Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json)
Hash identifier: 4KNC+dv8dzVJqiAHnfgx44QhzPmZFQ7iKgkn2rxJlvw=
Subject key identifier: DA:1B:7B:34:88:9F:2E:EE:41:F8:55:3A:2A:B2:AF:B8:8A:22:78:87
Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Certificate serial: 0197B745344EAEEEB62694B35537A8D949CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
Manifest number: 030D
Signing time: Sat 28 Jun 2025 16:00:55 +0000
Manifest this update: Sat 28 Jun 2025 16:00:55 +0000
Manifest next update: Sun 29 Jun 2025 16:00:55 +0000
Files and hashes: 1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: CI3fk2y/HZ7Co71njQ4gp2r3r2byarXlhov9AL297tw=)
2: HexBDB0ALKRx19vAL_olvRM_0pc.roa (hash: ajSzA7jvEEstqpYQIZuBqV7eWXJVONLQH581vvaQYJc=)
3: PrcLqHgKnfIRGf3YM80gSjoYr6I.roa (hash: ZkwH8oTWm6e+gIX3jU/BvkpmjX7EH4UuYT++yIKL1DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:34:4e:ae:ee:b6:26:94:b3:55:37:a8:d9:49:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Validity
Not Before: Jun 28 16:00:55 2025 GMT
Not After : Jun 29 16:00:55 2025 GMT
Subject: CN=da1b7b34889f2eee41f8553a2ab2afb88a227887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8f:ed:fb:6a:3b:36:e1:fb:53:50:93:0b:0f:
17:b7:46:09:fc:a8:4c:83:5f:a1:1f:fc:c3:de:bf:
87:04:9c:3b:ac:ea:31:f9:29:f8:53:c3:63:0d:01:
4d:61:4e:e5:1c:de:5b:e8:ab:e5:62:a4:72:6e:ba:
51:bd:8f:d4:09:20:c0:3d:35:09:db:86:d0:d3:57:
a1:78:64:21:74:40:9a:af:c7:01:2c:c5:31:74:d9:
7c:29:79:cc:cb:a8:19:c0:dd:23:f5:5e:a1:4e:c4:
a5:c7:b3:c0:41:d7:c9:7f:8f:00:81:99:0d:4c:51:
a6:b3:cf:51:ad:df:45:a7:a0:f1:df:2b:ee:72:9c:
99:5b:fd:c2:8e:1f:3b:ed:0b:26:ad:f0:c1:27:27:
45:38:0d:a6:da:d3:a1:2c:ca:2f:23:7f:9b:2c:8e:
29:2a:7e:61:98:b9:cb:8c:91:e9:f7:2d:d4:b0:02:
a5:1c:60:4f:a0:62:b9:3e:f2:0e:d6:31:d4:db:9e:
f9:68:02:eb:06:06:df:db:60:65:2b:f5:06:ab:32:
45:a6:92:68:b8:e2:cf:4d:b4:4e:b0:8b:88:bc:18:
1c:aa:cc:a3:50:ed:43:57:a1:52:f4:c6:11:18:d9:
9b:a1:7b:2d:d2:31:d2:10:8a:4b:a3:7b:50:3c:6a:
5b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1B:7B:34:88:9F:2E:EE:41:F8:55:3A:2A:B2:AF:B8:8A:22:78:87
X509v3 Authority Key Identifier:
keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:1c:79:58:8e:b3:a7:da:35:c9:45:25:33:c8:0f:59:fd:d7:
ea:7f:7a:10:39:a5:70:fc:19:7c:a2:db:0b:ef:92:b6:5b:bc:
ad:27:51:74:6e:3c:fd:33:ea:7e:86:0f:d9:29:5f:9e:7e:63:
54:2b:49:75:01:99:da:73:5a:a6:37:bc:35:4e:5d:1a:31:8f:
49:dc:4a:66:ed:6f:56:eb:08:6c:65:04:02:54:3e:eb:fc:0e:
55:1d:2b:95:1d:df:68:d8:d9:5c:1a:b1:ff:34:6e:b1:52:20:
f0:d5:9f:fc:13:13:7d:ba:5d:dc:8a:9c:d1:f3:46:5f:34:7d:
8a:cd:a3:62:92:a9:83:86:b5:80:8c:dc:f0:1a:6d:39:78:b9:
d4:18:b2:53:3a:67:a2:52:76:a6:cb:90:fd:77:a1:e2:e4:32:
06:46:28:85:5b:97:b3:49:0d:42:b5:e0:cb:bd:a5:da:85:f7:
6b:ba:15:9d:b4:9c:2e:46:50:84:09:52:51:43:a5:fc:36:8d:
0f:ce:1f:06:fc:4d:54:a3:20:8d:b5:cb:48:46:87:10:44:10:
50:18:cf:14:2c:5b:df:7d:91:95:fc:03:b4:28:bc:cd:57:f4:
ba:d3:30:2f:de:f8:10:11:64:32:88:cd:d7:4c:52:81:d6:43:
cf:22:d8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:17 2025 by rpki-client