Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json)
Hash identifier: pJCGZ0kdxgrb3m50g4xQwNPvaeRWigAE69bcLxFlFq8=
Subject key identifier: 13:22:9D:9D:97:14:99:B3:AC:89:F3:A5:9F:09:2B:1C:AF:7B:A7:85
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial: 0197B7EA8AD97548161DB9846785E8AF8AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
Manifest number: 0365
Signing time: Sat 28 Jun 2025 19:01:30 +0000
Manifest this update: Sat 28 Jun 2025 19:01:30 +0000
Manifest next update: Sun 29 Jun 2025 19:01:30 +0000
Files and hashes: 1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: yxf3U93s/F8LhUSMcHiw7gYgKyLRnejpyYbPCRAWqfA=)
2: tuLehSOy-qAFQeskzDC9g5qQP28.roa (hash: PI1JhY3WzMR4z9FpYAEO5831pX148zh5gBmaERfINeo=)
3: uEe7yxEzwBqxOdiy6kW5K2akSMQ.roa (hash: 4vrYRNv3vEFbdxt4zd7lm78u8NLMmrbvWa8ivtjvkwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:8a:d9:75:48:16:1d:b9:84:67:85:e8:af:8a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
Validity
Not Before: Jun 28 19:01:30 2025 GMT
Not After : Jun 29 19:01:30 2025 GMT
Subject: CN=13229d9d971499b3ac89f3a59f092b1caf7ba785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f7:1e:3a:6f:a7:d4:36:f1:e9:3f:80:ab:18:
b8:46:2a:b1:17:e6:eb:61:d4:ab:26:8a:72:62:66:
20:51:f4:c0:85:ea:fd:c1:d9:72:f8:fa:e1:0d:8a:
e7:b1:f8:1b:23:d9:2f:53:60:0b:ab:86:96:27:16:
d8:28:c9:cd:11:17:1b:0f:a8:db:b9:2f:13:e7:14:
c8:8b:1d:bd:ef:a5:28:31:5e:45:70:66:cc:83:c3:
33:72:d6:67:7b:9d:89:4c:76:1a:30:31:16:c2:c0:
9e:17:9d:e6:0c:76:9a:7c:86:94:95:64:48:dc:1e:
d8:e9:e3:d8:53:79:0c:e9:48:be:e9:d5:7d:66:9b:
ff:ef:8e:55:71:a6:e8:78:f4:a3:f0:de:42:1c:1d:
0e:2b:2e:af:c6:fd:5c:82:47:06:14:50:dd:ea:48:
b9:20:99:4e:a5:53:fe:e4:bb:f7:98:62:3f:d1:bc:
07:fe:d5:58:b8:d2:e5:e6:3c:bd:8f:d4:e2:3a:cc:
a4:29:60:1d:58:10:60:fd:5a:51:5b:0d:5e:b5:03:
15:21:a9:ff:0a:ea:9a:4a:cc:0f:c0:ec:0e:28:70:
62:d8:12:f6:67:b5:60:a6:3a:5a:13:20:14:62:a7:
c7:0c:c5:02:77:cb:e4:ec:bb:9f:f0:d8:07:81:a9:
85:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:22:9D:9D:97:14:99:B3:AC:89:F3:A5:9F:09:2B:1C:AF:7B:A7:85
X509v3 Authority Key Identifier:
keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0c:17:be:46:ec:e4:fd:87:e9:c8:cb:3b:ee:98:9c:40:c3:
c8:d5:37:28:66:00:0a:47:25:75:15:43:b8:50:8f:4e:bf:19:
62:0c:ae:b3:c1:60:07:54:88:69:d2:c7:b1:01:95:9a:ce:2e:
7c:78:54:01:7c:66:d1:b2:41:f8:b0:a7:14:b5:ad:93:af:4d:
75:b4:f1:ca:63:6c:17:d0:19:77:0c:3e:49:8a:b7:90:9d:4b:
29:0e:10:ce:ec:f7:ac:bd:9f:cb:b5:b5:1d:30:8c:34:94:8e:
2b:21:3c:20:d0:53:58:9d:bc:db:4c:77:24:3d:5e:57:9a:50:
95:c3:0b:68:eb:dd:61:6c:72:6c:f4:5c:00:50:eb:07:fd:5a:
7f:8e:0d:4b:d3:cf:e7:7a:4d:fa:55:f4:fb:b3:c8:75:33:60:
aa:a9:da:03:c3:72:eb:e7:49:cc:c7:5f:17:3d:30:b8:83:af:
6d:89:ec:50:90:8c:17:8c:d4:1b:64:17:35:15:72:bf:71:0f:
70:31:8e:2d:d5:a7:30:e6:d7:57:56:07:a7:fc:ff:06:d2:20:
91:3a:99:e5:af:81:7e:83:2f:e1:d8:0e:9f:a1:86:3d:33:85:
d1:35:ca:f3:5d:18:20:e0:34:4a:f2:b0:9e:db:18:3d:eb:b2:
e6:6e:1e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:49:06 2025 by rpki-client