Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
File: 1aCF65WtVfs6ayR-lngRKhTYGSY.mft (raw, json)
Hash identifier: E+gCWbuYRyug3hY9dzGr2meWjc6o2D4MUQgViJFAaiM=
Subject key identifier: 9C:D2:EC:8C:EC:35:1E:C9:8E:C6:07:69:D2:CB:71:22:16:1A:60:58
Authority key identifier: D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
Certificate issuer: /CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Certificate serial: 019773771A879BB78F78AB84BED073276573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
Manifest number: 0780
Signing time: Sun 15 Jun 2025 12:01:14 +0000
Manifest this update: Sun 15 Jun 2025 12:01:14 +0000
Manifest next update: Mon 16 Jun 2025 12:01:14 +0000
Files and hashes: 1: 1aCF65WtVfs6ayR-lngRKhTYGSY.crl (hash: 2FVxBv9jJIb6lE2dSTkJGwYFQqHCNI0cPW8g37NkY0I=)
2: Gfuw2x_T8yQVyP6ui29Llxbnd0A.roa (hash: Gjo+1HCWQtVB1KVlZemBlfNk1FD9JNsAIkXhqPnWnlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:77:1a:87:9b:b7:8f:78:ab:84:be:d0:73:27:65:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Validity
Not Before: Jun 15 12:01:14 2025 GMT
Not After : Jun 16 12:01:14 2025 GMT
Subject: CN=9cd2ec8cec351ec98ec60769d2cb7122161a6058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d1:cc:de:f9:b6:81:98:b7:3d:de:a4:6e:91:
ff:ae:78:e3:75:a4:27:42:4d:97:b1:c4:84:47:6d:
21:b7:2d:76:30:d5:3f:23:76:5a:31:e2:e8:68:1b:
bd:a1:cf:35:d0:50:b4:76:3e:e6:6a:26:c1:ac:57:
03:ad:d8:03:42:65:30:8d:4e:0e:c8:eb:24:c4:cf:
cb:66:72:87:52:54:43:92:d0:9c:e4:dd:0d:d5:37:
e0:b5:bb:e4:8e:24:b1:7e:98:0a:7c:f6:20:92:98:
a9:85:a6:d2:ca:2f:ef:a6:4e:1b:f2:9b:ec:21:19:
2c:a9:4b:86:08:c1:09:82:ae:3f:80:da:6b:cb:41:
42:37:d7:6a:a6:eb:1a:61:f1:2e:ea:9d:b8:73:2d:
08:77:57:ec:4b:57:cf:3c:61:aa:fb:ac:68:d5:79:
fa:2a:a8:18:f3:53:8f:f3:4c:fe:34:0f:0e:1b:38:
0e:8c:f5:0d:c6:2c:4c:a4:5f:4d:81:cb:68:54:45:
ea:40:4e:42:33:ed:1f:84:84:a5:e9:a3:66:8c:d3:
66:19:26:02:c1:f9:84:87:6d:f4:a9:c3:00:b8:88:
93:2d:ee:f1:7e:98:1d:50:14:06:00:78:c0:f9:eb:
8a:8d:06:67:d7:0a:8c:6e:fc:e4:c3:df:8f:d5:d4:
0f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D2:EC:8C:EC:35:1E:C9:8E:C6:07:69:D2:CB:71:22:16:1A:60:58
X509v3 Authority Key Identifier:
keyid:D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:75:4f:ed:8a:a2:62:b8:38:6a:17:00:d4:7e:da:88:2f:46:
59:30:6b:f5:8a:e7:b6:e4:5c:2b:16:e1:f2:7f:91:1b:48:2b:
27:41:2c:99:6f:7e:a4:a5:5e:31:2e:a7:1a:b8:9c:36:06:84:
f3:dc:43:9a:ce:73:95:bc:32:57:38:f8:7c:74:21:90:9a:20:
9e:94:94:14:36:00:51:fd:9f:64:f8:df:38:7b:27:67:29:23:
dc:b5:ab:32:91:3d:30:f2:f1:a3:af:2c:e5:8c:4d:f7:b0:5b:
7b:00:db:75:14:e9:c2:b2:bc:56:6b:de:37:c9:ae:97:d0:ff:
ad:41:2b:b4:b0:9d:29:dc:38:73:e5:79:77:28:2b:02:6a:28:
19:36:f9:f5:6b:74:00:fd:97:73:69:6c:f8:df:6b:6e:07:ab:
6f:42:af:10:55:5a:33:f5:da:52:e8:01:29:b1:05:59:e1:35:
32:22:da:d1:41:0d:43:7b:89:71:46:c9:00:1d:c9:54:aa:98:
cb:4c:bb:c1:eb:7b:ed:db:40:c2:fd:79:1b:b0:6a:82:77:8d:
53:f7:62:9c:d6:72:b9:7d:e9:53:7a:a7:16:89:69:01:70:cf:
44:76:f4:2e:52:13:04:d7:03:63:88:f1:04:b6:87:71:f6:fd:
f8:fd:4f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:07:15 2025 by rpki-client