Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier: caUPRHBnaM66vRxSwnM6worgb2W8vidyFhnyZhxclKU=
Subject key identifier: D7:92:A8:B7:40:79:0F:6F:82:30:52:F0:EE:B8:30:2B:F8:04:85:F4
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 0197B7B340D6B6CCB1439D4D2385B3A10215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number: 132E
Signing time: Sat 28 Jun 2025 18:01:07 +0000
Manifest this update: Sat 28 Jun 2025 18:01:07 +0000
Manifest next update: Sun 29 Jun 2025 18:01:07 +0000
Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: 4MABEL4Cwf0qCDgK8NwPWRAsG1yDJksn9D7jk40Ybz8=)
2: wiMZyenwx3I7xwOHgp4nhnMI51s.roa (hash: Qx/P/QV7oNsKOLP9lE01kMvoM8G9Aq9IlKHXWkjW/bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:40:d6:b6:cc:b1:43:9d:4d:23:85:b3:a1:02:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: Jun 28 18:01:07 2025 GMT
Not After : Jun 29 18:01:07 2025 GMT
Subject: CN=d792a8b740790f6f823052f0eeb8302bf80485f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4b:bf:b2:6c:6d:f9:fd:0a:bd:3e:0a:9b:0c:
33:9b:c7:de:11:e9:6b:e3:e9:5a:79:0c:fd:f9:e0:
a0:9d:0b:0f:f0:c2:af:5f:ad:41:ec:63:74:83:67:
e8:5a:7d:c5:8b:f0:cd:aa:a2:fe:4c:c1:7d:c4:70:
b3:3c:70:16:a0:73:f9:9c:cd:06:93:ae:2d:62:70:
34:59:0e:74:db:3d:95:7c:dc:47:47:ad:50:dd:d7:
a5:b3:60:6c:59:7d:a7:eb:cc:2c:fb:94:99:01:9e:
2d:87:18:44:db:1b:ff:a5:4b:74:2a:63:c5:3f:0c:
18:b9:e0:dd:5a:5d:6d:0a:f5:69:f1:8c:fb:d9:9d:
92:6b:0c:1b:8e:af:de:6e:af:60:8b:71:9f:37:22:
37:36:3c:58:81:e8:32:89:1b:3f:70:1a:b0:b3:f0:
28:09:37:89:f9:56:3a:db:cf:68:8c:f9:d9:b5:bd:
0c:13:b6:8a:ce:a4:9e:24:0f:26:96:5e:a5:07:0b:
d4:e6:55:42:23:8f:35:f1:63:70:6a:ad:34:26:74:
56:20:07:89:7a:af:4d:9e:27:02:44:39:b2:d4:95:
23:4b:f8:03:7d:bb:e7:fd:e7:68:b8:14:06:f9:22:
c7:36:ea:01:75:49:ad:ab:53:ac:bf:ab:2f:79:25:
bb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:92:A8:B7:40:79:0F:6F:82:30:52:F0:EE:B8:30:2B:F8:04:85:F4
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:49:53:5d:13:91:6a:de:69:8b:2b:e6:9c:8b:88:13:46:c1:
4d:b4:7d:2f:78:7e:d5:31:5f:10:cf:62:82:2c:14:8d:7c:c5:
ad:68:c0:1f:ad:22:2c:43:4b:26:6b:0c:c8:32:0b:76:3d:12:
2d:e7:a7:02:fc:a7:06:cf:c0:55:af:5f:1f:6a:ab:11:73:84:
cb:88:1e:32:47:c3:21:ae:f2:23:d9:b5:87:76:cb:1c:82:f3:
72:bf:2f:9b:7f:9b:ee:a6:66:dc:46:21:af:a8:e5:bf:ce:8f:
fb:e6:52:8f:9f:6e:36:14:5b:0e:97:61:a9:df:be:6d:1d:51:
7e:fd:16:d9:1c:9f:ce:b9:7a:a5:e8:11:67:29:f5:e7:12:c0:
01:92:42:b8:eb:b2:31:fb:60:9b:30:2d:ba:56:34:6b:14:b2:
32:71:7c:44:ac:92:ac:b6:d4:d0:44:3b:61:09:7b:cd:31:a6:
43:e2:3c:f3:b7:f6:1c:a6:15:a7:b6:9d:3f:62:e3:4b:8c:2c:
84:3c:14:18:f5:bd:32:35:18:c0:04:55:19:e3:e1:fb:67:1c:
da:18:93:2d:cc:b6:54:f9:96:67:40:d1:1d:28:fb:a1:11:a6:
2b:2a:8e:78:a4:b9:f4:db:40:38:43:99:82:29:73:30:75:81:
91:7d:df:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:20:21 2025 by rpki-client