Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
File: v1M926H4p23i70lx_NUvlEHOCYk.mft (raw, json)
Hash identifier: 5/09YSIT5I11nvrVy7Egzg8i8uVTTGr1D/WsyWZ9Y1M=
Subject key identifier: CD:F0:F9:87:E0:1B:79:06:CD:97:EE:33:F4:19:CA:FC:57:3F:FB:0B
Authority key identifier: BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
Certificate issuer: /CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Certificate serial: 0197B6A0BA8B75CC882349D078A8F8D149B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
Manifest number: 0FF0
Signing time: Sat 28 Jun 2025 13:01:15 +0000
Manifest this update: Sat 28 Jun 2025 13:01:15 +0000
Manifest next update: Sun 29 Jun 2025 13:01:15 +0000
Files and hashes: 1: v1M926H4p23i70lx_NUvlEHOCYk.crl (hash: oUpAGKdG+utZMOy0/w6+dqrny6rZfUbKS2d2WbnmeC8=)
2: wIL-REFz4DYY-rRWvHtgF8VAa9w.roa (hash: 0FFPo6/uMpZSHo3dFvbnUBqikS2pyiKoisgVQpgN98I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ba:8b:75:cc:88:23:49:d0:78:a8:f8:d1:49:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Validity
Not Before: Jun 28 13:01:15 2025 GMT
Not After : Jun 29 13:01:15 2025 GMT
Subject: CN=cdf0f987e01b7906cd97ee33f419cafc573ffb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cd:90:97:bc:2c:00:b4:cb:4e:58:22:7c:87:
08:ad:7c:8f:87:a9:1e:e3:a3:cd:79:40:25:2f:87:
ed:c4:c6:32:0b:14:f4:d5:9e:14:c7:d5:91:a4:50:
f7:7f:82:c2:5c:37:ef:02:ac:4c:d6:0b:ac:80:34:
01:ae:23:89:9e:4b:99:b9:b9:fd:e3:f1:86:e2:7c:
0a:a4:50:1f:16:e4:82:d8:00:f3:83:ba:26:3e:02:
21:92:2f:91:04:17:1d:2c:21:9e:3a:4c:b0:7c:39:
6d:50:94:91:7d:77:2d:da:04:0c:04:73:83:99:87:
72:95:66:21:42:55:d4:b6:d8:e0:d8:05:6e:52:94:
db:cd:2f:0c:b2:95:63:f3:46:1f:ce:59:a3:ce:77:
99:70:32:9f:82:9c:37:9d:99:d2:6e:9a:a2:ea:7a:
e4:1e:2d:ca:34:cb:e5:d2:5a:2d:73:e0:6a:0b:01:
f8:4f:dc:a9:b7:23:22:9b:59:c3:d9:fe:3b:c7:10:
b7:69:e1:02:9c:72:cd:80:c2:c3:15:94:56:e1:11:
f6:a3:40:80:3a:47:5b:cf:79:5f:2c:69:d5:cf:69:
8f:21:41:a1:30:9f:ea:b6:96:11:6b:8f:f5:a9:ab:
c1:11:49:db:b0:6e:fe:f0:e9:ff:34:c3:19:60:21:
2b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F0:F9:87:E0:1B:79:06:CD:97:EE:33:F4:19:CA:FC:57:3F:FB:0B
X509v3 Authority Key Identifier:
keyid:BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1e:53:28:82:9a:92:f2:f2:81:da:fb:9e:ce:13:21:94:72:
c9:cd:88:e3:89:8a:f6:2a:a8:bc:b4:1b:57:ef:a2:82:3f:d4:
63:a8:19:5b:20:21:68:d4:9c:81:1d:eb:0a:b7:d6:bb:f7:65:
e7:f3:43:84:80:2f:8d:7f:cf:13:da:ff:0b:d5:f5:7d:92:97:
7a:43:37:99:72:92:8b:6f:d1:5e:d2:e9:33:a6:6b:a7:f3:c7:
54:cc:e9:1a:72:f2:45:7d:a9:00:fd:35:27:ec:87:d2:a6:95:
8e:c4:7b:3b:a0:ac:7a:18:8a:13:c7:79:5a:a9:1e:32:e2:e4:
b5:3a:36:ae:bb:cb:fb:ef:07:81:c7:6e:dc:58:95:9e:a4:e8:
0c:95:fa:2a:5d:d9:cf:a1:19:f8:67:a9:c5:5d:f7:f0:7c:3a:
e2:94:1b:cb:0f:dd:17:cf:67:03:52:f4:f0:aa:27:15:64:ad:
07:d9:3a:c7:fa:97:3d:c5:dd:44:aa:e7:71:8b:63:9f:8b:7d:
d8:78:ce:f0:05:a2:9c:eb:c6:16:7e:02:2f:21:91:cb:df:00:
1c:fe:6a:d9:ab:cf:b8:94:31:87:3e:cc:b5:c8:47:a6:ca:fa:
85:36:e0:05:de:38:ae:9a:67:dc:f0:18:07:79:a8:c3:e1:29:
de:1e:8e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:47 2025 by rpki-client