Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
File: 1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft (raw, json)
Hash identifier: 3udJ8bJ/ivLx9hE3UmRd8S08k1S/SdFy8zD7mpGwLlY=
Subject key identifier: A0:20:12:29:C0:C5:3D:A1:45:C1:E7:B1:85:AA:79:AC:97:21:47:D7
Authority key identifier: D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34
Certificate issuer: /CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
Certificate serial: 0197B821174DF412972719FE8D2D1DE391FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
Manifest number: 0CF0
Signing time: Sat 28 Jun 2025 20:01:05 +0000
Manifest this update: Sat 28 Jun 2025 20:01:05 +0000
Manifest next update: Sun 29 Jun 2025 20:01:05 +0000
Files and hashes: 1: 1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl (hash: t6vl6/2mmJhjoCLJrf7ncyTv4GYrYw0dQ2/ZfrPDAcE=)
2: 8Yr02VXLMmYbsDQBlzbUMjU-_4Y.roa (hash: c2krYBPX6FJP/S5DK6Bqlhz1YaUFixNmTfTx7RgZ1eo=)
3: AKY3-lmq_F-hZTNjYE8VF5Dbfhg.roa (hash: SNTyErzebd/AsxAYfH3hc+mIWE58J4HLCDSVxz7/7nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:17:4d:f4:12:97:27:19:fe:8d:2d:1d:e3:91:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
Validity
Not Before: Jun 28 20:01:05 2025 GMT
Not After : Jun 29 20:01:05 2025 GMT
Subject: CN=a0201229c0c53da145c1e7b185aa79ac972147d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:6f:3e:da:40:71:f0:69:83:40:f7:b8:6f:
1d:d8:41:33:00:d5:58:9a:d3:d5:b6:3d:cb:53:ec:
ad:c0:49:37:70:6b:89:d6:2e:ca:dd:89:d1:64:7b:
70:ed:92:87:be:3b:c5:47:e3:6f:d5:1a:80:a6:ca:
39:82:ec:92:15:05:4f:4e:5e:1a:96:cb:1e:80:b6:
dc:26:ad:6d:bd:ce:59:e4:ce:62:fb:9f:f0:12:9e:
ae:4d:08:e3:f0:6f:58:5c:c8:5e:69:c9:a5:af:c6:
ef:c7:59:57:e9:46:20:2a:a3:ca:28:15:d4:18:25:
3c:2d:93:05:06:43:a7:c6:5f:db:11:12:56:82:e4:
75:22:3b:18:ac:fd:59:31:b1:3b:2b:e5:03:f4:41:
87:16:6f:af:6f:28:05:90:f8:7b:f3:51:20:c9:e0:
c3:e8:b1:71:29:98:76:05:72:4f:f1:9f:42:01:8f:
ee:ac:f4:3d:e0:96:67:4c:e9:4a:16:28:82:bb:4b:
dc:a9:1b:78:91:1e:b5:a2:7c:82:7c:f1:fb:5b:10:
56:8b:e1:e7:5f:86:79:47:8a:5c:5c:92:07:51:ed:
be:f5:26:6b:68:e3:41:1f:77:87:6e:f8:ce:0a:54:
26:25:71:96:da:9a:db:cb:9b:4f:54:2b:f4:ee:4d:
48:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:20:12:29:C0:C5:3D:A1:45:C1:E7:B1:85:AA:79:AC:97:21:47:D7
X509v3 Authority Key Identifier:
keyid:D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b3:8e:20:ec:4b:c7:33:e4:fb:14:96:3e:9e:3b:74:3e:f7:
76:10:b6:22:eb:ce:b4:1c:d6:fc:c5:7d:7c:53:26:1f:a9:b7:
1e:82:cf:83:86:cc:47:18:c1:e9:e9:96:cf:96:ca:86:bb:6b:
cc:47:ba:3b:8f:a4:52:f3:20:ac:43:7a:c7:e3:c2:9c:76:db:
af:fb:52:69:e2:83:16:09:7a:5c:d2:f2:aa:a4:91:74:41:b7:
97:d1:fb:86:f3:53:50:6b:55:9c:66:08:8d:64:71:3c:30:a2:
18:5d:56:26:e7:ef:1f:c9:10:c5:a7:53:8d:2c:8f:01:8b:ec:
8f:70:1b:09:26:e7:71:83:5b:4a:06:55:91:b9:97:e3:73:3a:
38:31:0b:8a:cb:d8:eb:a8:62:0b:b8:36:3a:d2:da:41:77:b2:
77:d0:63:ef:20:e3:16:97:0d:ba:55:98:c9:46:2b:ff:73:18:
1d:f5:09:ef:b8:76:d3:95:fb:6f:21:31:59:91:1c:51:c2:17:
00:24:0f:80:91:9c:de:49:1c:8f:be:ed:bd:c5:6a:46:a4:49:
54:b5:bb:65:56:db:24:f9:5f:78:b3:02:1c:23:3b:6c:f2:ea:
94:77:c8:25:28:22:cf:ae:01:bf:d0:f6:38:70:7f:bb:f7:05:
64:2e:11:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:02 2025 by rpki-client