Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
File: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft (raw, json)
Hash identifier: XEAkuInVduqiR4/IMNg6QRiLjT7R4rxAPdODnZ5ZzTE=
Subject key identifier: 3E:39:33:B3:A2:EA:BF:2D:29:B6:98:21:52:BF:61:51:83:74:40:5E
Authority key identifier: FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
Certificate issuer: /CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Certificate serial: 0197B70EBDB1DC8C85A7A0F68849019D5E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
Manifest number: 08CB
Signing time: Sat 28 Jun 2025 15:01:25 +0000
Manifest this update: Sat 28 Jun 2025 15:01:25 +0000
Manifest next update: Sun 29 Jun 2025 15:01:25 +0000
Files and hashes: 1: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl (hash: aP5nFaiFZvamgKYHsKHb8N+wj2M4UdXfU6AePYwo/Bo=)
2: _KxvEwb-05zypoulu-kOqoL22-A.roa (hash: iIrzlSKXJeml3wWcOMj0MUUk02aq1R81c8+dmUXm/h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:bd:b1:dc:8c:85:a7:a0:f6:88:49:01:9d:5e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Validity
Not Before: Jun 28 15:01:25 2025 GMT
Not After : Jun 29 15:01:25 2025 GMT
Subject: CN=3e3933b3a2eabf2d29b6982152bf61518374405e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:52:48:76:89:e5:4e:05:a5:f9:bf:00:91:65:
54:d4:ce:3f:34:60:19:32:b0:7b:48:6d:59:e2:64:
0c:e0:e5:8c:2f:b1:c0:2a:71:24:79:43:5b:7b:da:
e0:59:78:0c:5a:df:56:bd:08:ce:cc:1b:35:39:6c:
60:78:9c:86:6b:8f:2a:a1:5d:72:89:76:ed:18:b8:
46:1b:34:41:4a:a7:86:49:27:f2:9d:49:57:fa:17:
97:8d:22:68:ab:cd:60:bd:99:ee:e7:e5:db:36:d1:
6b:7d:3c:b9:52:a2:84:87:31:ee:60:b7:60:48:db:
e0:36:21:4f:4f:3e:cf:61:a6:4b:73:23:ab:9d:80:
93:cd:b5:69:59:a1:10:67:19:b0:30:ba:bc:03:cc:
4d:35:a4:ae:3c:15:1c:2b:37:20:72:a4:3b:22:5e:
5e:14:41:7a:a6:7a:e7:8f:c6:0a:1d:f6:57:9c:0d:
e3:2b:a0:eb:98:90:03:6b:58:87:05:eb:24:84:83:
b7:83:a0:92:7a:88:4e:d8:46:76:21:44:0b:e5:2b:
fc:fe:c1:20:35:f7:36:9d:c2:2f:93:d1:50:e7:25:
cc:6c:72:55:c1:c9:ef:85:ca:fd:71:6f:2c:ab:d8:
f3:ab:b5:9a:86:c7:a4:1f:6c:45:93:15:ba:6e:a3:
a3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:39:33:B3:A2:EA:BF:2D:29:B6:98:21:52:BF:61:51:83:74:40:5E
X509v3 Authority Key Identifier:
keyid:FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9c:f0:25:db:b7:6f:e1:fd:e0:d6:e9:9d:75:18:30:48:e3:
ad:e3:b5:3a:d9:ba:f3:af:e8:19:8e:86:4b:fd:03:f5:06:09:
25:bb:26:0c:57:fe:7f:1f:e5:18:47:bf:43:6c:9f:e7:33:3a:
7d:50:b6:88:62:e6:53:ed:0b:ea:aa:80:4a:82:62:9e:a2:ab:
64:c7:87:08:c0:d2:1b:e2:81:a7:4e:ae:38:81:f2:04:58:0c:
b3:fe:5f:8f:24:61:df:8a:8f:18:85:4a:c2:a6:35:1d:d7:73:
20:2a:1c:a8:79:f3:78:4f:6a:42:2d:d2:95:8a:6a:e8:e8:83:
85:f5:ad:ec:4f:9d:ab:45:51:72:6a:0f:00:f3:05:78:2d:d9:
95:19:b8:81:29:73:c0:96:06:6b:b6:95:9b:c0:d6:a4:61:fb:
24:5a:4b:3a:a1:c8:75:83:c4:e9:dc:d9:56:7d:5c:41:2f:39:
b4:d7:ee:d1:ca:2d:ff:51:6d:f3:b8:ad:e7:2f:00:c8:bc:5c:
89:06:2f:75:47:9d:ab:2f:cd:85:15:58:fe:fb:ea:f7:f6:af:
71:94:3c:6e:0d:b4:9a:29:ea:41:e6:e8:ee:da:d5:c5:80:df:
7c:47:9c:f2:ab:75:61:52:fa:31:4a:27:7b:10:a7:e2:cc:7c:
6a:bc:00:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:07 2025 by rpki-client