Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
File: 1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json)
Hash identifier: CmJjuttnpzzoJvbjGPt/EnGfisZEAa9cZVBTv1PP41Q=
Subject key identifier: 54:DC:67:B9:EC:AA:4C:19:09:8A:32:F5:52:CD:6C:3E:6E:6B:BA:BF
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 0197B7457552500A67C51FCAD20DBE1FF716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
Manifest number: 10AF
Signing time: Sat 28 Jun 2025 16:01:11 +0000
Manifest this update: Sat 28 Jun 2025 16:01:11 +0000
Manifest next update: Sun 29 Jun 2025 16:01:11 +0000
Files and hashes: 1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: rKAH353vVZnJQpmgq/o5zGfddTAaHJSbIJhUkib7k/w=)
2: m2QQfUK06vFb9PgOjuRKEEy3_-M.roa (hash: r2c9NdRmbfXSJX1yrfGNpKRrDXEdWsNsnb45Hs3S/N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:75:52:50:0a:67:c5:1f:ca:d2:0d:be:1f:f7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Jun 28 16:01:11 2025 GMT
Not After : Jun 29 16:01:11 2025 GMT
Subject: CN=54dc67b9ecaa4c19098a32f552cd6c3e6e6bbabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:69:8c:81:fa:79:61:cf:e1:6a:8a:7f:4a:
eb:c2:bc:9b:bf:fe:e6:63:5a:e9:4f:4f:8f:9b:98:
dd:81:4b:6f:07:b1:65:a7:cb:a9:e0:bc:bc:80:6f:
89:6d:7b:09:40:fb:1d:3e:e9:b7:17:bb:70:cd:1a:
78:fd:24:09:8e:1d:ae:8f:f5:24:d9:bb:ab:25:a3:
30:2a:77:17:35:6f:44:8a:2a:dc:38:1e:c5:7b:de:
69:3e:04:6b:04:b4:2d:60:fe:28:75:db:fb:d7:07:
45:45:b3:e6:54:87:80:06:14:d9:19:be:b7:42:01:
5b:54:95:13:51:cf:b5:d5:1c:92:a9:13:02:b8:0d:
68:5b:7e:7f:c1:08:ae:68:89:f2:68:78:51:52:cf:
47:29:57:49:08:b8:75:d3:2c:6e:4d:39:93:16:24:
a4:6d:b7:bf:09:c4:fa:61:10:d5:a7:bb:7d:3a:fe:
4f:2d:66:01:6e:49:6e:a2:e6:6b:21:c7:a8:fb:4e:
61:85:c8:f3:49:97:07:43:a1:e0:0f:e4:38:a9:85:
7c:fe:86:a9:2a:c3:c4:c5:cf:50:6f:a9:f8:07:48:
bb:17:5f:b1:b0:32:95:eb:92:bc:4c:58:5a:9f:04:
fd:32:23:14:e4:1f:db:a3:d4:0d:ad:ec:ad:1a:29:
e8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DC:67:B9:EC:AA:4C:19:09:8A:32:F5:52:CD:6C:3E:6E:6B:BA:BF
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bf:cf:7e:24:e2:64:00:c9:09:7b:42:e8:2d:b7:e2:1d:df:
cb:ce:00:63:10:56:7d:bb:5d:26:20:72:0c:58:da:0a:bd:44:
7d:54:8c:73:ac:c9:7b:ad:ec:12:a9:95:c5:67:70:75:c7:96:
92:6b:b8:e3:d3:a1:c0:87:9b:60:66:c8:e2:a4:71:9a:17:1c:
ff:b9:07:84:e2:a6:78:74:31:d2:3c:82:bf:c3:67:1d:70:a3:
9e:40:06:ec:7c:3c:72:ec:09:bf:7c:b2:07:01:ed:2c:c5:22:
7e:bd:b1:6a:64:f6:b4:27:58:ed:f8:b7:59:7b:c0:18:56:53:
7d:fb:97:4a:d4:00:cb:b0:c8:91:ce:51:3e:4e:4b:67:57:8a:
d3:72:0b:62:bd:e1:33:c8:2e:72:ca:69:cd:87:4a:97:4b:60:
b6:d1:f6:a8:90:62:6c:93:e1:14:1f:0b:38:12:e2:e4:df:92:
fe:6f:86:c8:ff:2f:31:b3:90:c2:05:34:65:bb:09:6c:07:e3:
83:df:8c:36:2f:7d:39:71:e3:10:b9:e2:cc:ea:bb:c3:1d:06:
b3:de:55:c4:f5:b6:9c:d1:b9:1e:3a:3a:d9:0f:04:67:0b:a8:
37:a1:58:b7:cd:71:7c:2d:cd:3e:dc:fe:67:a2:a8:51:29:5b:
bf:db:8a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:11 2025 by rpki-client