Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
File: 1fQ0Wir2tUTNG4541z7AK4iVVG0.mft (raw, json)
Hash identifier: PGazVAA69pIN1JYKZ0EfHJzZeoUiSOc9aGc75KhbKuw=
Subject key identifier: CB:B0:22:AB:18:51:B8:21:2A:B3:57:B3:CC:97:BA:9F:6F:44:50:8B
Authority key identifier: D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
Certificate issuer: /CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Certificate serial: 0197B8212FAE3D43E79B19F480938A9DAC72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
Manifest number: 0249
Signing time: Sat 28 Jun 2025 20:01:12 +0000
Manifest this update: Sat 28 Jun 2025 20:01:12 +0000
Manifest next update: Sun 29 Jun 2025 20:01:12 +0000
Files and hashes: 1: 1fQ0Wir2tUTNG4541z7AK4iVVG0.crl (hash: xKelQhpXgxU+n2X/AS5IBNjNhwwV4x59tEWzRTQmjLo=)
2: 3_rjwimXt_D0WovOwZfA5vsj5Yk.roa (hash: 6MzAFEIp9W8TENsOWFtdVkqyFxS1C7g+fYFthRNeyV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:2f:ae:3d:43:e7:9b:19:f4:80:93:8a:9d:ac:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Validity
Not Before: Jun 28 20:01:12 2025 GMT
Not After : Jun 29 20:01:12 2025 GMT
Subject: CN=cbb022ab1851b8212ab357b3cc97ba9f6f44508b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b2:d8:d2:19:69:45:17:6f:99:32:98:c2:af:
7e:c1:0e:4e:f8:be:ea:36:81:6f:25:76:e7:9a:50:
22:3d:a2:13:55:9e:ca:74:ef:fb:12:42:1a:48:7e:
ab:31:f4:44:83:59:c1:b2:72:0b:18:ad:71:60:1c:
52:b6:1f:5e:41:96:a1:d0:7a:53:75:1e:b2:23:b9:
c4:ce:75:08:a6:7d:94:1f:3a:8a:3b:50:9d:5d:0f:
2b:ff:14:f8:8a:cf:df:16:bc:6a:c7:d5:c7:9a:3f:
d5:a9:5a:83:2b:b0:01:af:22:99:38:e3:14:25:df:
0a:49:ca:40:c9:ad:c9:8c:b1:00:97:dd:b9:51:c9:
3e:63:8f:64:29:96:dd:fc:0e:6b:c1:d1:d6:6b:e4:
d4:38:35:09:4d:da:45:b3:e7:a5:f4:9c:e0:02:e1:
c0:7e:18:61:58:76:b9:ce:53:4d:b4:31:05:b1:2a:
5f:62:9e:b8:86:8b:92:ed:71:ca:97:bd:d6:86:50:
b9:c7:9d:41:24:0d:09:f2:1b:64:3e:e7:34:b2:3d:
20:b3:64:8d:d3:76:89:e1:50:d7:08:0c:2a:41:66:
22:af:f9:9b:8d:ee:05:37:86:d4:73:cc:b0:a7:ad:
1d:01:47:a7:7c:ff:84:0b:4c:0c:aa:43:87:a4:9d:
64:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B0:22:AB:18:51:B8:21:2A:B3:57:B3:CC:97:BA:9F:6F:44:50:8B
X509v3 Authority Key Identifier:
keyid:D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:74:87:54:16:b7:d1:b7:e9:69:e3:22:f7:2c:86:c7:09:70:
21:cd:a6:73:de:4f:28:71:25:2e:37:e3:48:67:69:59:11:1a:
7e:17:56:57:54:c6:9e:ef:63:54:27:a8:10:77:12:43:60:36:
10:73:b2:8f:39:65:e4:6f:9e:20:e8:5f:4b:8d:09:8e:18:21:
f7:29:06:80:2b:95:50:98:47:3f:b5:5d:d8:c9:f0:6f:37:ef:
7a:27:d8:94:25:e8:71:77:05:6d:7b:8a:c1:3e:69:93:d8:49:
75:68:1f:fa:28:97:a1:67:22:69:1b:86:b3:39:bb:51:54:1e:
e2:21:8f:13:62:53:7a:c2:13:37:83:ab:a5:50:ce:e4:d0:bd:
b8:38:15:7b:aa:00:2b:c1:5e:8a:10:c0:a7:f8:b4:71:49:88:
bb:60:5e:ef:ce:96:f9:0c:80:58:ab:c1:49:b3:5c:6d:5b:e9:
97:9c:dd:76:ec:ba:0a:f8:2c:1c:6f:44:a0:d6:81:97:8e:2c:
12:ae:b1:18:02:21:8b:f0:ef:0a:42:a3:e4:ee:25:41:75:c5:
c1:84:f0:08:9c:ae:cb:87:d5:36:b8:35:df:bc:e5:07:14:43:
fc:6b:27:b6:20:c3:1f:04:79:77:77:ca:ed:61:4e:c2:e3:e7:
26:15:4c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:35 2025 by rpki-client