Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
File: 1-Rnh8_5ptOvf8CqahX58bCslMBo.mft (raw, json)
Hash identifier: dfEgaaRHaex11rHcazdgANBDdKCn23vh8kqYV8KlJiA=
Subject key identifier: 47:9E:43:00:AE:45:9E:5D:A0:58:80:FB:AE:BB:73:22:7A:F4:A2:EE
Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
Certificate issuer: /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Certificate serial: 0197B5C4AEE494B23F09276A6A4D0423BADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
Manifest number: 1269
Signing time: Sat 28 Jun 2025 09:00:55 +0000
Manifest this update: Sat 28 Jun 2025 09:00:55 +0000
Manifest next update: Sun 29 Jun 2025 09:00:55 +0000
Files and hashes: 1: 1-Rnh8_5ptOvf8CqahX58bCslMBo.crl (hash: A8ipcEJ5rY17A/SqVf/UpykJgcNE6PwW4jIm+s8I+3w=)
2: 9L_1mBjt99zXF40qYr_O6y2QbsE.roa (hash: k7FuYkV59HauSqsnOjmzLVNUp/bLC0YBxaQpGdWAgEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:ae:e4:94:b2:3f:09:27:6a:6a:4d:04:23:ba:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Validity
Not Before: Jun 28 09:00:55 2025 GMT
Not After : Jun 29 09:00:55 2025 GMT
Subject: CN=479e4300ae459e5da05880fbaebb73227af4a2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cd:28:8e:ff:94:63:28:08:3e:21:b2:0e:e9:
ec:d6:92:be:98:69:8c:cc:d8:26:40:e4:45:bd:4b:
22:de:ee:37:6b:ee:b4:75:bc:e8:45:cf:aa:f9:78:
20:16:83:3d:5b:82:fa:07:21:fd:8b:2a:b1:94:71:
cf:2a:71:62:78:7c:39:ee:83:42:29:50:e9:4c:69:
e4:46:b0:4c:16:6b:18:09:f8:03:5e:4b:1e:87:bf:
d4:5b:1f:70:55:f2:98:ec:2c:a0:62:91:a1:b4:01:
0c:17:b9:03:49:f6:7b:62:49:a0:17:66:e3:fc:8e:
33:f0:b2:d1:29:54:ef:4d:14:35:2f:64:aa:13:5e:
d8:d1:e7:7e:55:3c:79:56:00:bb:fd:62:b9:02:f3:
a9:21:bc:6b:bd:c0:01:d3:ad:2a:e4:f0:03:19:a8:
73:4e:7a:d4:da:8e:e5:83:8d:a7:db:bd:a2:08:d4:
f1:e7:07:a7:a7:65:b1:61:23:64:ad:08:dc:08:cb:
31:3a:6c:07:b3:7c:73:56:8b:11:b1:f1:b9:d5:46:
cb:4f:17:64:1a:fb:9f:0d:36:c0:03:2c:8f:9c:ce:
e1:1c:1c:1c:d3:7c:53:d0:40:e8:79:05:06:55:92:
90:b2:2b:6e:34:99:19:d5:23:eb:03:bb:6e:7a:c7:
41:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9E:43:00:AE:45:9E:5D:A0:58:80:FB:AE:BB:73:22:7A:F4:A2:EE
X509v3 Authority Key Identifier:
keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5b:4a:a2:79:60:11:0a:60:61:a4:aa:ca:57:7f:6a:2e:15:
ae:d6:05:95:5d:43:43:ba:46:8c:95:5f:69:dd:6d:ea:53:22:
52:66:c2:4d:0a:71:f2:4b:74:74:2d:78:d8:07:16:3e:6d:ab:
d1:77:ce:81:de:bf:02:85:90:14:54:5e:dd:16:c3:bc:e9:53:
9d:d6:25:38:27:2d:3c:16:f8:da:1f:5f:77:7e:86:0f:67:d5:
f9:15:f7:3b:53:e4:32:63:71:69:72:62:5d:8e:be:a1:d6:34:
ff:ae:9e:59:f5:0e:2c:35:db:76:9e:81:8b:ed:03:2f:32:de:
9a:a0:6b:14:ce:b0:7c:28:1e:3c:90:db:6f:c9:d6:f4:0e:86:
38:e3:ae:62:73:0c:3e:08:df:90:41:8b:10:0b:40:39:58:52:
bc:44:ee:9d:ce:37:3f:a0:4b:aa:62:14:f6:e4:a7:70:c3:6a:
56:2d:bb:2f:73:b1:4d:c9:1a:b3:d4:f4:65:33:46:eb:df:24:
e5:82:ed:e7:94:5b:50:23:3e:df:11:82:16:ff:17:66:28:2b:
1c:1f:7e:9c:fa:22:51:ed:15:dd:e2:5c:7a:88:de:95:49:a8:
7c:3d:54:0b:3d:81:b9:6f:65:df:27:14:19:af:87:80:bb:ea:
5a:d2:20:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:23 2025 by rpki-client