Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
File: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft (raw, json)
Hash identifier: kWb6cD7EyV0I5ufB20gEC3X0NNUr6bdff2w1oNubp3o=
Subject key identifier: B8:46:C3:F2:B0:50:1A:EF:D7:F9:F1:DE:86:9E:BE:DC:61:88:AA:E8
Authority key identifier: F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
Certificate issuer: /CN=f83faec93d403f3713823fa39c7d27c62e921471
Certificate serial: 0197B70EDF78027CB5235F935A65059B9793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:34 +0000
Manifest this update: Sat 28 Jun 2025 15:01:34 +0000
Manifest next update: Sun 29 Jun 2025 15:01:34 +0000
Files and hashes: 1: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl (hash: XyqQ9B/Zex4BPMiBwqQlGF0yxR8DVhf3v8rWKvY7a3Y=)
2: 72LdJQQ_XzgvUHseE2sST5RXq_4.roa (hash: kR5iFtf9EPBMZTsPkYiIRyrCHP6r5lMPF7yM/ECFgng=)
3: lput6Z6vJPdy08jemWLG6WZi0oE.roa (hash: muWWXK/VbX5K0RlIXjBqeo4nzxA9w0OVj29rsOGgE/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:df:78:02:7c:b5:23:5f:93:5a:65:05:9b:97:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83faec93d403f3713823fa39c7d27c62e921471
Validity
Not Before: Jun 28 15:01:34 2025 GMT
Not After : Jun 29 15:01:34 2025 GMT
Subject: CN=b846c3f2b0501aefd7f9f1de869ebedc6188aae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ad:64:c4:e7:0d:82:ef:a0:41:f0:e8:93:40:
e3:2d:f7:99:e2:5a:73:3e:ba:ac:83:39:1b:ca:c1:
87:e8:8f:6d:cd:42:d3:82:a8:67:0f:70:75:a2:a8:
47:ab:7e:96:8c:79:0a:80:e3:68:6c:ab:cc:3c:0d:
aa:87:b7:be:91:ab:db:f7:40:3b:a0:a0:c7:32:b2:
02:d1:9f:f2:77:c2:b2:13:4a:41:b1:32:87:ad:d6:
c9:d2:1c:78:64:30:90:78:fc:e4:b7:ac:0e:e9:6b:
cf:ae:59:d8:6f:16:70:23:1b:65:50:d6:47:53:16:
2c:10:22:34:bb:68:bc:b5:65:83:46:21:c4:85:93:
40:3a:6c:03:d6:cf:53:49:3d:7b:77:ba:b6:88:83:
31:a5:72:ae:89:70:80:e4:d5:39:6c:ec:3c:b0:fb:
18:c0:0a:ed:a3:8c:9c:fc:eb:59:f8:25:8c:03:91:
d7:90:62:a7:49:bd:e1:01:c3:1b:f0:59:c1:10:b4:
06:26:2f:31:bd:16:8d:88:be:64:cd:80:55:43:54:
a7:8c:15:b9:08:d8:5e:3c:34:f8:1d:d3:2a:0f:b6:
00:e2:fe:20:15:fb:ca:5a:93:3e:d9:b0:d7:57:c8:
64:73:fa:2c:09:b2:e9:fc:29:03:1b:06:63:8e:04:
c8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:46:C3:F2:B0:50:1A:EF:D7:F9:F1:DE:86:9E:BE:DC:61:88:AA:E8
X509v3 Authority Key Identifier:
keyid:F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:10:4d:a4:ca:2c:08:e3:58:24:cf:a4:e2:8f:16:14:52:61:
54:22:8d:ba:1f:83:66:c8:56:85:2e:b2:93:84:00:95:5d:fa:
dc:29:ab:92:94:29:3f:dd:e2:9b:5c:80:29:35:0c:b6:61:e6:
45:5a:eb:d9:8e:48:d2:f2:d4:e1:67:4e:42:25:e7:33:04:3d:
fd:95:00:e9:71:85:12:28:ab:01:14:a6:c6:5b:bb:6d:14:a3:
71:51:63:fb:2e:73:5a:91:a1:ac:e6:f2:ea:7a:e8:47:93:77:
9c:89:14:22:49:30:6b:b4:bb:7a:4b:7f:ba:40:29:e2:db:07:
be:63:a5:c0:c0:12:ae:db:e6:25:01:12:a8:d7:0e:04:42:4e:
72:43:6e:ae:dd:f2:06:e7:3b:40:ec:e9:47:0a:98:92:c8:be:
ac:e2:ff:c1:8a:15:4a:91:c3:4b:60:79:37:73:bd:e7:c5:50:
1a:22:1d:f2:28:25:20:e9:4d:88:88:04:f9:99:ef:00:59:83:
bf:3d:21:3e:85:66:75:3f:54:80:ab:fb:97:ea:e3:02:09:f9:
29:66:c2:1a:28:cf:e9:2d:4b:7f:57:3d:6f:40:ab:f3:14:0f:
bd:a6:94:57:a9:14:3d:e6:d2:04:e5:bf:f0:eb:13:f6:4b:50:
8e:1f:a5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:26 2025 by rpki-client