7:ea:9b:b5:95:ff:ae:16:df:7a:9c:22:37:2e:
93:4d:ad:2f:c9:3a:f6:54:84:ea:0e:df:d4:b9:e2:20:9c:eb:
37:88:80:15:66:e9:2e:27:1c:f3:14:14:d0:7a:11:f8:1e:44:
df:b4:41:61:b1:4b:28:75:5a:62:85:a0:57:f1:bc:26:8b:8c:
9c:61:13:db:88:65:96:96:4f:18:57:ae:d7:af:a7:47:49:49:
33:55:89:6c:56:28:68:52:72:96:d7:7e:25:80:a1:39:e2:91:
2b:43:33:d6:4d:4a:e9:4f:91:ef:52:56:fe:18:72:11:60:3c:
02:b0:30:63:e7:37:b7:c8:5e:91:80:c6:bf:f4:fd:73:f7:6a:
07:2d:5c:6f:4a:e3:c1:13:8b:8f:f2:b2:bc:ef:86:50:61:a4:
71:d4:2a:9a:1f:d8:44:a1:96:b3:fa:57:5b:f3:b7:64:2d:11:
1e:e5:2c:fc:51:ec:4f:e4:15:8d:ec:1b:cb:3d:c3:a2:c0:c4:
be:ac:da:df:95:65:1e:fd:bf:bf:f6:5b:67:aa:80:bc:12:7d:
a7:63:c4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:43 2025 by rpki-client