Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json)
Hash identifier: ZKu5sIsR0a3OF/wewACAFuUJbf5c4Fu+CEsxcQrjwsQ=
Subject key identifier: AB:48:43:05:86:A9:B5:E8:A8:8A:DE:8E:E3:CD:9F:73:FB:79:B2:62
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 01976E19389F494DE5C9BBC93C0545BEF932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 11:00:35 +0000
Manifest this update: Sat 14 Jun 2025 11:00:35 +0000
Manifest next update: Sun 15 Jun 2025 11:00:35 +0000
Files and hashes: 1: pA8DlYtcvRNA-jdEe_3R7YRB6rk.roa (hash: XB3O2NdSBoC9ldQGDUty/6gqx/qt/ZpvhUOCQP6iI1c=)
2: rg67AeqtMD0wJ1IIvMd4YeaFTyI.roa (hash: po3w7Qi8ZlRiTSE2vYAsVYJZWCbY0SnfvN8Hrjn9vnc=)
3: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: laRlCg5tNlMUQGrjRMD0wrJDnGw2WsWVwwxswcpiMRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:38:9f:49:4d:e5:c9:bb:c9:3c:05:45:be:f9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: Jun 14 11:00:35 2025 GMT
Not After : Jun 15 11:00:35 2025 GMT
Subject: CN=ab48430586a9b5e8a88ade8ee3cd9f73fb79b262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f8:c0:63:0f:70:68:86:f1:aa:62:9b:2e:4f:
d0:83:ec:b2:b8:40:fb:6d:cf:47:02:19:ca:db:56:
d7:f7:a7:41:f4:32:a9:84:16:dd:a7:12:bd:c3:d9:
33:6c:3c:ad:1d:ce:af:ce:63:f0:20:3f:8e:be:6d:
76:88:0e:2d:1c:22:1d:5f:35:14:a9:2d:ab:05:f4:
a4:d0:6f:b8:01:0c:c8:a0:10:bf:14:b9:d9:28:e8:
8f:bd:12:22:e4:ba:ea:8f:d9:85:09:53:f0:0b:b2:
5b:ff:d5:b3:78:58:c3:8a:62:72:9d:c5:f1:e7:9c:
64:72:94:62:96:e8:3e:35:14:f9:96:82:70:be:8d:
ab:32:f2:bc:27:0c:48:cf:05:3d:06:18:07:be:7c:
22:6c:01:45:93:2e:c8:33:45:10:e4:c8:74:b2:32:
33:9f:20:1b:bd:d4:b8:a5:51:02:fa:43:9e:1a:8a:
4c:01:0f:e2:92:51:30:b7:a2:6e:31:dd:bf:8e:38:
20:9b:9f:0e:fe:13:aa:11:82:ac:90:3a:60:05:72:
0e:14:cf:e3:bb:7d:0e:5a:75:da:3a:5e:1c:17:4d:
56:0b:90:35:a7:3a:b0:62:9e:96:a9:b7:1e:67:16:
cd:fb:86:d9:3d:67:40:c5:c6:23:a7:f5:2d:35:1e:
2f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:48:43:05:86:A9:B5:E8:A8:8A:DE:8E:E3:CD:9F:73:FB:79:B2:62
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4d:85:36:73:49:30:fe:25:35:8e:2f:eb:5a:4b:82:c7:51:
37:88:90:22:6c:e0:10:5d:3e:6c:39:79:ec:d6:0c:6c:d6:cc:
55:0e:29:f8:40:a8:87:69:8b:1d:f6:64:ed:86:29:32:2f:91:
1c:70:a4:5d:6a:93:e2:13:bd:a2:a8:4e:71:fa:ba:7c:d4:6f:
93:dc:f7:18:f2:08:10:a5:01:28:7f:aa:3d:d6:4b:9e:76:4c:
91:ad:7d:10:04:15:67:f7:fa:dc:d3:06:02:18:4b:2c:3e:9c:
89:29:a2:c0:0f:27:71:0f:5f:ed:76:b5:e2:99:06:f8:a9:72:
5a:51:f3:f0:d1:70:fd:37:ba:8f:59:45:05:ac:26:cc:1f:37:
e7:7f:9a:79:a4:18:1a:69:cb:61:79:c6:ad:e2:d5:be:e1:e4:
42:a8:f4:24:0b:27:b4:2c:f6:d1:68:65:44:ad:e8:f8:b2:db:
c4:27:7d:db:04:31:fa:2d:77:79:1c:72:12:2f:a8:9f:2d:01:
82:60:e3:c6:5d:6a:cc:1f:20:13:2e:fb:e7:16:d4:e9:98:b6:
6b:2f:25:f6:f2:df:9d:b2:a4:37:d8:7e:2d:17:91:f5:2f:4c:
a0:21:2a:c0:04:6f:d2:97:82:76:7c:a0:a9:66:71:b4:24:f1:
ea:cc:a8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:51:14 2025 by rpki-client