Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
File: 1-geuOnkY-TLqJMwVa0tum6VYG_o.mft (raw, json)
Hash identifier: eQsucfBlE5znMxIoGakBB8/prCglNyq0ZRMiGtMHjZk=
Subject key identifier: 54:FA:B6:D7:1E:AB:48:35:ED:14:F2:63:3D:28:5A:38:49:5E:55:78
Authority key identifier: FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
Certificate issuer: /CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Certificate serial: 0197B77CA7B9B4C3BA33CC30822266BCAF7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
Manifest number: 02C3
Signing time: Sat 28 Jun 2025 17:01:29 +0000
Manifest this update: Sat 28 Jun 2025 17:01:29 +0000
Manifest next update: Sun 29 Jun 2025 17:01:29 +0000
Files and hashes: 1: 1-geuOnkY-TLqJMwVa0tum6VYG_o.crl (hash: yNYIxyp6+peMvxjWsUxnYLrydbztmwqEH87FTFEJ/Y0=)
2: rs3gWt450Dc5VAdX-LPh4FxzPfI.roa (hash: yHX556DQVgZDjr2xTPApsPlrmF99zYD+miBAgNn4a5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a7:b9:b4:c3:ba:33:cc:30:82:22:66:bc:af:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Validity
Not Before: Jun 28 17:01:29 2025 GMT
Not After : Jun 29 17:01:29 2025 GMT
Subject: CN=54fab6d71eab4835ed14f2633d285a38495e5578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d8:f3:06:78:47:a4:b6:62:f3:59:6a:3f:14:
29:9c:42:7a:28:79:a7:e0:43:c1:f0:be:2c:1d:ed:
d2:e6:9c:19:56:ba:74:4e:05:d4:8a:fb:c1:ed:5c:
66:51:4a:68:98:31:f7:a9:e4:09:07:5b:a4:9e:c4:
b2:98:c7:a5:c8:69:90:41:1c:4e:58:17:5a:7c:42:
a8:e0:97:35:93:c9:58:36:a8:97:b7:2c:06:83:f7:
24:62:eb:94:c5:c5:ef:42:b1:0f:c1:4d:d8:94:7d:
d3:2d:cd:67:b2:47:ee:b9:c3:8e:de:03:82:67:ae:
45:a7:09:88:52:df:cb:f9:c8:be:04:1d:bb:c2:db:
f7:47:e1:4a:3e:72:4a:f5:16:7c:30:75:cb:26:77:
87:b9:f6:d9:d4:70:a2:b3:b7:99:0f:39:08:41:ae:
63:4d:b2:66:90:ad:60:ed:e9:22:66:12:cf:99:87:
f0:14:78:77:8b:c9:79:09:bd:cb:8a:d6:56:5e:48:
c6:e3:6d:e6:ee:92:c3:75:83:63:21:9c:e2:cc:0f:
31:25:cd:66:bd:8b:d3:0c:3f:1b:d8:98:49:54:7b:
03:e8:7a:41:a4:7e:d2:54:9c:bf:21:b3:0e:d5:9e:
56:6b:6f:99:71:0f:a5:b7:10:5f:82:bf:5f:c2:8c:
c3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FA:B6:D7:1E:AB:48:35:ED:14:F2:63:3D:28:5A:38:49:5E:55:78
X509v3 Authority Key Identifier:
keyid:FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d5:6f:1f:5b:e8:81:9d:60:71:b7:15:87:ac:4f:e1:8a:79:
07:67:7b:93:e7:ee:ca:81:7d:00:1f:65:0c:f3:61:22:67:06:
51:20:90:2a:3d:b3:25:2b:10:99:75:53:03:e1:a8:ae:e7:97:
03:23:e7:3e:9e:51:d0:1f:73:78:a2:53:bc:13:0d:56:9f:cb:
a8:46:2f:f2:ed:49:7c:59:6a:31:3e:cf:8d:68:6e:d6:dc:9e:
7d:8d:08:51:44:bd:fd:ed:00:ad:d9:1f:f9:ef:98:08:95:53:
38:f8:29:6d:1b:8b:e4:26:3b:2c:08:03:2b:01:16:99:06:b8:
c4:19:b5:07:0f:13:3c:70:8a:30:2a:1a:4e:ce:85:f5:25:67:
9c:2f:41:79:70:a0:52:8d:24:86:18:7c:c5:49:cd:1b:8e:50:
c0:4e:8d:60:07:f8:16:f9:85:45:4f:f8:44:0a:56:8d:71:fa:
ea:55:5d:5c:12:fb:e6:48:5f:80:96:87:b5:9a:43:5d:ea:c4:
63:39:2d:17:03:62:a7:83:53:f6:00:41:93:53:9a:de:40:7c:
62:06:e6:6a:65:5d:ad:18:28:3c:52:01:de:ff:85:83:05:9c:
6a:19:2f:53:41:68:f8:bc:7f:70:9e:e3:78:fc:2f:37:f0:fe:
84:f2:72:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:27 2025 by rpki-client