Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
File: f1Eig3R0LfVEqpMFjFo709FkIZk.mft (raw, json)
Hash identifier: XKmXPP1AgMXZ8xJLWy/096z1mzl/r0qwj62s0tsEjDg=
Subject key identifier: AE:47:70:48:28:E2:29:65:FE:6B:4F:55:C9:02:D1:75:EF:57:5F:DF
Authority key identifier: 7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
Certificate issuer: /CN=7f51228374742df544aa93058c5a3bd3d1642199
Certificate serial: 01977151509FA2D2F3C2BF8D8F436EDA6472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
Manifest number: 0D01
Signing time: Sun 15 Jun 2025 02:00:43 +0000
Manifest this update: Sun 15 Jun 2025 02:00:43 +0000
Manifest next update: Mon 16 Jun 2025 02:00:43 +0000
Files and hashes: 1: f1Eig3R0LfVEqpMFjFo709FkIZk.crl (hash: +5osq914TcPZbrM1fMBBapBZxSLCKjGnGvgYvBqEcLA=)
2: uNHn3nGofmcHl4lM7HkivQe_5zI.roa (hash: P5wPJ1eLs+Pe8c3zQ6YiOWLNnnfuv2xAEXiikikIGBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:50:9f:a2:d2:f3:c2:bf:8d:8f:43:6e:da:64:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f51228374742df544aa93058c5a3bd3d1642199
Validity
Not Before: Jun 15 02:00:43 2025 GMT
Not After : Jun 16 02:00:43 2025 GMT
Subject: CN=ae47704828e22965fe6b4f55c902d175ef575fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:65:c3:62:b3:8d:bf:20:52:a3:c4:32:5a:
4b:0d:04:cb:4c:57:a9:02:4e:72:02:9d:6f:8f:d3:
22:ec:4d:c4:50:0a:80:30:2d:4f:a7:96:57:68:24:
b0:7f:32:a4:49:37:0f:fb:31:d0:42:7f:0e:c4:f5:
90:df:1a:08:90:ff:e2:4e:75:36:11:1c:a5:5b:c3:
72:a5:b6:4c:cc:9a:8a:ad:dd:77:e4:84:63:83:82:
f3:eb:ff:f7:aa:7b:08:51:e2:02:e8:22:da:a8:a4:
6b:70:de:67:7f:f9:3e:95:15:cf:c0:b8:3c:b1:dc:
f0:a8:42:70:86:38:21:7f:a6:57:81:9f:ee:10:91:
aa:f8:1d:ff:ce:1c:0b:eb:a9:3e:a9:30:f6:5b:e5:
ba:af:2a:0a:9f:bc:40:be:fc:cd:43:56:e2:fb:4a:
04:c1:12:85:54:b6:ab:0e:1d:79:db:fe:80:b7:4c:
e7:c8:96:87:0f:6d:85:56:c5:9f:74:d4:17:22:ba:
bb:5e:0f:c5:e7:f3:f2:fa:7d:d1:53:a3:8e:b8:5c:
ff:d0:1c:33:7e:63:f9:43:58:83:b3:c1:71:b0:98:
d6:ea:07:72:36:0e:21:a9:a0:ff:71:69:3f:98:09:
8d:3b:19:57:3c:d4:bf:e9:dd:92:14:b9:02:8b:9f:
04:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:47:70:48:28:E2:29:65:FE:6B:4F:55:C9:02:D1:75:EF:57:5F:DF
X509v3 Authority Key Identifier:
keyid:7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:56:e9:7c:96:d0:e2:5d:cb:34:71:8d:2b:69:8f:8b:02:23:
b0:ac:b8:58:ed:74:c6:f0:dc:5a:bb:03:a3:8e:5f:ba:d9:b5:
a5:32:48:cb:e0:3b:39:05:29:9e:2c:87:2f:1f:22:fe:56:e4:
41:1c:b3:b0:b7:35:fe:e5:7c:1e:f6:98:34:fb:48:cb:a9:d1:
c7:3b:bc:16:c0:88:2c:f6:06:f9:45:98:56:af:80:4f:24:30:
cb:ce:65:17:ec:31:16:67:34:ea:fc:52:62:05:58:1f:f2:28:
d6:ce:b6:6d:ec:56:0d:59:6c:e6:ac:13:36:a4:81:ea:ca:5d:
2b:08:e2:59:af:17:2a:b0:e5:98:fa:6d:74:17:d1:69:b2:60:
72:e7:54:56:c3:d2:18:20:3a:6e:09:a4:e4:c6:fa:89:76:e1:
aa:4a:37:2c:e9:01:4e:39:da:6d:05:17:70:f5:21:53:65:0d:
09:13:da:2c:4a:35:5b:94:d0:f9:35:57:e2:d4:77:4d:4b:c0:
81:aa:5b:fb:ef:fc:ba:2b:19:87:f1:87:46:43:03:33:8d:62:
c3:a2:16:2b:04:80:a5:30:6d:a8:c3:47:c2:3d:ed:a8:e9:d5:
b5:5e:03:f0:17:b4:27:e6:9d:17:90:ea:e9:f1:cd:d2:7d:03:
5a:ce:57:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:58:21 2025 by rpki-client