Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
File: rf_xvXcSh87UxN1tioUdKtdwZh0.mft (raw, json)
Hash identifier: bWus0LOxxkfvMU+eyPWXJFrJv2sL3yommqyzkZ6eqdw=
Subject key identifier: F0:5F:83:E9:27:D9:C4:50:46:8D:82:0D:6E:8F:C8:8C:F1:5D:D1:6B
Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
Certificate issuer: /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Certificate serial: 019774528D9BF3F815D77E7D74B209CEC142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
Manifest number: 1595
Signing time: Sun 15 Jun 2025 16:00:56 +0000
Manifest this update: Sun 15 Jun 2025 16:00:56 +0000
Manifest next update: Mon 16 Jun 2025 16:00:56 +0000
Files and hashes: 1: a5yaKlijnL4kZ_oj1IyssANoPrY.roa (hash: Ldfc6br/bRY5cT98+AAZmtT6be1fhfXCxblPXo1RRow=)
2: rf_xvXcSh87UxN1tioUdKtdwZh0.crl (hash: eZTWzxnAPHRPWaG2sro4fqWRrQEmLyyokW7MpBde3go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:52:8d:9b:f3:f8:15:d7:7e:7d:74:b2:09:ce:c1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Validity
Not Before: Jun 15 16:00:56 2025 GMT
Not After : Jun 16 16:00:56 2025 GMT
Subject: CN=f05f83e927d9c450468d820d6e8fc88cf15dd16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:e1:ec:3a:09:aa:c0:02:55:26:82:65:a7:
85:c5:78:f6:35:cd:38:ca:4a:e8:83:c7:6b:05:bb:
ae:77:1f:06:7a:9c:3c:86:91:20:a4:c7:7c:1f:0a:
81:87:a4:a9:26:db:79:68:3c:e0:36:95:66:7a:6d:
19:f8:69:de:29:34:b8:16:82:24:ae:3d:1f:31:b8:
17:c5:59:af:c8:8d:2b:a4:bf:0a:f0:e4:ba:3f:f8:
5e:e5:87:2c:92:72:ce:da:91:eb:2c:a6:09:0f:4c:
ec:d8:50:1e:b2:b5:14:c8:b0:1f:18:5d:12:28:00:
fa:86:d3:39:5b:82:78:c9:bf:ef:c6:6e:8b:b9:ab:
8c:59:eb:c9:d0:72:63:e4:10:c4:dd:c5:ec:e2:0c:
27:29:da:5a:d0:04:28:f4:54:64:9a:e8:84:20:40:
98:1c:95:22:5e:b4:0c:c7:dc:bc:6f:df:3a:72:f6:
6a:ae:7f:e5:86:d8:d6:45:85:83:63:80:5d:46:f1:
50:ef:3f:1e:a4:72:64:36:68:37:6c:72:04:bf:0e:
de:ef:dc:8e:51:9a:2f:a8:ad:0e:85:10:5d:85:b3:
bc:4e:2b:bd:4f:99:66:fb:09:0f:05:11:fa:f2:b5:
cc:85:1c:2b:9e:31:bd:af:12:db:01:6b:fa:0c:72:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5F:83:E9:27:D9:C4:50:46:8D:82:0D:6E:8F:C8:8C:F1:5D:D1:6B
X509v3 Authority Key Identifier:
keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d6:9a:cb:82:91:10:df:a4:40:bc:f4:ee:98:bd:58:49:4c:
26:29:9d:25:16:63:bb:62:77:7f:7e:05:08:91:5d:c7:a9:38:
ea:c5:3d:2c:2d:53:48:99:07:39:75:f4:e6:43:5d:de:ec:e9:
e1:e5:15:99:21:d7:7a:61:b5:a5:27:ac:9e:c0:66:33:62:5e:
97:43:22:00:4f:32:5d:d0:dd:1d:05:48:6a:0f:20:1f:2c:4c:
f2:aa:4c:68:8e:75:2c:7d:11:76:31:c5:bf:99:e2:8c:f2:99:
2b:32:e4:8b:0c:b9:b2:68:19:a6:68:81:2d:b2:cf:8d:34:ae:
54:ef:eb:1c:cd:c0:14:ed:c1:2f:25:4a:b8:1b:20:fc:33:4d:
05:b9:55:2e:9d:bd:59:a6:06:90:5c:5f:35:c7:20:71:45:04:
17:57:02:5d:f8:5e:9b:cb:73:23:44:c9:d9:dc:6f:4e:f7:bf:
73:da:ea:39:70:18:5e:47:e3:79:d6:1c:40:23:a3:fd:86:f9:
76:cf:40:73:27:50:fd:b2:91:27:5b:64:a2:73:e6:ea:7f:a3:
d0:b6:dc:68:68:8d:a0:4e:34:87:b6:44:89:d9:6d:c2:8c:46:
05:d2:b3:51:e4:a9:81:d0:6a:8e:8b:eb:98:53:47:6a:77:b3:
a6:1b:ba:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:40:58 2025 by rpki-client