Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
File: 7d1hus9lTmZdkSp23o9jtQBMfkg.mft (raw, json)
Hash identifier: 8lNQ9GYbO53CfSnRQGvyofBbo3bPCFQ8xT+77w5IADQ=
Subject key identifier: 2D:4D:6C:36:FD:66:C0:13:67:F7:60:2C:76:6F:31:3F:D0:4F:30:40
Authority key identifier: ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
Certificate issuer: /CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Certificate serial: 019777C1214A8A900FAE4F17A51687285AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
Manifest number: 1596
Signing time: Mon 16 Jun 2025 08:00:35 +0000
Manifest this update: Mon 16 Jun 2025 08:00:35 +0000
Manifest next update: Tue 17 Jun 2025 08:00:35 +0000
Files and hashes: 1: 36Bb65z44MAsVTDbQRVeDeDmufQ.roa (hash: uPSc0dWD/LjqPKmpNOCLQpNBH6/TFH+CbImLmGpMPVg=)
2: 7d1hus9lTmZdkSp23o9jtQBMfkg.crl (hash: 4gufg/PjGHijlH/+Q96vzHfklz4muGZnQtlgwf0IJ5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:21:4a:8a:90:0f:ae:4f:17:a5:16:87:28:5a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Validity
Not Before: Jun 16 08:00:35 2025 GMT
Not After : Jun 17 08:00:35 2025 GMT
Subject: CN=2d4d6c36fd66c01367f7602c766f313fd04f3040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:08:ab:c6:09:ee:ce:ee:54:6c:08:bc:c7:69:
ff:2c:50:fd:32:e5:19:19:2b:59:f5:d4:82:a7:e7:
2d:78:e4:5d:c9:16:47:82:8a:ed:13:43:69:d3:78:
ca:f0:a3:3a:5a:53:bc:51:d0:74:fe:57:5b:1f:96:
d8:33:d8:51:6d:0d:a4:6f:e5:ae:56:ea:ac:a8:a2:
26:58:09:73:7b:3b:ce:24:84:9b:a1:d1:8a:62:fc:
a9:be:92:4e:78:dc:1f:b8:c4:cc:1d:e1:e2:ae:1e:
a3:2b:3f:e0:47:12:ad:4d:a8:f4:40:79:f3:58:a3:
14:8c:89:12:d7:d2:18:ce:ee:0f:87:1f:34:56:db:
16:4d:c3:26:35:9c:ad:56:b1:54:79:4f:44:ac:be:
1b:57:b1:ae:ea:b0:4b:74:86:8c:9e:16:c8:93:67:
a9:7c:e3:3a:d3:82:53:b7:e9:67:aa:34:31:42:73:
32:4a:dc:07:73:17:e7:e3:21:b5:b5:da:93:25:e1:
e0:a5:5f:50:aa:fe:87:a4:f9:3f:b1:48:58:0d:c3:
ed:32:cc:e7:34:01:63:d2:3d:3b:2c:46:0b:a2:4b:
0a:e9:e7:53:84:8e:c9:5d:b5:b1:98:d4:7a:c2:ae:
d3:d3:24:32:9e:02:8f:21:7d:e9:a4:23:66:cf:36:
17:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4D:6C:36:FD:66:C0:13:67:F7:60:2C:76:6F:31:3F:D0:4F:30:40
X509v3 Authority Key Identifier:
keyid:ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d8:6e:45:26:b6:45:f4:55:0f:68:1b:05:29:3c:b7:0d:54:
1d:53:fb:7c:4d:93:6b:43:22:c1:ed:09:57:22:cc:7d:d6:bd:
73:11:fa:6f:09:4e:6e:4f:3c:7a:25:d6:59:ca:db:40:44:8d:
7b:53:6d:37:a6:66:1b:f9:04:0b:b7:e9:36:3e:c1:28:66:b0:
7b:43:e2:f2:f7:66:54:3e:88:ce:46:aa:ab:67:ef:82:cb:86:
a4:3a:45:76:c6:8e:e7:78:3e:9d:74:98:b3:ac:78:da:33:60:
ce:e7:e0:e3:27:b6:a6:4e:75:ab:c4:69:28:8f:9f:91:5d:bb:
e7:92:8e:ac:49:26:b9:10:c7:f8:7e:8c:99:7d:42:b2:47:b2:
4c:cd:db:04:38:a8:2f:37:de:c7:42:28:29:85:c9:35:b2:73:
60:76:23:20:40:a5:ca:1d:6d:2b:c5:12:03:e9:58:7c:ca:e2:
33:2b:01:93:f6:05:99:d1:a5:d1:da:14:81:1e:a3:4f:5c:86:
04:08:4c:48:6e:f6:95:2c:75:b0:62:f8:d8:18:94:e9:8c:ef:
30:6d:82:72:8f:b2:b3:da:b0:97:b4:35:ec:70:1e:4b:59:43:
d2:88:cd:db:34:fa:7c:00:2e:76:1c:34:97:10:8a:e6:dd:11:
a5:11:7c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:47:17 2025 by rpki-client