Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
File: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft (raw, json)
Hash identifier: MxYPR8SqqDfzJow/FqRdNUaKVyqKFZ8l5pfniiFcWyE=
Subject key identifier: B5:D5:7A:13:B5:A5:D6:15:29:1C:BF:19:71:48:ED:53:E6:99:6E:5E
Authority key identifier: FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
Certificate issuer: /CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Certificate serial: 01976F630B49726FFDCABAF197F47A56DEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
Manifest number: 1595
Signing time: Sat 14 Jun 2025 17:00:51 +0000
Manifest this update: Sat 14 Jun 2025 17:00:51 +0000
Manifest next update: Sun 15 Jun 2025 17:00:51 +0000
Files and hashes: 1: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl (hash: GDDiRltpHR27Em2gplVXsnpT/hBhuvgFo564YnuiIO0=)
2: b1EekpPHczR9SbF16iWNQ3damig.roa (hash: Fw8tFU/rOTZrNv9R1o3/Px5yWIdWmaPwzJuJsuMKmH0=)
3: eADzDJE6P-qH0r5TYUNn_ncYKzA.roa (hash: PxBgbfMtKG6Jth9+kbRfrbslcA+mMm5JhYaaugK0nGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:63:0b:49:72:6f:fd:ca:ba:f1:97:f4:7a:56:de:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Validity
Not Before: Jun 14 17:00:51 2025 GMT
Not After : Jun 15 17:00:51 2025 GMT
Subject: CN=b5d57a13b5a5d615291cbf197148ed53e6996e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:00:47:32:74:0f:8a:26:24:a1:0c:e5:10:b4:
a7:30:e9:67:15:06:f2:70:8b:cb:c0:8c:77:c7:34:
90:58:75:f9:d8:6b:b0:ad:b6:13:39:ef:f0:f5:aa:
b4:5f:6b:fb:8d:fd:81:f1:de:77:58:9d:f2:c4:c2:
41:09:ef:7b:2c:d5:77:52:63:b0:b0:3c:34:e2:92:
7d:4e:95:20:23:fa:59:bb:a2:da:ec:5f:2a:0c:fb:
43:e1:8e:5d:63:bb:38:fc:fc:31:43:f2:be:ff:2b:
ea:2d:f8:96:07:c4:70:3a:d2:f5:bd:7a:31:bc:9b:
38:3c:cf:aa:63:62:d3:01:02:6f:c2:c2:50:f1:5c:
ae:66:d0:81:48:77:bd:cb:2c:46:86:a2:1c:c4:03:
3b:13:c9:b8:0c:5a:87:af:f3:73:85:c4:30:fa:28:
e1:4c:5b:fb:29:bd:af:61:d2:32:20:61:3c:5a:e3:
00:8f:6c:7e:d8:3b:b1:6b:d1:3f:2e:71:0f:56:e5:
39:ff:15:c6:0c:22:b9:a7:24:bf:c1:87:86:ab:0c:
c3:97:ca:6d:0b:37:9f:74:d2:8f:92:74:1b:ae:ac:
d5:27:c7:92:d6:42:35:7e:f5:f2:35:7a:6c:15:95:
b6:69:f8:b0:bc:f7:76:37:ec:88:96:07:34:7f:91:
ff:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D5:7A:13:B5:A5:D6:15:29:1C:BF:19:71:48:ED:53:E6:99:6E:5E
X509v3 Authority Key Identifier:
keyid:FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:27:49:db:67:f4:97:c8:b5:0a:9d:7b:9c:7e:8d:2e:60:d9:
30:ee:70:60:6a:f2:ba:cc:57:36:1c:62:ef:57:e9:af:f5:8f:
7f:d6:65:0e:d9:83:f4:0e:95:35:6c:ec:46:76:53:f0:77:fa:
fe:8c:7b:9e:7b:0c:37:9d:b7:74:92:b7:92:e8:91:fb:d9:33:
43:ee:a1:44:dd:14:8f:9f:0e:73:6b:10:87:4a:96:39:94:f5:
9f:5b:15:79:9e:ec:91:d0:3c:5a:49:e1:b5:ab:20:59:35:dd:
71:15:42:91:c3:03:d3:7f:95:c9:12:30:f2:3e:2e:1c:bb:39:
c3:17:af:2c:81:06:2f:d2:52:ee:b9:d7:ca:23:f3:0d:2b:16:
e7:94:72:87:63:e6:a1:11:25:42:b2:c6:85:a5:b6:0a:4e:32:
b1:a9:ac:96:50:ee:e9:04:e1:80:f2:2b:19:ab:29:23:4a:b9:
ad:d8:bc:ed:83:b4:59:3d:1b:0d:f6:59:33:eb:68:48:09:04:
7e:29:fc:61:65:df:04:de:b9:aa:c1:b4:12:1b:e8:b0:69:31:
76:42:23:cc:cd:05:ee:18:6d:48:89:28:c1:19:40:8d:57:15:
e8:d0:9a:ff:f2:65:6f:f5:b6:e6:73:71:ab:88:33:14:f5:a9:
f0:ab:10:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:58:08 2025 by rpki-client