Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
File: 1dzeISXwQFitT0eOF4iEFCzy2tA.mft (raw, json)
Hash identifier: 1cxRpoX+psBxIgRwn8p0LvejuCCBwhA6cTrlVX0i6x4=
Subject key identifier: E0:06:A0:20:91:82:E8:D3:C1:3E:B7:5B:69:A3:E7:BF:D2:5A:B2:A9
Authority key identifier: D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
Certificate issuer: /CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Certificate serial: 0197B7EA4A3199D0D9E12500A88B344EF6D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
Manifest number: 0F7E
Signing time: Sat 28 Jun 2025 19:01:14 +0000
Manifest this update: Sat 28 Jun 2025 19:01:14 +0000
Manifest next update: Sun 29 Jun 2025 19:01:14 +0000
Files and hashes: 1: 1dzeISXwQFitT0eOF4iEFCzy2tA.crl (hash: EW9q+rKJ76x9NZDOctikIQ6hyXSg6vkEk2e1utMlcsQ=)
2: 7RKc8XFi1ZBpZ1fyV1l65spfKVc.roa (hash: hdKthzCCiG0nuzNYJsrtq6rpWOtWCqRiyWfbA+gnE5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:4a:31:99:d0:d9:e1:25:00:a8:8b:34:4e:f6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Validity
Not Before: Jun 28 19:01:14 2025 GMT
Not After : Jun 29 19:01:14 2025 GMT
Subject: CN=e006a0209182e8d3c13eb75b69a3e7bfd25ab2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:6a:2d:d0:6e:4b:08:dc:bd:81:c2:7d:1f:
c8:ed:b4:cc:60:ac:1e:2e:20:6f:a5:99:4f:92:f2:
64:8e:a4:14:93:9d:bf:63:3e:92:ac:06:c9:24:5e:
22:b7:80:43:83:4c:14:93:54:e5:88:1b:2e:2e:6a:
b7:ef:73:48:ca:47:26:df:8b:d5:ee:74:1b:15:3f:
28:fb:a1:80:a4:0d:bf:79:3e:f6:49:53:9e:08:7a:
94:ef:03:64:3b:5f:93:48:ec:3a:9f:78:48:b4:55:
46:04:33:80:11:fc:7a:b3:f7:f0:ec:79:59:25:b0:
2f:c6:85:33:ae:62:11:f0:59:82:91:f2:65:d0:db:
fc:71:22:5f:be:bf:01:12:6e:a7:df:23:8d:00:84:
3f:76:1a:7e:23:03:94:92:e6:5b:82:b4:f1:c6:22:
60:b0:2d:b8:b7:5a:4a:66:fb:e8:27:e5:ee:1f:1f:
ae:11:9d:75:6a:e8:08:c1:33:02:07:cb:11:8d:b0:
49:0c:e7:5a:d0:14:4a:50:60:de:8f:33:09:5c:11:
81:19:84:6b:08:d4:27:fc:e9:cb:81:6d:3e:52:f2:
08:96:d7:50:75:03:ec:0d:3c:a3:23:78:35:db:e6:
4f:f3:ed:f6:a1:60:92:6c:dc:bd:b0:77:59:9c:c3:
09:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:06:A0:20:91:82:E8:D3:C1:3E:B7:5B:69:A3:E7:BF:D2:5A:B2:A9
X509v3 Authority Key Identifier:
keyid:D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c0:a9:1b:ab:e3:19:5f:e7:d5:01:68:bc:c4:60:14:4c:77:
56:66:6f:ad:f0:73:a7:21:1e:c9:ad:b3:89:8d:8b:6e:f8:f5:
f7:48:9f:f2:36:c6:e9:78:c8:d4:3e:97:54:89:ce:4b:9a:4d:
d2:a0:ca:29:7b:8e:e2:62:8d:87:a6:19:6e:49:4d:6b:ae:72:
98:43:a7:04:02:c1:c3:ca:17:64:35:26:46:20:99:a4:84:07:
26:17:8d:50:b2:89:a6:9a:12:9f:2d:65:a9:1a:bd:70:33:5c:
4a:a3:e0:81:7e:c7:3b:17:c1:6c:d7:90:12:e7:ee:5c:7b:16:
70:ac:ac:85:43:2a:92:dc:70:3c:81:d0:f4:6c:5b:5d:a0:b4:
25:a4:9a:a5:b0:c9:47:66:7b:1d:3b:6f:99:6f:f4:41:55:44:
5d:4a:1b:cf:fa:5f:a8:34:c3:d6:88:fd:2d:07:3e:c5:ae:0d:
f6:af:dd:3a:40:48:e4:46:71:79:c9:45:45:bd:eb:b8:a0:f9:
6c:48:e2:eb:58:53:99:fe:46:d2:9f:9c:21:b4:56:b5:a8:3f:
28:96:f4:b8:97:b3:ca:55:70:74:95:b4:2a:cd:af:60:f5:7d:
26:eb:c6:18:ac:0b:8d:d7:5f:67:bb:1e:f5:a5:30:d8:8d:f4:
a2:58:e0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:06 2025 by rpki-client