Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
File: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft (raw, json)
Hash identifier: skkTRSsmoMhNUnAZnUa0vyVSM6tk6Qj2jb9+57yICKI=
Subject key identifier: 1E:B7:13:4A:CC:4E:11:C5:59:CE:6D:EA:0D:B5:D7:81:21:28:4A:03
Authority key identifier: FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
Certificate issuer: /CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Certificate serial: 0197B7B3485AD3270879266FEEBEE3AFD709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
Manifest number: 033C
Signing time: Sat 28 Jun 2025 18:01:09 +0000
Manifest this update: Sat 28 Jun 2025 18:01:09 +0000
Manifest next update: Sun 29 Jun 2025 18:01:09 +0000
Files and hashes: 1: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl (hash: KNEjpK5QQ9OuXtrlpeadScXbtTeYzbCF8M2ep4VSyDY=)
2: _Hfi64A6Hl1aWvf9UFKs9bEjNC0.roa (hash: nJS1uo48whuK1gGV1XTB4odY1z3nztNhEHWCw4wMlx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:48:5a:d3:27:08:79:26:6f:ee:be:e3:af:d7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Validity
Not Before: Jun 28 18:01:09 2025 GMT
Not After : Jun 29 18:01:09 2025 GMT
Subject: CN=1eb7134acc4e11c559ce6dea0db5d78121284a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:02:0d:d3:65:59:e3:c7:52:8f:16:18:cf:5d:
a6:b7:fa:6d:df:1f:c0:8e:fc:8d:45:1a:f0:3c:4b:
dd:3c:ec:bf:96:a5:4f:0c:e9:10:e0:01:88:53:98:
ec:c9:95:42:da:b0:d2:61:9c:f1:8e:17:09:c5:ea:
3f:f0:2f:c1:d2:7f:0e:c8:27:86:a6:f2:68:ee:f9:
98:56:4f:14:3c:d5:b4:0a:a5:ef:b5:e6:af:af:c7:
58:30:82:44:2d:76:22:9d:5e:13:00:92:5d:60:a8:
bc:b2:88:09:b0:c5:8d:ae:08:35:73:7a:27:40:5a:
81:df:f5:b5:6e:19:2e:f8:98:c9:d5:1c:b6:84:40:
6e:e9:54:09:33:e4:5d:29:c7:a2:82:23:f8:31:66:
03:99:56:21:d3:8f:95:8f:d5:42:9f:91:0f:b4:0e:
d7:b0:fc:ee:29:f2:fc:a7:7f:dd:93:0a:93:99:13:
fe:3f:ba:be:10:43:e2:a2:47:25:c2:cb:e9:f2:20:
d2:03:9b:13:76:54:3e:50:9b:be:ce:02:11:6a:39:
90:ef:e5:d3:96:e0:e8:fe:82:6b:d8:83:21:4a:35:
f0:9b:85:c7:ef:22:75:c0:04:0d:e7:06:a8:3b:65:
a4:88:fd:4f:fd:6b:1a:95:51:29:85:1c:18:f3:9f:
7d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B7:13:4A:CC:4E:11:C5:59:CE:6D:EA:0D:B5:D7:81:21:28:4A:03
X509v3 Authority Key Identifier:
keyid:FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1e:40:33:99:11:69:6e:19:ee:47:65:01:9d:e4:92:90:9a:
a2:5a:12:d0:81:eb:47:1f:c8:a5:05:05:fe:5d:09:03:01:49:
d9:b2:3a:4c:f2:91:e4:d4:29:33:47:98:b5:b6:c4:71:94:37:
55:0d:3a:7c:2a:67:d8:f0:f6:cb:75:a2:d9:2c:39:7b:66:8a:
d6:3b:11:60:e9:a1:5e:fc:b3:fe:68:b7:61:50:b6:8d:07:28:
c0:3a:c0:39:df:e0:54:e5:17:2c:56:44:3a:59:30:23:2c:86:
05:f9:a0:f0:14:f2:80:45:31:11:c8:0a:7f:6e:dc:9f:68:85:
4f:49:55:e1:5d:f7:81:87:95:d0:b4:42:10:57:1b:db:cd:30:
09:da:ec:1f:80:fb:d3:89:66:01:c3:0c:47:88:21:b2:b1:59:
45:44:08:03:a9:1e:54:24:a0:db:90:df:ea:3e:d9:8c:56:67:
6f:a5:99:25:65:67:b0:87:85:c1:bf:45:ec:8c:e9:f5:d3:bb:
d3:01:7c:27:8a:45:c3:4e:5b:4b:aa:00:f6:d5:76:98:8f:d0:
b5:d8:76:07:78:18:9b:14:90:2e:a5:64:26:3b:e2:e8:65:63:
10:f0:00:dc:2e:14:ce:08:bd:fe:3a:45:d7:e4:1f:78:ed:1f:
6a:6b:e4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:12:29 2025 by rpki-client