Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
File: 1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft (raw, json)
Hash identifier: obUxLmQPYlpfjsLMoYyCBDM23M91fPQAvZUYlI0fbBU=
Subject key identifier: C7:4C:20:AB:7B:ED:45:81:EE:65:F6:B7:29:D2:6F:76:62:3C:49:17
Authority key identifier: FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC
Certificate issuer: /CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
Certificate serial: 0197B6D735CAA45AB79FCB2A008C214ABB60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
Manifest number: 1001
Signing time: Sat 28 Jun 2025 14:00:46 +0000
Manifest this update: Sat 28 Jun 2025 14:00:46 +0000
Manifest next update: Sun 29 Jun 2025 14:00:46 +0000
Files and hashes: 1: 1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl (hash: ktU3YM+BNlwhiaULEUAsh4z+XU0z1adDbO5GPSqBCeQ=)
2: Qqhw1hFjAH2cjMyIzDFuLuhBB38.roa (hash: N8UT7eSxYsrDW5XIIE4cv48SYlBhyKYdxt2C78AnGxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:35:ca:a4:5a:b7:9f:cb:2a:00:8c:21:4a:bb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
Validity
Not Before: Jun 28 14:00:46 2025 GMT
Not After : Jun 29 14:00:46 2025 GMT
Subject: CN=c74c20ab7bed4581ee65f6b729d26f76623c4917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9e:03:52:8d:bf:06:f6:92:ba:dd:1c:f6:0c:
72:a7:8a:9b:6a:28:b3:ab:77:85:3a:ea:ae:40:b5:
7e:79:18:fa:bc:50:83:49:b0:da:dc:13:34:23:72:
69:89:ec:2b:6b:28:53:c1:5f:0d:8b:88:36:da:6b:
4e:8c:ae:cc:5c:8c:bf:11:cb:dd:17:e4:79:23:a4:
8e:bf:60:3b:99:0c:7a:3d:26:c1:a6:0b:03:b3:da:
7e:a6:94:db:df:94:4f:ae:5f:66:79:1d:91:7e:d6:
b1:9a:3f:2e:7a:0c:e7:a1:e4:bc:ce:2f:3b:a0:6d:
8a:d8:ce:49:9d:e8:8e:4c:da:20:d2:ae:cb:99:d7:
92:69:e4:10:9b:8f:30:0a:6b:bd:35:f0:94:05:5a:
69:ff:e9:89:aa:9d:11:79:85:99:8d:6b:36:15:e1:
ce:51:46:15:b1:eb:b1:bb:42:a7:a8:af:80:92:91:
cb:47:c7:c0:b1:f2:6c:19:7f:e0:83:64:73:84:61:
83:de:ea:9d:2f:ae:99:79:20:d7:73:20:47:2e:5f:
37:d7:1e:f3:2e:3a:bf:70:b9:ce:9c:fa:49:b5:33:
e2:67:3c:4b:f9:2e:72:a6:08:57:af:45:82:b6:21:
32:50:3a:9c:7a:8b:cb:dd:76:60:ff:ff:4c:7a:bc:
f5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4C:20:AB:7B:ED:45:81:EE:65:F6:B7:29:D2:6F:76:62:3C:49:17
X509v3 Authority Key Identifier:
keyid:FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:35:20:ea:66:22:3d:71:61:67:0b:13:95:06:55:46:ff:d1:
c0:67:38:de:24:4e:c2:9c:f7:d6:e0:a7:2d:45:b5:2f:9b:be:
c0:d9:4d:75:2f:80:02:1e:ce:dc:06:de:74:8b:b0:22:ac:23:
82:39:19:87:5b:23:82:16:e0:83:d9:8e:00:fa:1e:b0:53:f6:
ee:6b:12:5b:c1:b9:6f:cb:40:05:77:c4:c0:99:33:a2:82:03:
6d:97:6e:3d:9a:54:8e:58:0a:77:1a:75:ef:32:c7:2a:1b:d8:
eb:97:8a:91:9c:89:cc:79:ef:6e:64:a1:77:57:1f:3c:a2:58:
e9:7f:81:75:f2:93:b0:7b:af:88:bc:b1:bf:8e:ce:62:c8:e4:
5d:0c:20:23:83:3a:f1:62:01:83:fa:e8:92:9c:dc:9c:7d:95:
16:77:bc:44:71:e1:ca:35:5b:56:02:ed:6e:6c:db:77:52:68:
0b:70:1c:3b:25:2e:49:1d:b9:80:29:03:33:6e:aa:e7:7d:d4:
4a:c3:57:05:42:e7:d6:af:e9:df:19:2e:b8:b8:e2:60:d7:e5:
f3:9f:2a:93:14:cc:db:9e:0b:ee:c1:29:e1:44:2d:cb:20:17:
c0:0c:db:11:26:04:cd:47:29:cd:4a:43:df:8e:d5:b5:db:e8:
91:87:3a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:42 2025 by rpki-client