Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
File: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft (raw, json)
Hash identifier: oKMYIRff39VAfEtCaL4ytW30kOFc15aSHhW3cszBCvQ=
Subject key identifier: 11:0C:CB:8B:D1:CB:1C:C9:31:D0:73:F4:4A:BC:FF:34:31:1A:0D:D7
Authority key identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
Certificate issuer: /CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Certificate serial: 0197B745A4C9FFC6F72537A0D8855722B92C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
Manifest number: 0A02
Signing time: Sat 28 Jun 2025 16:01:24 +0000
Manifest this update: Sat 28 Jun 2025 16:01:24 +0000
Manifest next update: Sun 29 Jun 2025 16:01:24 +0000
Files and hashes: 1: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl (hash: kaFknQubSsTFk1um+0FsYgosxAmZCK22BbDYW75/rmc=)
2: LPmwSEr2cec7eKNG65DFfjhgZlg.roa (hash: 2uSr4hxNi+F1N3JsqPYCLDQN2e8AEP4YyYoo3iXqMBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a4:c9:ff:c6:f7:25:37:a0:d8:85:57:22:b9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Validity
Not Before: Jun 28 16:01:24 2025 GMT
Not After : Jun 29 16:01:24 2025 GMT
Subject: CN=110ccb8bd1cb1cc931d073f44abcff34311a0dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:07:78:c6:aa:44:b6:af:c4:e1:30:b0:6d:
59:8b:07:c0:07:c3:14:9c:dc:2f:84:dd:5d:6d:8e:
48:e1:70:9f:2a:b1:ae:d4:2c:c9:a6:8a:db:51:7b:
28:5c:fd:f2:0c:ad:ed:5f:2f:a3:0f:d8:bf:31:9d:
68:ab:21:6d:4d:d5:00:ab:f5:3e:ec:e7:0d:bc:8b:
7e:93:25:af:01:4e:95:8b:db:a8:f3:42:92:0c:77:
6e:fa:51:6f:d2:34:b7:3d:66:4d:44:10:4d:67:ff:
82:3d:4a:8b:14:c1:34:c7:1c:94:24:41:9f:a7:28:
3f:c7:59:8a:ba:58:b2:1f:1b:3f:19:1e:68:24:e8:
e0:d0:d5:c4:ae:94:b5:34:54:36:b4:5b:b4:a4:7f:
07:6a:9e:8c:91:65:89:44:90:93:42:2f:74:d4:62:
1e:68:6b:e2:06:ba:a3:a4:4e:5f:e8:56:59:47:ea:
b9:e8:51:7d:92:6a:4b:b0:aa:7e:5c:d6:86:35:5c:
c5:8c:30:24:86:28:01:a9:f4:7a:4b:63:d8:6c:36:
73:86:8c:89:b2:66:a4:11:39:9d:14:fd:e5:d5:50:
3b:be:a4:33:21:26:91:5e:a6:db:dc:64:34:4d:cc:
7d:31:b4:22:1c:21:5a:59:b4:35:2f:c6:05:d9:8a:
15:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0C:CB:8B:D1:CB:1C:C9:31:D0:73:F4:4A:BC:FF:34:31:1A:0D:D7
X509v3 Authority Key Identifier:
keyid:FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6f:76:36:6c:f0:c4:80:00:ae:03:ef:44:25:12:92:66:6d:
19:8d:02:09:c8:13:db:4b:09:8f:b5:c5:8c:4d:55:f9:c8:e6:
ae:a8:e7:8e:5f:7e:54:7f:6e:4b:25:1d:80:fa:54:5e:d4:c8:
4c:10:d2:46:21:67:ce:3f:b9:b7:e0:61:6b:86:a7:a0:09:30:
96:c6:7a:ef:9a:64:ac:1d:19:c6:6b:2e:e7:38:0c:b1:de:a9:
fa:42:e7:37:fd:0b:5d:51:30:82:25:cc:6d:c6:14:84:7d:c3:
06:98:60:8e:cc:6d:a9:b0:82:5e:9b:4b:6a:d4:f4:4f:97:f9:
e7:0a:29:59:8d:49:84:c7:21:d2:1e:76:ad:c9:7a:17:c8:fd:
14:84:3b:9f:3b:08:50:c0:8f:6d:18:0b:92:29:c1:39:c3:e0:
a5:e0:ff:c5:45:f6:8a:25:1b:df:26:8e:46:ff:b3:55:b8:ae:
eb:29:49:33:86:29:ae:6d:20:2d:f3:76:1a:75:5e:2b:6b:7c:
99:b6:12:78:fc:dc:47:c7:40:96:5c:ed:c2:7f:ea:e2:47:43:
0e:1e:81:3d:4f:08:2f:64:82:4b:ee:f7:13:76:a3:bd:bd:50:
a0:6f:d3:50:60:78:b7:97:72:39:84:14:d8:f8:91:68:fe:cc:
8b:ed:d5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:51 2025 by rpki-client