Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
File: 1e5A9FidahGyT3u8wpq5-a5olxk.mft (raw, json)
Hash identifier: 8xMH7ktuewkOu4S9FXWYjVhlvWiwNUaGSLr5Y4x1fno=
Subject key identifier: A8:B6:7A:B4:69:26:F5:08:BD:57:4D:86:6C:21:15:3C:4F:33:46:46
Authority key identifier: D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
Certificate issuer: /CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Certificate serial: 0197B88F91356869A178698ACA17F9C0B4CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
Manifest number: 09E2
Signing time: Sat 28 Jun 2025 22:01:45 +0000
Manifest this update: Sat 28 Jun 2025 22:01:45 +0000
Manifest next update: Sun 29 Jun 2025 22:01:45 +0000
Files and hashes: 1: 1e5A9FidahGyT3u8wpq5-a5olxk.crl (hash: JRF2wv2prna040ogYr35zL1u2jiykcr8dL/G0XvVzIc=)
2: XjL_VzQpHSFAWpxr8LGCRwpbqdA.roa (hash: Brx7GKcJBpG7UwHG4ArWnTWvC9k75AexdudLOh9h/Pw=)
3: _iMkYM2SlDhb8BiWpSMXooueyD8.roa (hash: S5QL6kGITU62oZ1okwVbSjZ25wXtKrDyDz3OlnPy3eo=)
4: r8lD_AoxI_vqECkRvj5MGM36UnA.roa (hash: 3Vhj0OvbLDXudkl6wnwYXZg0rj1sNr06FqG4dJbW2C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:91:35:68:69:a1:78:69:8a:ca:17:f9:c0:b4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Validity
Not Before: Jun 28 22:01:45 2025 GMT
Not After : Jun 29 22:01:45 2025 GMT
Subject: CN=a8b67ab46926f508bd574d866c21153c4f334646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:48:b5:bb:07:02:9b:bf:bc:64:ed:93:14:
df:c8:df:84:ae:2d:25:c5:09:51:3d:d3:20:e6:e8:
ad:fd:9e:2b:1e:fd:30:8a:59:85:13:dd:5d:3d:da:
8d:80:9f:49:e5:a3:77:fb:0c:c0:0a:ee:74:d8:68:
81:b0:c0:87:86:57:2c:07:f7:66:0c:35:46:1a:df:
85:a2:a2:2b:f8:a6:97:d8:8f:20:c8:cc:63:a6:01:
af:0e:c6:17:89:79:50:e1:98:fd:40:8d:c2:8e:49:
d9:2b:8b:61:59:8d:75:dd:79:73:c1:bc:a7:c4:d5:
6f:43:38:60:65:08:10:fc:af:ea:f3:56:52:fb:35:
65:9b:bb:70:64:7f:d5:1d:a8:d6:30:28:fd:42:36:
83:59:52:cb:f2:e2:6c:43:4b:fc:41:5a:e3:f7:29:
58:7b:76:cf:1f:fa:1a:e8:0b:34:95:b2:10:e0:2a:
a7:b1:0b:46:5d:91:92:fe:8c:77:38:1a:63:d6:7a:
8c:0f:48:5f:84:6e:5f:a6:a3:be:72:6a:c4:c9:d7:
6b:7b:8a:0e:9b:28:4a:96:08:82:30:e2:24:ac:e9:
61:d4:0a:85:85:32:5e:ad:42:78:53:11:da:09:50:
99:55:55:70:f3:f7:eb:96:6f:fd:e7:56:00:4a:cf:
cc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B6:7A:B4:69:26:F5:08:BD:57:4D:86:6C:21:15:3C:4F:33:46:46
X509v3 Authority Key Identifier:
keyid:D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:74:df:20:23:a0:01:2e:66:42:ac:95:c8:ec:1a:a4:94:51:
49:ab:de:61:04:de:73:dd:eb:64:75:e4:6f:d9:c8:67:94:44:
0f:cf:e1:25:ab:4d:8c:5d:4d:21:61:d9:f7:28:5f:12:d6:87:
52:8b:fd:44:8b:1c:98:a2:35:e8:5c:b8:ef:c9:6a:5f:d0:5d:
91:18:8e:96:15:9c:2b:68:a6:1f:5e:65:66:c2:0b:99:64:fa:
36:f6:ee:d4:40:c8:46:ee:3f:19:9b:26:96:27:9d:9c:eb:98:
b2:31:82:8f:af:2f:32:1a:57:59:9f:51:e5:f5:1a:5f:1f:0b:
9d:b9:3c:3b:f5:e9:71:b0:b1:05:00:cc:0d:0b:c2:a4:e7:d5:
da:61:ce:50:6f:18:ea:8c:e6:7a:aa:16:5d:ad:7a:f3:53:6c:
b4:bd:11:b2:a8:f2:9b:22:e3:c3:d4:8f:bf:07:7f:3a:8c:43:
08:03:a8:66:a7:fb:b6:db:20:f9:f5:cc:e6:19:1d:24:5b:82:
85:0a:e3:f7:e8:c7:61:fb:21:87:c0:7a:37:16:49:84:58:12:
38:2c:46:0d:88:de:b4:33:54:f4:1c:ee:79:97:36:48:15:c7:
a7:f4:a6:93:3a:61:3b:13:04:af:36:93:3e:64:69:ec:ca:31:
90:21:c9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:36 2025 by rpki-client