
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
File: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft (raw, json)
Hash identifier: vW99RjzVIEmG6XIXnO6zw7zzKZW/Yn/FY44sYx+U2rE=
Subject key identifier: D5:9A:FA:F9:D9:23:2B:4C:C6:8A:2B:1C:93:95:2F:51:CB:47:92:ED
Authority key identifier: FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
Certificate issuer: /CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Certificate serial: 0197B632700F3070D7E81FA3E498C760F953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 11:00:48 +0000
Manifest this update: Sat 28 Jun 2025 11:00:48 +0000
Manifest next update: Sun 29 Jun 2025 11:00:48 +0000
Files and hashes: 1: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl (hash: Mvq2RWpcdwHdlyzBkWo7YVeA8+BSVSwnrxzvnSEvfuc=)
2: 5QzI9Kx0_zx8sVl6RSClMEylLsI.roa (hash: ouFHr10qAXIAq0kULKbopJbnAAixS5hvvnbbv6zQ1js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:70:0f:30:70:d7:e8:1f:a3:e4:98:c7:60:f9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Validity
Not Before: Jun 28 11:00:48 2025 GMT
Not After : Jun 29 11:00:48 2025 GMT
Subject: CN=d59afaf9d9232b4cc68a2b1c93952f51cb4792ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:74:eb:c8:ff:a7:65:6e:36:52:f9:ae:62:a4:
33:f0:c4:2a:38:ff:ee:a0:fd:e8:aa:82:97:e0:4c:
fa:9b:4c:5f:4f:57:89:89:0a:cc:c4:5a:f1:9c:0a:
3f:ec:f0:ec:be:ea:d5:56:7f:80:93:8c:06:fc:70:
74:dd:d0:20:92:ab:ae:6a:91:cd:1e:68:58:98:02:
42:22:c2:ce:46:ab:9d:74:6d:fb:6a:1a:9e:33:19:
2a:13:43:24:ff:f3:c2:40:d2:24:e4:bf:ab:ee:22:
7a:31:32:3b:3f:1d:87:12:bf:27:d2:17:f4:40:49:
d4:82:32:45:48:c0:82:ef:ed:bb:53:52:ac:db:64:
52:54:41:30:68:ad:25:69:38:d3:96:82:e0:e4:78:
bd:35:b3:ee:44:4d:be:ff:07:32:00:b6:b0:3d:ac:
46:f2:62:15:06:fd:2b:03:34:85:6b:b4:0d:40:76:
93:8a:22:18:36:3e:e6:f6:43:3d:a0:ee:36:b7:b5:
b9:48:66:d7:7c:b7:28:e4:ee:b8:58:ee:1a:52:36:
0e:44:89:19:4d:dc:f7:99:0a:a8:dc:51:37:05:5e:
69:38:9e:ff:99:07:71:a7:45:67:26:17:cc:79:58:
34:fa:7e:f6:0b:45:cb:6d:aa:fe:9b:fb:c2:c7:1b:
f7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9A:FA:F9:D9:23:2B:4C:C6:8A:2B:1C:93:95:2F:51:CB:47:92:ED
X509v3 Authority Key Identifier:
keyid:FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:20:fe:a1:f6:be:d1:56:76:ed:8a:da:ac:7c:db:bc:85:b9:
9e:67:d8:1d:10:0d:a9:36:2a:bb:a4:bb:12:26:f1:af:11:50:
58:c0:8f:cf:4a:02:43:6b:43:22:24:1b:70:4a:85:4e:1f:1d:
df:9f:b6:f8:f2:2e:8b:08:4e:9f:a3:ec:ca:c7:18:c8:3d:15:
95:82:ee:8a:83:58:20:a3:1c:06:2f:df:eb:f6:83:e2:5b:6c:
95:61:52:aa:d3:74:c5:b8:6e:c2:39:c4:1d:56:d8:11:60:84:
4a:1b:3d:37:8c:f7:9b:9a:e0:a7:b9:67:57:72:ed:95:dc:50:
ee:af:77:4e:c4:80:ce:15:38:c3:bb:34:3c:59:cc:f6:7a:a3:
9f:41:fa:73:c0:fe:8c:e1:45:2d:a6:76:24:e4:a0:bb:9b:51:
6e:3b:47:26:08:c5:3b:03:2e:04:49:cf:05:e9:d9:a3:1f:13:
a3:40:27:82:db:36:15:6b:37:47:a5:ca:1c:cb:03:09:fb:7d:
ca:49:c4:d7:78:d4:a4:05:91:b1:92:19:f2:ca:2f:b7:07:3e:
47:94:63:a1:53:3a:78:cd:74:22:d1:28:87:f5:02:c8:4b:76:
1d:f2:82:49:d5:20:05:aa:b5:06:98:5f:1b:bf:e0:dc:ab:06:
2e:69:64:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:50 2025 by rpki-client