Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
File: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft (raw, json)
Hash identifier: E6lc6frWQNuTS5xJgyNwvMI2Uwdstxzld5TOBr9XnCc=
Subject key identifier: 72:52:E9:F2:D5:C5:4F:35:C8:2F:5A:59:5F:FF:B1:B8:3B:25:4E:99
Authority key identifier: FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
Certificate issuer: /CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Certificate serial: 0197B6A229CD0A9DAEC36F408BD7B48300DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
Manifest number: 6A
Signing time: Sat 28 Jun 2025 13:02:50 +0000
Manifest this update: Sat 28 Jun 2025 13:02:50 +0000
Manifest next update: Sun 29 Jun 2025 13:02:50 +0000
Files and hashes: 1: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl (hash: hLrKAVQ647blxIxg+1PJvKcs2W/og0043nQvayrE7NU=)
2: aw0urpJM4p93PhWqM7da0_3Fozc.roa (hash: y+1M15neToXwBCTOLJI0dSNYHmOEXNHkxHoQ5Af6Zqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:29:cd:0a:9d:ae:c3:6f:40:8b:d7:b4:83:00:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Validity
Not Before: Jun 28 13:02:50 2025 GMT
Not After : Jun 29 13:02:50 2025 GMT
Subject: CN=7252e9f2d5c54f35c82f5a595fffb1b83b254e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f1:c6:15:6b:6e:49:af:1d:0c:e6:20:61:27:
d1:40:36:e8:07:d4:f2:65:74:e9:7c:d2:cb:26:d9:
79:39:53:bc:43:39:bc:79:c6:a3:15:0d:c4:d3:5d:
2a:d7:f4:73:b7:d2:51:e7:46:32:47:20:77:3d:1a:
e2:31:92:5b:fd:04:4f:f7:49:29:69:4f:18:2e:ce:
ba:58:12:f4:f7:91:75:e3:a1:42:68:0a:09:e5:94:
64:6e:1d:e9:85:80:2a:62:69:ca:18:ad:a8:18:98:
71:d1:11:f6:0e:2b:b8:f2:ed:12:17:3b:1a:ba:6c:
57:ac:b3:ba:11:5b:93:80:d3:ab:90:ff:f9:7c:f8:
8d:40:f2:ee:64:90:7a:a8:c6:99:98:d2:03:2d:51:
3d:83:ac:da:76:e6:91:5a:fa:1c:ad:20:ec:c0:7a:
ae:92:34:45:d3:b2:60:0d:31:12:e3:92:a6:c6:58:
eb:33:c1:95:63:75:90:c5:25:60:51:94:e6:2f:12:
47:d9:3b:64:96:6a:b8:a3:b9:6a:ca:84:fd:2e:fe:
52:8b:16:68:50:2b:c1:a1:6a:f1:ec:e3:05:51:b3:
d9:9e:1c:a6:a1:73:8e:77:8a:5b:17:c6:13:c9:07:
c7:69:c0:32:8f:e9:2d:2a:c1:b3:c4:eb:41:05:4a:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:52:E9:F2:D5:C5:4F:35:C8:2F:5A:59:5F:FF:B1:B8:3B:25:4E:99
X509v3 Authority Key Identifier:
keyid:FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:fa:79:71:a0:a5:7f:c7:2e:42:d5:d6:c9:fd:02:e3:67:2a:
29:b1:a2:de:14:21:12:d3:be:3d:27:81:6c:16:c6:84:79:ea:
a3:14:e8:a0:b6:c3:62:74:40:f4:34:cf:02:e7:0c:bd:7b:ce:
58:30:b8:f0:00:0b:03:22:b3:02:24:23:b8:60:1a:e9:c5:e9:
27:c7:25:fd:ff:80:da:6a:f1:1f:cc:ce:aa:0c:e6:cd:d2:0d:
34:6e:1c:c2:1d:15:d3:a9:c0:2b:5f:72:18:95:e8:5c:90:e5:
ee:56:6e:59:8d:15:4e:0e:2f:aa:bd:5b:69:79:f1:a1:8a:8c:
a7:07:4c:58:07:b8:e3:5f:4a:e9:78:0e:b8:e1:21:5c:96:1a:
75:02:1b:75:af:03:a7:d7:c7:7b:07:66:9d:b8:51:2b:a7:09:
38:cb:dd:1b:c1:77:d9:65:b3:5e:1d:bc:53:f1:91:38:c6:91:
03:1e:61:da:db:f3:fc:f7:77:3a:82:0c:df:0d:f6:80:cc:c2:
aa:30:f2:9a:73:a2:34:b4:70:70:1b:f4:9c:5f:31:4e:e0:e2:
e7:18:64:00:e2:a2:9e:0a:4e:58:1c:07:d8:d4:d5:ea:0f:f2:
86:a8:7f:93:a7:28:ec:da:12:9a:61:d8:ac:0f:1b:2a:cc:5b:
5d:04:0a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:34 2025 by rpki-client