Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
File: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft (raw, json)
Hash identifier: y5x+0ACNvOU0h061AeeD11yY8F1Nn7qoK3AJRZoails=
Subject key identifier: 9B:37:4B:CD:85:99:05:DE:DE:87:F4:A3:83:98:68:DA:34:BD:18:33
Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
Certificate issuer: /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Certificate serial: 0197B632C46EBD151923E7A32361B56F89B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
Manifest number: 15C1
Signing time: Sat 28 Jun 2025 11:01:09 +0000
Manifest this update: Sat 28 Jun 2025 11:01:09 +0000
Manifest next update: Sun 29 Jun 2025 11:01:09 +0000
Files and hashes: 1: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl (hash: Jpe3dx933MAW5jSozj9z+pQsWHajznfEeN57l+fCEzw=)
2: SRL2XQIBoKefODwi32v5f2eOog8.roa (hash: Dn7L+HcQU8DFcaAaO+5zWbM9Yhm50QvkCe2vCWCUn7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:c4:6e:bd:15:19:23:e7:a3:23:61:b5:6f:89:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Validity
Not Before: Jun 28 11:01:09 2025 GMT
Not After : Jun 29 11:01:09 2025 GMT
Subject: CN=9b374bcd859905dede87f4a3839868da34bd1833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b5:7f:d5:a5:40:a5:ec:96:da:30:ab:14:70:
f4:5e:ba:a7:2e:28:a9:15:73:7f:a9:75:40:73:ef:
3d:11:86:b9:fe:19:f9:31:c0:e5:e5:b4:f6:ed:1e:
dd:0a:c2:e0:68:aa:0e:e1:6f:0c:4c:b2:83:68:64:
5a:44:02:93:60:34:7f:81:b8:99:ef:af:05:2d:fb:
28:f6:39:e9:08:f2:3e:89:0a:a8:52:9f:28:29:f6:
fa:0d:10:4d:40:53:41:1c:3d:0c:87:1e:66:4b:61:
af:df:3e:ff:29:6b:ce:4b:2b:ba:e6:90:09:a4:0f:
eb:ee:f9:35:83:ce:ef:bd:c2:2b:6c:6a:e8:0a:a2:
21:3a:36:d5:a6:a8:cf:b3:80:db:6b:5b:be:79:a2:
51:4f:6a:00:0e:d9:08:93:5e:ed:23:a6:c9:70:82:
3d:aa:e2:ed:07:51:02:9d:4a:25:17:6b:18:70:5a:
08:31:9c:73:32:8b:39:49:40:e5:6c:23:c6:b9:5e:
be:7e:30:9e:3d:94:d6:d7:46:2f:9f:01:38:3e:02:
ac:a4:4c:3c:e1:25:95:96:fe:15:2e:8c:8a:0f:79:
1e:7c:cd:4b:08:d6:3b:11:55:d4:e8:21:8d:72:66:
ce:be:d8:e5:63:87:ec:77:03:be:51:ea:38:99:32:
6e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:37:4B:CD:85:99:05:DE:DE:87:F4:A3:83:98:68:DA:34:BD:18:33
X509v3 Authority Key Identifier:
keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:10:b4:d1:c8:7d:04:5f:f5:c4:78:e6:20:77:ee:7f:c8:ee:
23:22:2a:bc:ee:88:40:d8:a9:7e:bd:21:aa:5b:4b:ff:25:82:
c7:fe:9f:67:d1:e4:9f:4f:41:af:38:f2:1e:68:ab:ef:c4:1b:
40:8c:ff:28:f9:43:a7:8c:13:56:65:07:e1:c2:7b:8e:cd:2d:
62:a1:8c:64:2e:e7:60:9a:eb:29:b0:b5:22:1d:3d:f3:64:02:
1c:1e:39:2e:b3:6c:4d:86:86:f1:23:2f:68:b3:3f:ed:30:86:
ca:51:aa:b7:b0:27:3b:c7:5b:8e:81:51:0f:34:af:11:4d:f8:
7e:8c:cb:18:41:5a:65:9e:37:80:49:34:7e:43:60:23:4c:1d:
bc:8f:52:82:c9:cb:c9:17:25:76:dc:f2:2b:9b:83:df:cc:6b:
c2:c2:e6:20:14:87:7e:95:24:b7:bf:93:a8:90:53:2a:f7:60:
43:5e:14:12:7c:9b:6f:8b:32:de:89:80:38:dc:35:a9:07:24:
a7:02:a2:ef:db:f5:a4:a4:b5:44:58:98:82:fa:a2:ff:22:b9:
a5:a7:b1:a5:04:be:59:1a:89:6c:82:66:28:f2:2e:57:6b:a1:
48:c7:65:04:90:37:8d:3d:d8:46:40:56:cc:bf:98:93:8d:a7:
99:04:5b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:14 2025 by rpki-client