Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: mMXFrGBnnC++bCZq9N63E/Jdu2LIN/2nObLItAGPQYM=
Subject key identifier: 9A:3B:B3:4E:3F:20:C0:49:47:42:BB:DB:5A:AD:42:FE:84:25:FA:E2
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 0197B745B0012F258D2BB2C443B28F6D2579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 145C
Signing time: Sat 28 Jun 2025 16:01:26 +0000
Manifest this update: Sat 28 Jun 2025 16:01:26 +0000
Manifest next update: Sun 29 Jun 2025 16:01:26 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: sG1pR5p96gIY/VgNgymiZcOFwA08xrsoJDtHFDyu0no=)
2: B1dTi0f_of0kmb1xPgeCM0wY_So.roa (hash: AUmVPkVAQPCmSbSqHlAfz6SLH5DutLJ3OBZdx5Ql8g8=)
3: g4GI57zRcwc78atAcKzvcX8O_Jg.roa (hash: I42VDUXmjO3wztnHcn35mdQWvB1AtZN/AkJrcxSWDOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b0:01:2f:25:8d:2b:b2:c4:43:b2:8f:6d:25:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Jun 28 16:01:26 2025 GMT
Not After : Jun 29 16:01:26 2025 GMT
Subject: CN=9a3bb34e3f20c0494742bbdb5aad42fe8425fae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fe:29:ea:2f:3a:ab:58:0e:02:60:d8:f5:3b:
36:1e:23:b1:6c:ba:90:c0:cf:f3:13:04:30:9c:e2:
45:47:51:d1:cf:33:5b:d0:51:3c:ae:66:6c:42:d4:
5e:6e:62:29:4a:12:80:7c:b5:d2:a4:e2:be:13:3c:
7c:99:f2:4b:0f:d1:09:50:17:a0:f0:6a:be:45:ce:
9d:52:67:00:d6:e3:df:dd:b9:c5:5f:d0:d1:a8:5a:
a1:2f:aa:b1:2f:50:a4:71:d9:d7:6c:77:01:c2:ad:
d5:2b:16:e6:5f:aa:3c:dd:79:73:8c:7d:51:34:77:
d2:da:55:db:36:03:69:cf:0d:2f:30:eb:a4:77:84:
96:23:09:cc:bd:f4:a7:ee:8e:26:2a:c3:59:20:d1:
4f:82:8d:8c:03:20:f6:da:9b:18:3f:22:b1:10:76:
28:56:8b:56:b9:08:f5:fe:aa:b1:fb:cd:f4:45:f5:
b3:22:07:5f:de:2d:6e:d4:cb:59:1f:be:90:5f:f9:
f4:c3:bb:c0:7a:5c:67:55:82:4e:d7:17:25:bd:1c:
6c:79:27:a1:c5:56:c1:dc:bd:79:56:d4:ef:24:07:
67:b2:50:4d:76:ee:93:fe:e3:f1:80:f2:e9:fd:7d:
95:9b:d1:9e:99:46:40:f3:fb:b1:3c:f4:ad:3f:43:
e4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3B:B3:4E:3F:20:C0:49:47:42:BB:DB:5A:AD:42:FE:84:25:FA:E2
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:80:70:3c:0b:2a:12:66:78:d6:7f:0c:63:6c:92:10:b0:1f:
d3:d2:61:b0:8f:f6:e2:d2:83:31:35:2a:da:f0:4e:ff:e5:46:
73:9b:ef:94:e7:d0:7c:fd:4f:0f:c9:f8:57:95:8a:fe:01:06:
12:a0:a4:73:b0:94:c9:42:88:09:34:48:a0:da:b3:7c:b7:eb:
23:88:1e:66:b0:75:0d:25:84:63:6f:7a:8c:51:55:6d:23:d4:
60:16:e6:ca:ec:6c:28:2f:60:50:b6:76:44:74:2f:1c:01:5a:
0a:85:1a:6c:be:c6:4b:32:40:78:e8:67:dd:8a:62:0c:e5:38:
2e:bb:d2:a3:d4:88:d6:61:f7:b4:4e:6d:32:a2:25:82:5d:30:
d3:33:89:01:fa:7f:98:05:c3:a1:c9:9e:ed:8a:41:76:82:02:
00:2c:72:15:9d:bc:42:67:62:14:e5:d8:13:30:c9:a2:79:5a:
55:96:85:d8:75:04:95:a6:fe:19:f4:c5:80:25:9b:ee:8d:93:
72:97:41:e1:ac:81:2f:e3:4e:7f:4d:57:64:6a:97:65:e5:27:
fb:ca:12:54:e5:4e:76:86:c2:2b:6c:56:18:44:9d:d2:d8:78:
35:72:00:c3:c4:40:96:2d:15:6c:61:ba:0d:14:1e:d1:09:2a:
c1:b8:97:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:47 2025 by rpki-client