Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
File: RPTFphl4VJskg4j530SdKpXhCgc.mft (raw, json)
Hash identifier: Vl++/Oq96wmDnNJpqh1pk5Xvr42HTrSDnZqViw4FAnQ=
Subject key identifier: 33:D4:44:7B:97:BC:07:CD:82:5E:53:24:34:ED:73:0D:8B:F1:0F:8D
Authority key identifier: 44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07
Certificate issuer: /CN=44f4c5a61978549b248388f9df449d2a95e10a07
Certificate serial: 01977CB09E0FC3408293E2148744A3ADD9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
Manifest number: 1597
Signing time: Tue 17 Jun 2025 07:00:38 +0000
Manifest this update: Tue 17 Jun 2025 07:00:38 +0000
Manifest next update: Wed 18 Jun 2025 07:00:38 +0000
Files and hashes: 1: RPTFphl4VJskg4j530SdKpXhCgc.crl (hash: Ac7vTrFazOcB4DtxpOxs0dt1KmiLW2NRpesq0HNFxKg=)
2: ios5KWpmGZUyejt9fTyM20Kq3iQ.roa (hash: ueEa/mQzKdPiJu8mODUSR4ctsWUuOZw5Ht5pcIUfCfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:b0:9e:0f:c3:40:82:93:e2:14:87:44:a3:ad:d9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f4c5a61978549b248388f9df449d2a95e10a07
Validity
Not Before: Jun 17 07:00:38 2025 GMT
Not After : Jun 18 07:00:38 2025 GMT
Subject: CN=33d4447b97bc07cd825e532434ed730d8bf10f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:dc:47:b4:b3:37:70:e4:7a:b9:cf:c6:7c:ba:
d4:02:a9:1a:10:62:a8:d0:31:09:40:c1:c7:52:6d:
fc:65:2b:62:11:d2:9a:ac:c2:42:0a:06:c7:8d:43:
86:0a:be:42:4d:b2:b3:70:d0:7c:32:df:94:64:4a:
9e:0a:f9:1d:48:b6:36:fe:f5:e4:78:2e:13:7a:a6:
6d:69:17:2c:18:5c:a0:56:54:9e:53:ab:83:c2:5e:
62:98:90:8c:47:f7:61:13:c8:83:9a:e4:64:67:2e:
2a:10:41:8e:0c:71:04:c7:cf:12:3e:25:a1:fa:2b:
5c:cd:56:1b:32:40:f0:56:4d:8f:99:9d:08:f1:70:
18:23:ad:77:8b:84:d0:48:0e:c4:3a:c4:2d:c6:6b:
ad:3a:6e:d1:c7:51:80:56:b9:7d:84:22:79:05:2a:
60:4b:03:fd:67:3a:53:a6:c6:c2:b7:53:ae:e2:d0:
3e:3e:e9:2a:7f:11:bd:09:b8:02:69:21:1e:44:9f:
3d:0c:34:e1:61:62:c2:d2:d2:cb:92:d2:5f:12:89:
0f:0c:98:6f:3d:8b:85:47:ca:81:5c:82:d6:c4:7a:
6a:d2:93:4a:0e:7c:fc:2c:39:a8:be:84:c1:ab:85:
89:93:c5:07:0d:2b:26:99:eb:82:3c:4a:f4:a7:a8:
39:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D4:44:7B:97:BC:07:CD:82:5E:53:24:34:ED:73:0D:8B:F1:0F:8D
X509v3 Authority Key Identifier:
keyid:44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a1:61:52:9f:8e:bf:9b:52:03:2c:1a:e9:8d:fb:db:57:90:
22:66:fa:98:0a:bf:d9:62:20:c8:45:6c:3f:40:7d:a8:fc:ec:
81:c2:bd:c1:15:b1:92:f9:38:9e:89:bc:3c:49:f1:71:80:cb:
b9:e7:61:2c:95:a4:99:86:39:f7:40:c3:33:1e:f2:8f:0b:bc:
f3:92:f0:4e:9d:b6:92:bb:53:f9:12:71:f5:19:1b:2f:2e:44:
ba:70:6e:86:2c:6f:7f:34:ff:56:21:d0:86:b1:72:3a:2c:80:
78:53:48:e2:62:b0:2e:81:97:54:f4:7b:b9:5d:a3:74:14:bd:
5b:a3:d4:9c:aa:83:91:15:32:d5:46:a6:94:e8:e2:16:76:48:
0d:8d:ea:65:74:80:df:76:bf:4f:30:9a:83:86:83:e0:17:27:
45:03:53:f6:02:ab:6b:1d:9e:ae:ec:84:83:ab:74:f1:04:17:
0b:19:05:04:5b:fd:58:57:70:fc:62:3e:d1:6b:a1:e8:8c:ac:
1e:6c:2d:75:90:ec:4f:17:bc:59:5e:77:37:e9:28:b3:38:0c:
02:fc:b5:75:3d:46:4d:de:be:69:1a:c3:cb:f7:a4:2c:bb:7b:
83:3b:0b:f5:7d:47:28:7a:e6:a9:fc:fb:91:ab:dd:f2:4e:28:
a6:63:47:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:48:33 2025 by rpki-client