Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
File: 1-83RF-rHV7b485QoZTrhJQjMaYk.mft (raw, json)
Hash identifier: y//NRCWEhmp6x7CKMhyirF3TA1saTDJogridvpcOoG8=
Subject key identifier: 81:07:68:98:02:EA:FD:D3:F9:67:F4:D0:0E:D4:61:71:0C:A6:12:97
Authority key identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
Certificate issuer: /CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Certificate serial: 0197B6A0651EFC681F31097439F86EADEA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
Manifest number: 13D0
Signing time: Sat 28 Jun 2025 13:00:54 +0000
Manifest this update: Sat 28 Jun 2025 13:00:54 +0000
Manifest next update: Sun 29 Jun 2025 13:00:54 +0000
Files and hashes: 1: 1-83RF-rHV7b485QoZTrhJQjMaYk.crl (hash: 4bW5W+xPm23kXmJgp/HIjE9JaxLbedagMmFrYv3hYXM=)
2: HLsqpW_Z-fbGO_aC3llZw59d0HA.roa (hash: zNqiqKUQYXwQHeg5g/DJfaZuunabikgAw4lZ3lENgDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:65:1e:fc:68:1f:31:09:74:39:f8:6e:ad:ea:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Validity
Not Before: Jun 28 13:00:54 2025 GMT
Not After : Jun 29 13:00:54 2025 GMT
Subject: CN=8107689802eafdd3f967f4d00ed461710ca61297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:eb:99:86:c5:4f:78:c6:5f:8a:d9:fa:24:
b2:c3:6a:28:5c:24:ef:62:64:82:31:22:64:96:f0:
06:71:3d:41:7c:7c:6c:1e:bd:56:2e:2a:e6:73:cf:
98:2a:19:79:19:5d:5d:46:f1:15:86:5e:c7:d9:e2:
ca:0b:16:74:46:fa:d8:e5:85:72:5c:85:44:c9:70:
1a:e7:77:92:ae:1b:11:d7:80:9e:88:76:bb:e7:a0:
25:ad:3e:c3:9c:0c:2e:8f:a3:d3:18:b1:7e:15:ff:
4d:1e:3e:df:6b:e6:67:d2:a9:99:31:b8:1d:aa:1f:
64:4a:81:cb:d5:d8:da:3e:15:96:69:c0:53:24:7f:
2f:06:6a:f0:16:d6:0d:88:87:b8:ce:13:19:63:b4:
94:0b:93:e2:a4:3a:b9:2a:91:dd:72:3a:6e:4f:0a:
d0:82:f8:dc:28:4d:f3:fe:18:37:44:2c:29:ad:eb:
4b:e5:f3:76:93:60:94:f2:8f:ef:74:51:0a:ef:d8:
35:69:07:7b:58:94:5d:0e:40:12:a8:98:f1:17:09:
bc:43:bf:e5:ff:2a:b9:4d:17:24:39:66:e2:fc:8f:
f8:19:15:83:08:cb:9d:92:fc:38:68:31:06:70:81:
a4:fe:ad:27:d2:24:e7:57:64:31:32:e6:f7:22:dc:
c9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:07:68:98:02:EA:FD:D3:F9:67:F4:D0:0E:D4:61:71:0C:A6:12:97
X509v3 Authority Key Identifier:
keyid:FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5e:6b:79:73:f6:50:c3:fe:22:fc:ad:8e:81:0f:dc:6f:22:
c8:38:8b:fb:1c:fc:67:0f:4a:ae:fd:dd:7a:4c:7a:35:fd:56:
5c:16:33:1b:4a:17:46:31:08:c2:7f:c8:79:77:d6:d0:67:c5:
e6:3b:64:da:69:a6:db:6f:6a:c0:51:8f:b2:5b:1f:f2:5c:96:
2e:55:81:7a:e9:23:70:98:7f:58:41:f8:6d:96:ab:d6:d1:92:
e2:ed:94:74:32:63:71:ea:60:2e:be:1a:41:fd:a7:f5:9f:12:
15:fd:3b:d5:e7:dd:ce:86:c5:4e:cc:be:ee:81:3a:64:d7:bb:
62:c4:d2:16:f7:ca:2f:b1:61:1f:80:9f:68:1f:4a:cb:5e:9f:
ea:df:9e:1a:95:d9:f7:f6:9d:e2:55:92:57:1c:78:08:a3:6b:
e1:f1:51:15:39:5e:48:b0:60:c9:d7:91:47:5d:99:9e:e6:85:
ad:fb:3e:b1:4a:d6:5c:34:ab:d5:19:d5:1c:1c:46:f1:56:80:
41:6c:2c:ca:c5:99:a2:22:93:27:62:5d:ee:66:0c:fb:8d:f6:
1c:95:96:16:76:bf:8d:27:8b:45:b1:03:2c:df:89:6a:55:f4:
2c:1d:2d:77:8b:86:fb:94:e3:3b:30:ed:79:32:36:95:60:86:
93:69:1c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:18:40 2025 by rpki-client