Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
File: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft (raw, json)
Hash identifier: mv7oFrvSXGfB+Jmh4E5CzlnEctI2uj2F8QxlmI2GZco=
Subject key identifier: 7C:C1:DB:B5:6E:DA:9F:4E:6A:CB:2A:6A:73:1B:36:E0:3E:60:FA:04
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial: 0197B77CB3249F6388047D696396D75CA98F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 17:01:32 +0000
Manifest this update: Sat 28 Jun 2025 17:01:32 +0000
Manifest next update: Sun 29 Jun 2025 17:01:32 +0000
Files and hashes: 1: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl (hash: 4ZI8Fvh77qKJQQEjIpAQ/N7l81cYrSTPgo64lJbPPLk=)
2: 39JKIfKrg-FtnGzVEc-4CP0zYyw.roa (hash: Im00znI9YGKHOr4RaKPPD+/nog1aDzKpzBikMvxHIzM=)
3: FFxk-BcPBkUgJFwE14_BuXHfh6w.roa (hash: 9SK+9whhVgM4K8SPp7ixcuhtvspcdI8sVfJA0hKgVC4=)
4: nJAiq-PWagml6U0XgPLvEMeetqY.roa (hash: slEmYICQOiKGbuOd4bkjw5nPBfad31ZvqqX336YhZsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b3:24:9f:63:88:04:7d:69:63:96:d7:5c:a9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Validity
Not Before: Jun 28 17:01:32 2025 GMT
Not After : Jun 29 17:01:32 2025 GMT
Subject: CN=7cc1dbb56eda9f4e6acb2a6a731b36e03e60fa04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:06:97:b2:ba:eb:52:11:32:a2:80:ef:bc:ca:
9f:f2:29:c3:fd:c5:5e:02:64:56:84:5c:98:91:00:
2d:60:fd:b9:f5:7e:1c:32:90:2c:d7:60:b5:50:21:
58:fd:80:89:4f:ca:24:66:be:be:b2:7a:1e:79:1a:
54:cb:7a:e2:9f:04:14:32:96:16:63:61:6d:72:33:
0f:a8:f7:a3:28:cb:64:e0:5c:61:3f:c3:c4:8e:2c:
8d:4f:86:b9:44:7d:e7:2d:b1:90:aa:35:ea:0c:0d:
3e:1e:b8:6f:c6:12:63:9c:fc:dd:89:e6:98:42:80:
7a:51:70:ef:7f:99:e6:71:27:af:e7:16:48:f6:4b:
6f:5d:69:d4:79:8e:06:a7:35:ac:68:83:94:1b:03:
47:ea:2e:4a:f0:11:2d:6c:20:b6:27:5e:29:26:31:
e4:f8:d6:1f:dc:74:46:6c:21:31:c8:5a:fc:0b:d0:
0a:4c:36:fa:fd:86:2f:52:ae:c8:6f:d5:70:f0:6f:
84:a0:35:52:ce:b8:98:42:db:55:83:7e:8b:c6:19:
93:6a:46:85:6f:62:25:d5:30:3c:43:8c:ff:54:78:
0b:1c:1e:89:cd:79:e4:6f:f2:a2:65:f1:e8:f4:f8:
de:71:ef:7e:66:93:c6:37:bd:98:5e:4d:2f:d0:d4:
6a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C1:DB:B5:6E:DA:9F:4E:6A:CB:2A:6A:73:1B:36:E0:3E:60:FA:04
X509v3 Authority Key Identifier:
keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2a:52:e5:3b:75:25:46:80:07:7f:6e:e8:81:af:0c:0d:db:
f8:4e:df:42:86:f6:97:91:c5:d1:bc:96:ee:19:4a:be:53:20:
40:22:f8:cf:58:70:da:23:db:54:d2:bc:87:ed:2c:07:06:56:
9c:9f:59:ad:65:98:84:89:c1:3d:7d:a1:6e:f2:01:0c:16:d0:
33:5d:c4:36:eb:d8:2a:f9:47:53:50:c4:75:93:4e:d9:54:20:
dd:18:5f:61:a6:74:56:9a:66:bd:28:2b:ba:96:d4:28:de:6d:
85:2e:08:b3:ab:f1:5d:ad:33:c6:4c:6b:b7:05:3a:6d:58:3f:
61:7a:5f:f2:a3:06:1f:a1:6a:59:0d:8c:d0:d2:bb:a0:47:a3:
94:ee:e6:bc:d5:81:8e:ef:23:45:e5:ce:24:c7:dd:d6:8c:1f:
63:2f:2d:95:31:c5:f0:0d:18:27:cd:64:23:4a:63:d3:51:1b:
8e:f7:f1:fa:38:36:f4:cf:cd:44:c2:bb:93:c0:1a:5c:db:27:
21:4c:fd:16:12:92:7a:b2:dc:68:b2:95:0b:d5:d5:b1:12:7b:
c2:70:a3:85:a7:7b:3a:60:b5:63:a3:bb:d9:c9:05:fd:f7:a5:
1c:62:64:36:f9:4d:8e:2c:be:98:d1:5c:a0:23:8c:1f:61:2a:
8d:de:8c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:18 2025 by rpki-client