Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
File: 1onLcYkcbZS9nm8U8W5-N8LHKL8.mft (raw, json)
Hash identifier: x9/kBcfZ3ZoDzzCSLjMidItYjs+iJwOdd7kRRXqu/8g=
Subject key identifier: E1:48:C3:DF:F5:67:1A:C4:64:D0:F8:6F:F6:5B:4A:28:11:20:BA:A8
Authority key identifier: D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
Certificate issuer: /CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Certificate serial: 0197B6D7913326BA1A967D6D15D35A7B3C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
Manifest number: 036A
Signing time: Sat 28 Jun 2025 14:01:10 +0000
Manifest this update: Sat 28 Jun 2025 14:01:10 +0000
Manifest next update: Sun 29 Jun 2025 14:01:10 +0000
Files and hashes: 1: 1onLcYkcbZS9nm8U8W5-N8LHKL8.crl (hash: u1Jo63D2VsHOkoyPuw7CUrwxocDtqRyOtw7jcEuFj5w=)
2: kSER2798uaT4ZEQ3_Ywav1IgXDo.roa (hash: o89fQ/v3jr3XzrvC5mfE9JQZHOaC2hUzybiixeh55JI=)
3: yZlOT6r0_6wmgpAAvcSq6qfpXoA.roa (hash: CFuI4jvHDVJgJ7TNYXPE3aUuvYsSM/+AObIDbJtCPww=)
4: zl7tT8dRR7O1ZujdC0-GhGjBJAU.roa (hash: dZhp70Fm8wBLybFYAH8VTvH36PqVNE1zgwuzpEitFwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:91:33:26:ba:1a:96:7d:6d:15:d3:5a:7b:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Validity
Not Before: Jun 28 14:01:10 2025 GMT
Not After : Jun 29 14:01:10 2025 GMT
Subject: CN=e148c3dff5671ac464d0f86ff65b4a281120baa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:9f:5c:2d:a7:9a:94:71:7a:af:ea:35:aa:
2b:f4:6c:11:51:76:36:17:cb:84:2b:c4:00:0a:e3:
22:04:ff:b0:40:33:1d:ce:66:9c:a1:12:98:16:a2:
00:a7:cf:01:06:23:ce:b0:ac:0d:ee:c9:17:f6:4d:
ed:99:ff:bc:1a:18:58:75:6f:88:91:bd:7c:ab:1f:
68:12:f3:d4:2a:db:cc:80:29:08:e0:a7:dd:5e:15:
db:09:b8:00:a6:7b:ea:1d:89:a6:52:c0:f8:71:9a:
91:c5:79:b7:82:81:b5:64:f1:b3:01:9f:c8:79:de:
f2:83:03:52:3e:66:40:57:02:ca:8f:6b:53:8f:8b:
b0:8e:97:2c:86:b2:94:11:bd:a1:68:2a:55:01:02:
e3:5e:58:bc:7f:4d:4a:32:aa:f6:5c:19:6f:0c:22:
f0:c7:dd:ac:3f:22:9e:40:85:3a:09:15:a9:79:ff:
c5:2e:6d:a9:d4:00:da:e5:de:6b:88:b0:f7:cf:11:
52:db:a4:2d:f4:2c:36:73:11:00:ef:be:ea:35:e5:
5e:24:66:a8:6c:df:44:31:65:d3:d3:c5:d3:ac:11:
b1:e2:e2:09:09:1e:ab:ff:26:aa:21:f1:63:1f:84:
43:85:6a:00:47:b3:5a:5c:c3:7c:ee:1b:ae:bd:0d:
a3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:48:C3:DF:F5:67:1A:C4:64:D0:F8:6F:F6:5B:4A:28:11:20:BA:A8
X509v3 Authority Key Identifier:
keyid:D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f9:e2:61:28:f8:87:0e:f4:fc:a1:58:65:91:b0:a4:31:d4:
4a:3d:2e:b2:a2:11:49:52:38:d6:20:80:c5:49:5c:51:65:6a:
01:88:88:82:63:7d:07:f2:c0:6e:8c:74:b1:6c:a4:77:b2:13:
db:87:e2:e3:75:29:c3:4d:06:71:20:11:d3:e6:81:9b:15:32:
1e:0a:45:23:36:c2:b5:a7:dd:36:7f:d2:24:ce:75:76:2d:28:
a8:83:0a:e0:46:7b:6c:2b:f3:62:82:73:2f:f3:b2:bb:51:08:
a0:c9:21:24:a6:72:a6:17:96:ef:b9:8f:14:13:9b:95:a6:d2:
6c:a3:ab:32:fb:c8:95:39:31:53:00:fa:88:2a:f0:78:7f:6e:
be:e4:40:f9:03:fb:67:3e:26:2e:d8:e2:f7:af:38:26:a4:db:
52:af:b3:49:47:a1:08:a9:c5:88:9c:65:3b:2a:7d:bc:99:d8:
b5:c3:0f:07:61:66:73:8c:e2:32:07:8f:23:c2:33:c1:28:6e:
98:d3:b1:be:9a:79:4c:73:36:c9:1f:f2:e7:39:7e:b3:b2:63:
ca:fa:fd:58:2b:61:ee:b2:54:48:1a:67:00:e0:73:d3:e3:eb:
0a:8c:92:07:64:3d:92:77:2b:46:d3:af:7a:b2:75:09:d7:39:
9b:f3:2a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:10 2025 by rpki-client