Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
File: 1PkhKd96qnFX4VlzwkdT4RjJBX0.mft (raw, json)
Hash identifier: KxCYSTJ+ySilxyaGYzgvlCxVxdjsNEEyzwe6SX85bK4=
Subject key identifier: 80:05:27:FA:99:29:F8:E1:63:7E:1D:05:0A:AE:B5:90:C2:58:38:C1
Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d
Certificate serial: 0197B70EAEE52B582A5DB60BAAEA318D703D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:22 +0000
Manifest this update: Sat 28 Jun 2025 15:01:22 +0000
Manifest next update: Sun 29 Jun 2025 15:01:22 +0000
Files and hashes: 1: 1PkhKd96qnFX4VlzwkdT4RjJBX0.crl (hash: N6VraxRHrUkUv3XhMthj/DLwv/ND11hx2TLir+lBZ10=)
2: qe7WgTc0pmEzzldB9WeXLDwRwuY.roa (hash: QJYNnjPlPIICfSb9VCBEBsTZ9KLpm8+zxTVc8XyL9RY=)
3: yPpTiNnoGdGVkfC9weXZ8IcYOvo.roa (hash: GPROq8bCcJ/0NryOKaC/XQSUJzGn/7Y4gmLVXUsuJPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ae:e5:2b:58:2a:5d:b6:0b:aa:ea:31:8d:70:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d
Validity
Not Before: Jun 28 15:01:22 2025 GMT
Not After : Jun 29 15:01:22 2025 GMT
Subject: CN=800527fa9929f8e1637e1d050aaeb590c25838c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:f6:02:5b:26:44:6a:ce:74:bf:aa:39:a5:
b9:68:b8:83:7c:8a:0b:09:54:2e:6a:71:8b:dc:8c:
3b:a8:e2:5c:b3:85:e9:95:4c:39:e3:57:5f:3e:03:
9a:50:25:15:38:c5:3d:77:38:45:9c:19:b8:5f:68:
78:e5:fd:30:8b:63:27:14:09:77:fa:9f:28:8c:c5:
5d:00:55:95:ed:5a:ad:cc:bb:c9:e7:03:e8:2c:8c:
7a:4e:97:ad:59:22:e4:d9:0e:e6:63:f5:4b:a4:0e:
29:3e:ab:5f:f3:b8:b5:6c:06:33:56:97:af:8d:67:
32:47:ab:a8:7d:02:66:7d:e5:0a:4b:79:4c:8b:47:
7b:3e:49:9a:96:0f:b3:5b:9a:de:c8:e8:f6:3a:99:
ae:ec:27:16:50:75:7b:6a:6c:97:a9:73:a2:e9:4b:
5b:20:3c:4b:61:74:24:df:4e:42:f5:d4:86:59:c8:
8b:c4:c8:41:f8:dd:d4:a4:43:a7:14:69:66:ed:e2:
84:b1:ef:44:f4:b1:3f:13:12:6c:89:1e:02:77:a4:
7d:86:e3:f1:1f:0c:0f:49:d3:aa:84:ab:c2:5f:d9:
51:ef:d1:47:07:fe:42:53:81:7e:e6:73:89:40:cd:
2e:31:f6:89:be:66:7b:f3:b0:e6:65:ce:eb:60:0a:
d3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:05:27:FA:99:29:F8:E1:63:7E:1D:05:0A:AE:B5:90:C2:58:38:C1
X509v3 Authority Key Identifier:
keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c1:81:48:30:6e:32:9c:e1:85:08:46:73:aa:91:be:ba:9b:
4d:5b:75:32:5a:cd:02:19:a6:ad:6a:14:97:56:d9:d7:f1:77:
f2:fb:02:45:23:75:4f:21:7e:f8:3e:6a:ae:30:5d:2f:da:d9:
73:ce:9a:f2:99:5f:56:32:71:50:68:87:0d:6c:e2:2a:60:6b:
c0:56:d3:20:f8:0c:c7:79:ba:5d:e9:28:91:f2:82:42:96:1d:
a6:20:07:78:99:3b:97:c0:2d:97:30:95:53:21:63:25:df:a9:
5d:c4:80:78:eb:47:8a:a7:12:b8:49:d8:44:78:bc:09:1a:04:
54:ad:46:c2:d7:8b:20:d0:d1:6b:2e:6f:61:c6:0c:f5:a9:65:
4d:8a:09:c7:d6:c3:ef:fe:3f:a8:a5:57:aa:2b:0f:31:41:13:
5d:e3:0e:7f:42:24:bf:23:78:04:a5:16:00:ca:6d:e4:e0:c6:
86:cc:5c:53:fd:3f:73:11:ac:31:31:f1:62:54:05:01:ea:9c:
82:dd:f8:88:c9:39:c2:0c:0b:58:f6:dc:04:a7:c1:2c:d6:66:
cf:26:7c:31:fd:b9:87:23:4a:de:f8:ad:e4:35:3f:7d:9d:4b:
09:bd:30:d9:02:d8:e6:5f:f4:7b:cd:15:ee:b9:02:47:b6:4e:
3b:68:01:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:07 2025 by rpki-client