Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
File: 1pFUReDotwOKo9ekUX6Qtpx_cgo.mft (raw, json)
Hash identifier: 8gIj8A7KVXkACnJ1Rz4riiDxSA2UaJTweHIHJfP+fpE=
Subject key identifier: E9:DA:38:DC:49:53:C1:9B:74:39:4A:54:20:48:43:F0:BA:CA:A8:FF
Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Certificate serial: 0197B7B335ADDFA22116C6439C96A3DA5A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
Manifest number: 07ED
Signing time: Sat 28 Jun 2025 18:01:04 +0000
Manifest this update: Sat 28 Jun 2025 18:01:04 +0000
Manifest next update: Sun 29 Jun 2025 18:01:04 +0000
Files and hashes: 1: 1pFUReDotwOKo9ekUX6Qtpx_cgo.crl (hash: C5hFdd/q/MuYufkOeZin2fHi9A3lioTGCfUussGoZHA=)
2: JAyc3IZZlhE05kFH0gGLLaWCHBs.roa (hash: BPAa+FA4FmMjmalDh9g/vYV5efTsypi7ozqO1bsspFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:35:ad:df:a2:21:16:c6:43:9c:96:a3:da:5a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Validity
Not Before: Jun 28 18:01:04 2025 GMT
Not After : Jun 29 18:01:04 2025 GMT
Subject: CN=e9da38dc4953c19b74394a54204843f0bacaa8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:0b:c9:2d:1d:54:44:7a:93:d0:b3:14:db:
71:ee:2a:a4:8c:fd:4a:7f:9e:cc:6e:e7:45:40:6e:
7c:3c:10:08:ce:44:97:2f:79:e3:79:c6:5f:4a:4a:
40:17:58:78:1e:65:0b:87:71:26:29:f6:f3:59:a5:
e7:8b:e2:f3:af:c2:24:b9:96:c5:e2:85:86:22:55:
69:82:e3:0f:19:91:c2:b1:f5:32:ed:c9:af:21:0a:
b4:6b:cb:64:a8:42:d2:62:a7:cc:a8:a4:c7:42:d3:
10:bd:b3:ae:f5:f4:ba:ef:eb:b1:83:0f:16:88:64:
a8:90:1c:09:63:e5:91:eb:ec:3c:1d:f6:53:a2:43:
55:da:f6:7e:56:35:92:3e:4f:8a:9a:98:56:af:33:
8d:2d:db:64:ed:bb:48:78:d3:8b:fd:64:62:65:15:
99:9f:5d:e3:af:c3:84:c0:07:9e:69:7c:3a:41:e8:
f5:2f:83:49:e5:45:03:79:32:db:29:65:fe:47:97:
68:19:b7:4c:95:76:e7:0e:91:c5:81:f2:f7:a1:6b:
e4:0c:9c:26:80:c1:27:a1:5a:7a:4e:14:ff:0a:c6:
1f:73:3f:3d:12:7f:71:8d:e6:19:0d:b9:58:e2:1e:
23:a1:18:86:06:b6:1c:0c:77:77:c3:c2:da:67:c6:
1b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DA:38:DC:49:53:C1:9B:74:39:4A:54:20:48:43:F0:BA:CA:A8:FF
X509v3 Authority Key Identifier:
keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:7e:d2:9c:24:c8:6e:7c:35:6b:d5:c4:d7:97:cc:01:bd:fa:
1c:87:5e:bc:16:b9:e9:a2:40:36:38:c2:64:16:47:2b:fb:d0:
6d:fd:b2:62:4c:1a:40:df:68:75:ae:8e:47:82:73:09:aa:be:
17:93:c2:7b:f0:df:64:7a:7f:6a:ca:f5:01:74:4c:58:7a:f5:
45:7a:bd:9e:a0:ed:02:fa:74:72:ff:37:db:9e:ce:c4:18:80:
26:fc:3b:94:7d:09:6f:c0:78:a9:f9:9e:fb:93:63:2f:4c:b4:
40:51:7c:d4:d5:08:98:1e:80:8c:a8:28:bc:47:9d:94:c5:7f:
06:25:58:f7:99:21:ea:8b:db:3a:d1:3b:5f:51:e1:4a:21:42:
17:05:a2:82:d6:cd:37:7f:2b:15:46:b3:c1:13:ba:ec:f0:1f:
bb:ff:80:c2:d9:ac:ff:88:93:3d:14:a9:3c:fc:ba:3f:be:78:
86:ad:f0:b3:3a:ca:44:47:2f:ab:c6:e1:90:65:42:eb:a3:08:
42:fb:d1:28:9c:19:e9:44:66:08:04:5a:30:f6:2a:bc:b5:84:
a0:d6:ce:68:14:8e:20:32:60:8a:53:81:2c:c8:21:e6:e1:5c:
1f:d3:49:0d:d6:d2:50:5c:07:9e:82:f4:7b:18:85:91:ae:17:
7c:5f:de:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:24:15 2025 by rpki-client