
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
File: 1-yNrIT1WST87B35rQfQuTz34zc4.mft (raw, json)
Hash identifier: ffTYDhJFoq0bFyAV9cQ8u7FVLEewnw/cMBgRzFHU3rk=
Subject key identifier: 66:11:74:A8:E1:31:36:19:F2:F5:7B:56:1D:A9:57:2C:02:D5:76:B3
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Certificate issuer: /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial: 0197B70EC93440BAF43EF9D13B549FF4FADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
Manifest number: 1045
Signing time: Sat 28 Jun 2025 15:01:28 +0000
Manifest this update: Sat 28 Jun 2025 15:01:28 +0000
Manifest next update: Sun 29 Jun 2025 15:01:28 +0000
Files and hashes: 1: 1-yNrIT1WST87B35rQfQuTz34zc4.crl (hash: cC+T0N5iK0vQQa5HMYZyHoY1R90NB9QhLwp7dkODVag=)
2: 3wVT7ByFOgSRbNZYozrG_4k5Lf4.roa (hash: nWjMCvThnl/TirQoWGzb1aGz9gls9gsUGL9UH7UK99U=)
3: b4xGcgRXbZTm92PK-63-hJMR7i4.roa (hash: NbuD2qXzwa42L7iqCKP9Yf7x1Mko0nN5lZkpDNpT+YA=)
4: eBGWGs2DIykcACC-Vm8Am4_ZkLo.roa (hash: M61tw2NaptcB9SBNpEgNYdj/+3K2KnHR73k/O/VkAl4=)
5: qX47TfZ7U-VCDd8K_2PnZDbaW7U.roa (hash: AWzPY4ofax8Hh97c3nb596ilyxymid/EIQcHBQfpPr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c9:34:40:ba:f4:3e:f9:d1:3b:54:9f:f4:fa:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Validity
Not Before: Jun 28 15:01:28 2025 GMT
Not After : Jun 29 15:01:28 2025 GMT
Subject: CN=661174a8e1313619f2f57b561da9572c02d576b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fe:00:74:46:52:a8:c6:e0:64:65:16:e7:c1:
ba:18:63:12:76:68:cd:e5:61:93:80:a3:25:bb:b7:
15:34:9a:9d:1e:c9:1b:c6:00:ae:cd:8a:91:62:d0:
6c:3c:32:7e:31:3a:38:ae:59:a4:07:f4:da:52:b7:
b2:e4:23:fa:6c:a2:39:c8:4f:86:fc:1d:78:0d:5c:
1f:33:d9:ba:8f:cf:62:22:d1:e9:20:5e:d0:dd:e3:
3e:b2:1b:8b:a7:4a:59:24:6a:fb:af:32:97:c4:18:
a7:73:7d:4f:7f:f4:90:45:b6:38:02:e6:50:5a:09:
5a:14:0d:6e:1f:2e:be:34:85:8a:fa:3f:21:d8:e8:
5a:d4:e6:48:6e:2f:2d:69:08:0c:9f:9a:d8:b0:9e:
a2:ee:19:02:f6:8b:a0:1a:0c:5b:1d:e9:a9:61:e2:
ca:fc:2c:e9:2c:04:d1:40:84:fe:fa:b7:ad:a0:f5:
b6:7f:49:de:4c:c9:9d:56:91:7a:16:f1:1c:0b:f2:
97:4c:95:50:1f:4f:48:70:1c:e0:fb:73:8f:97:19:
c9:ca:a5:e9:54:ae:47:d0:bc:c2:23:4d:52:be:f8:
b9:8f:ad:72:0f:2b:16:67:bb:ea:33:a3:9e:03:91:
ca:b3:f4:7f:c9:f6:ec:ce:fd:14:b7:f3:2f:64:5b:
11:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:11:74:A8:E1:31:36:19:F2:F5:7B:56:1D:A9:57:2C:02:D5:76:B3
X509v3 Authority Key Identifier:
keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e1:2d:7a:13:f4:52:ec:85:cd:01:19:94:02:32:d7:ed:d6:
58:9d:01:bb:fd:3b:d3:f3:b5:4a:c1:78:04:10:0b:03:c4:8b:
a0:f6:f4:d7:91:ea:08:0b:68:13:9d:61:c4:0b:95:d5:37:42:
62:83:25:33:db:66:a6:f7:21:da:44:87:7c:d0:b2:74:1c:d2:
fa:f3:51:a3:54:3a:52:cf:a3:af:5a:e7:91:42:d6:ce:89:39:
17:58:7b:8d:32:fb:51:a7:b4:f3:d2:c5:ab:4e:d2:f0:c9:bf:
2f:29:92:b8:3a:2a:69:20:78:e5:b7:ea:ea:42:37:18:33:c0:
ae:8b:9f:3d:40:99:ed:99:0d:6f:f8:dd:6c:df:35:70:66:63:
44:fa:9b:ae:e5:f9:01:51:5e:dd:ff:c3:c1:fd:54:3d:f1:2d:
5a:d4:85:c1:d2:4a:56:9a:bb:25:2f:55:dd:0e:0b:89:a7:11:
5c:d9:b5:ef:a5:3e:77:de:3e:b1:b9:15:b6:f7:f5:70:50:b6:
ee:8f:ba:ed:5e:b9:99:99:d7:23:c1:37:38:0c:eb:c6:71:fe:
40:bf:ba:38:71:73:8a:60:62:2e:57:7d:dd:ff:de:05:bc:91:
2f:d0:f1:a0:03:fb:68:42:32:48:b8:ed:49:b6:ae:ff:94:14:
cf:d5:0b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:07 2025 by rpki-client