Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
File: 1-RVYjvgFRokoxj2rCGMAheXQj2U.mft (raw, json)
Hash identifier: UGdz2FhmjpLo5ekne6iH6DkIXSXsVSBnjeV5BeKMjYo=
Subject key identifier: 07:86:41:87:70:12:A3:B6:42:86:5D:71:81:C6:F3:1E:57:EE:14:C1
Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
Certificate issuer: /CN=f915588ef805468928c63dab08630085e5d08f65
Certificate serial: 019776E55FE24D3D4A1DC957B3127A4AC6C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
Manifest number: 1596
Signing time: Mon 16 Jun 2025 04:00:33 +0000
Manifest this update: Mon 16 Jun 2025 04:00:33 +0000
Manifest next update: Tue 17 Jun 2025 04:00:33 +0000
Files and hashes: 1: 1-RVYjvgFRokoxj2rCGMAheXQj2U.crl (hash: KgEoExF4xVh5Kg4bHutNqyOlojDvZ/EzbCef4VWdt2A=)
2: kSpoSxHKDe6NIGWDkuL60L15TUg.roa (hash: H+OsucCLJz/FqkNDXLyLTzKpNO9y1yCy5pgD6JvPI6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:5f:e2:4d:3d:4a:1d:c9:57:b3:12:7a:4a:c6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f915588ef805468928c63dab08630085e5d08f65
Validity
Not Before: Jun 16 04:00:33 2025 GMT
Not After : Jun 17 04:00:33 2025 GMT
Subject: CN=078641877012a3b642865d7181c6f31e57ee14c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:63:db:97:5d:26:68:f0:2d:45:6d:51:a9:
d3:2b:7d:18:1b:f7:c6:c6:74:f8:7f:67:9a:30:32:
d3:09:be:61:e6:ba:59:88:ee:56:31:2c:4c:d9:92:
80:55:88:3b:df:7b:51:4b:68:9d:02:54:68:9e:df:
7d:ee:e5:f5:b9:ab:e8:cb:5e:d2:5d:f5:0b:b7:11:
bb:b8:eb:08:f9:ec:e4:78:ef:c4:e6:2b:a6:71:c9:
0d:f6:ac:20:aa:5e:78:22:24:b1:05:5b:45:e7:50:
70:7c:6a:a2:ac:a8:b2:b1:5c:7f:25:17:5b:4f:92:
0c:9e:a6:b5:61:4c:14:48:5e:99:a0:08:08:b4:c7:
92:c0:e7:50:c3:5f:9b:ba:c6:16:70:44:33:eb:b0:
4b:89:b9:f4:2c:b5:e4:c2:bf:67:60:bc:e2:19:9a:
28:08:b2:ba:b0:f9:9f:8d:b6:66:49:3f:4c:05:db:
96:10:a6:53:61:a7:1f:fb:18:78:39:9f:66:8e:db:
38:56:03:9f:1c:98:bf:f0:b0:6c:c7:37:36:2f:96:
f7:b9:8f:83:c6:c7:a4:5b:e8:78:8c:7a:f8:d9:c2:
92:fb:da:03:63:0a:6e:a9:74:cb:e0:8a:ee:b7:ec:
24:c7:dc:7c:94:f4:e7:01:42:ec:43:fa:f7:61:d9:
14:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:86:41:87:70:12:A3:B6:42:86:5D:71:81:C6:F3:1E:57:EE:14:C1
X509v3 Authority Key Identifier:
keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ab:e4:7c:69:19:94:63:66:4d:a3:1c:be:88:b1:c6:0d:a9:
d8:61:8d:69:94:8b:a8:dd:15:1c:b4:d2:cd:b5:5e:06:d0:b6:
ef:67:4d:98:7c:d6:39:aa:76:c7:7d:9b:e7:d0:2a:b6:b0:10:
f3:fb:ba:60:1d:63:92:cc:d7:03:96:6a:b3:f8:75:af:8e:19:
cb:14:ba:2a:be:a0:b4:1c:e0:e2:d4:7a:30:9a:05:a1:6e:a7:
8a:14:1f:32:ee:10:5e:76:c8:4c:55:8f:1b:c4:22:23:24:e6:
53:fe:21:57:25:3d:e7:f0:2c:6d:10:d3:6b:d0:ba:bb:77:21:
d7:dd:32:f2:65:cc:d7:92:4a:51:e1:53:e0:68:14:29:41:92:
13:00:f3:12:99:43:d1:2b:f3:0f:f7:c2:fc:66:0e:45:d2:11:
a8:66:f8:6d:9b:14:5d:be:fa:e8:88:00:ef:3e:07:5c:56:18:
c5:03:db:62:27:c7:e1:07:11:6e:1e:5a:17:4c:6c:a5:de:7a:
78:f8:66:d0:34:27:d1:fa:f9:96:83:1c:4e:f8:17:56:97:ba:
c8:0c:47:7d:8e:94:41:ff:95:e2:1b:01:09:90:1c:77:7a:00:
83:85:38:da:ac:f2:83:1d:a6:c0:eb:7c:45:95:0a:f5:3d:42:
97:38:46:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:19:40 2025 by rpki-client