Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.mft
File: t1ELZRv73wnISGqBNiAABb77SX0.mft (raw, json)
Hash identifier: EaezQsfk6iJ3NlaAb5cN6Ix7kBZXZ7pMEv+xFSRA54U=
Subject key identifier: FA:FB:46:81:3E:89:A0:2A:27:B6:19:4F:94:AA:61:E1:08:66:3A:46
Authority key identifier: B7:51:0B:65:1B:FB:DF:09:C8:48:6A:81:36:20:00:05:BE:FB:49:7D
Certificate issuer: /CN=b7510b651bfbdf09c8486a8136200005befb497d
Certificate serial: 0197B7EA9A4F434727C59ACE9DF04F79E383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1ELZRv73wnISGqBNiAABb77SX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.mft
Manifest number: 0C35
Signing time: Sat 28 Jun 2025 19:01:34 +0000
Manifest this update: Sat 28 Jun 2025 19:01:34 +0000
Manifest next update: Sun 29 Jun 2025 19:01:34 +0000
Files and hashes: 1: Jiow1t-Pk1ZOtI6Aqeh1RaSW3p4.roa (hash: DYR6jlP51Fl43ZL0B6qnJrGHJROyqbTA9KSRORts0Uo=)
2: t1ELZRv73wnISGqBNiAABb77SX0.crl (hash: xwtIl9h+xA8/SMVYa9L0pA7K3BavWjePppPOrcnA+sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1ELZRv73wnISGqBNiAABb77SX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:9a:4f:43:47:27:c5:9a:ce:9d:f0:4f:79:e3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7510b651bfbdf09c8486a8136200005befb497d
Validity
Not Before: Jun 28 19:01:34 2025 GMT
Not After : Jun 29 19:01:34 2025 GMT
Subject: CN=fafb46813e89a02a27b6194f94aa61e108663a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3c:84:2c:28:e3:3c:5a:9b:bd:7a:b3:aa:39:
56:20:e0:2a:67:c4:96:de:18:38:a2:a5:58:dc:45:
2d:75:d9:ab:ab:b8:49:c6:c0:d5:c0:ce:8e:96:12:
c5:a2:5d:2e:a8:ea:68:e8:1d:84:6f:c8:4d:13:7a:
a8:d7:d6:83:44:df:d5:20:ab:c4:a3:5a:86:7d:a0:
84:a9:a4:0a:47:01:11:c5:ad:16:ae:9a:93:34:77:
38:06:d7:5a:d3:c6:08:91:89:04:5d:45:18:92:62:
6a:6b:d7:33:7a:d2:b8:d7:47:cf:1c:8f:d8:66:82:
6a:30:43:f5:c4:cb:80:fa:e3:8b:13:c3:32:cf:73:
99:64:fb:bc:d9:c3:5b:de:59:73:0d:65:c8:90:0b:
c4:75:0c:45:37:55:a4:f6:7b:df:5c:8d:09:1d:74:
78:61:32:f9:35:85:f6:d8:00:b7:88:cb:a3:cf:91:
9a:62:77:16:04:3a:5a:d0:d4:50:91:bd:49:04:0d:
9d:57:ad:70:33:af:f8:5e:05:cc:6a:c7:b1:ca:2b:
77:43:71:00:d9:63:09:46:49:e9:b1:d5:51:9e:d8:
e0:b2:cd:1e:42:92:b5:00:f9:74:ff:19:da:0d:3a:
21:c7:b3:8e:49:c0:73:98:01:04:73:07:a6:8d:b5:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FB:46:81:3E:89:A0:2A:27:B6:19:4F:94:AA:61:E1:08:66:3A:46
X509v3 Authority Key Identifier:
keyid:B7:51:0B:65:1B:FB:DF:09:C8:48:6A:81:36:20:00:05:BE:FB:49:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1ELZRv73wnISGqBNiAABb77SX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4d:10:c4:a8:8a:7f:54:07:2a:7e:d0:ed:98:d9:84:08:1c:
6c:f9:25:29:58:f0:75:2c:fc:62:76:b8:25:92:4a:dc:11:3e:
af:15:3a:5a:cb:4f:2a:cd:cc:25:71:ec:7c:8e:2e:7b:68:32:
d7:84:34:72:12:9f:1e:3d:81:72:6b:db:fa:3d:6f:11:31:66:
5f:ea:71:d1:b6:07:89:0f:b7:7c:ce:57:5e:61:c5:13:fa:f1:
c8:d3:ba:a1:c1:eb:52:b0:b7:af:63:57:76:9c:aa:ad:06:23:
d5:fb:91:92:a2:0a:20:a1:dd:d0:55:d0:98:a2:44:1c:e4:5e:
73:dd:a4:10:58:08:d0:75:8c:70:7d:f2:6e:2b:2e:e6:9a:a5:
33:5b:1b:6b:ed:dc:59:e7:ff:66:e5:68:5d:a3:a6:0b:d7:0a:
03:39:a0:15:ba:5a:7a:c0:89:c7:f5:d6:85:33:75:a7:17:a1:
83:eb:98:0c:88:bc:79:17:47:40:6a:bf:68:fb:95:b6:de:5f:
36:41:59:7b:cc:98:36:3f:f3:7d:e8:0f:26:c1:85:bd:9a:ab:
05:62:f4:17:be:ab:a7:30:a6:02:9b:ca:72:41:bf:0f:57:bc:
0f:3e:57:22:16:04:9f:d5:ff:06:d7:b4:eb:98:c5:cc:b1:00:
15:1c:2b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:53 2025 by rpki-client