Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
File: 1-VA8B1ppBVa9RiEiskaZ4baxkng.mft (raw, json)
Hash identifier: Md4olauhRRoeyAcAWzWQpV0DeMUH7fKHH2HM9OB6GJM=
Subject key identifier: E4:4A:C5:C7:37:D5:31:42:69:3D:F9:52:BC:5F:F0:23:6D:94:D8:12
Authority key identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
Certificate issuer: /CN=f9503c075a690556bd462122b24699e1b6b19278
Certificate serial: 0197B6D727C5273DC1E0198299A26FADE84A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
Manifest number: 15BD
Signing time: Sat 28 Jun 2025 14:00:43 +0000
Manifest this update: Sat 28 Jun 2025 14:00:43 +0000
Manifest next update: Sun 29 Jun 2025 14:00:43 +0000
Files and hashes: 1: 1-VA8B1ppBVa9RiEiskaZ4baxkng.crl (hash: XYDQrkyvN/WReRqa4zHBOXQFukbXTfzqh+qSmM51SgE=)
2: p2SVo4qsSiAegswh4Tt4B2CgnX0.roa (hash: ZR7WcDeaKIDHi9EqUsqBzkr/KcnAMrpHKscQ/Pybjlk=)
3: q2ZLX08w7-Dcrgr57h1hgcnfkXY.roa (hash: uFC0sIXPmgIMFYS0E5zDcKQoPca0pnQPm/3b/35uS2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:27:c5:27:3d:c1:e0:19:82:99:a2:6f:ad:e8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9503c075a690556bd462122b24699e1b6b19278
Validity
Not Before: Jun 28 14:00:43 2025 GMT
Not After : Jun 29 14:00:43 2025 GMT
Subject: CN=e44ac5c737d53142693df952bc5ff0236d94d812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:c9:f6:b1:d8:a7:e6:0f:1c:c4:00:94:3d:
37:1b:82:97:70:01:ee:3f:41:8f:a1:03:00:f7:3a:
4e:1b:ad:34:79:ee:89:ae:c0:6f:1c:5e:22:0b:23:
a6:f3:9b:f6:83:7c:16:db:85:36:9b:5f:8a:81:76:
23:19:74:83:e2:79:6f:78:ad:11:09:ef:33:8a:30:
43:ef:81:fb:37:3c:e7:ca:4a:de:7b:b3:92:2d:a9:
a5:8f:fd:54:20:db:c1:87:61:65:30:86:89:40:3a:
ae:84:66:4b:39:41:99:3b:d7:68:fe:9e:21:fa:7d:
e4:22:12:b3:63:93:f6:0e:42:97:39:ec:a5:35:b6:
4a:ed:71:35:de:11:3d:72:22:1a:2a:13:70:7e:bb:
2d:0a:f5:00:66:8c:09:46:67:4e:25:f6:2b:65:f1:
98:f0:a5:89:d1:c0:b8:15:d2:0b:a0:84:bc:27:8d:
7c:38:37:34:58:01:64:67:b8:c7:ab:5c:78:43:30:
47:28:e8:43:a5:8f:60:f1:f1:11:13:c3:e8:8c:e8:
e7:68:d5:5d:3e:d6:ab:a0:cb:07:87:33:e1:0c:d6:
e1:0e:25:20:a1:0b:ec:5c:cb:17:5a:72:94:c0:0e:
88:5b:83:4a:15:21:9d:85:0e:bf:4e:49:a4:a9:8a:
55:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4A:C5:C7:37:D5:31:42:69:3D:F9:52:BC:5F:F0:23:6D:94:D8:12
X509v3 Authority Key Identifier:
keyid:F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ad:52:bf:db:b5:72:11:24:6f:b5:ef:48:2a:85:d2:5a:0c:
97:e5:a8:3d:5d:49:92:72:b8:c3:d6:0f:be:8b:3e:6a:7c:30:
c9:44:9c:20:2b:35:46:67:15:7b:1e:75:67:95:23:fd:38:21:
5d:03:91:5d:e2:8f:4e:e5:4c:56:b4:4a:b4:bb:7e:08:a3:bf:
e0:eb:3a:b8:e6:5e:83:44:fb:55:71:5e:ef:fb:4d:5f:80:bc:
cc:33:8e:4e:e2:49:ff:fd:da:d3:cf:4e:a9:74:52:db:9a:ea:
3b:e1:e7:be:3d:2b:5f:51:72:17:f2:93:a1:61:ec:b4:03:af:
f2:0b:9c:07:22:1e:90:00:f9:a1:b5:6c:31:fc:eb:de:ce:a3:
1b:13:29:9c:c6:0a:77:73:a9:55:e1:ad:54:6e:8e:49:41:39:
68:71:6e:92:b2:bd:db:cd:b1:da:6d:1a:a2:99:a6:18:1b:6c:
f9:53:f1:65:f7:e0:c0:dd:17:df:f9:65:03:16:c3:8b:33:9d:
d6:eb:1a:0c:f4:6f:12:02:c9:ea:26:7d:c4:b1:4b:8b:30:c9:
50:a8:5d:c5:e8:1a:f6:3d:01:e1:ee:1f:85:9d:84:8c:84:ff:
a1:ce:83:ec:66:f4:a4:29:b5:29:ec:26:43:7a:1e:e8:bc:d7:
56:5e:bc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:09 2025 by rpki-client