Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json)
Hash identifier: zIBpeVJb047GaZZB82NfOUQSE+kmG41mjbPuS1wjxXQ=
Subject key identifier: 0F:36:97:EC:D7:26:53:DD:2D:9C:FA:A7:87:23:09:E3:2F:D8:A6:19
Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097
Certificate serial: 019770E3A009DBDFAB179FCBBE92A95F8DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
Manifest number: 021C
Signing time: Sun 15 Jun 2025 00:00:55 +0000
Manifest this update: Sun 15 Jun 2025 00:00:55 +0000
Manifest next update: Mon 16 Jun 2025 00:00:55 +0000
Files and hashes: 1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: QGejroNqJLQcc26sIPBZWgB8f0qajUwmNpygeWZR4Ho=)
2: EoE17t8PTfrUuXfL9C5ZkqxDhJ8.roa (hash: sAVxmU6pnEn88UNK22PTFUDf8gXcyDueVttcLFRxFqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:a0:09:db:df:ab:17:9f:cb:be:92:a9:5f:8d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097
Validity
Not Before: Jun 15 00:00:55 2025 GMT
Not After : Jun 16 00:00:55 2025 GMT
Subject: CN=0f3697ecd72653dd2d9cfaa7872309e32fd8a619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:ca:aa:79:b3:1c:ae:86:4f:0f:33:64:62:
f3:c9:f1:7a:40:a2:93:2b:62:76:fc:3e:f9:f6:9f:
b5:50:c6:eb:61:c4:22:a1:5c:6a:4d:31:ca:1c:bf:
31:75:32:65:22:63:e8:71:bf:89:3e:e5:4c:ec:16:
58:73:1c:f1:e8:47:b0:fe:09:d4:c5:78:4f:0f:67:
63:2b:a4:8f:56:36:15:2a:bc:a9:bc:9d:e6:52:0e:
59:4f:92:72:2a:f1:3d:f2:7c:ca:fa:fd:0f:f2:3b:
57:79:06:31:49:64:d2:9e:83:ef:87:7b:d9:af:00:
62:43:cf:d7:1e:82:b1:ab:3e:61:d6:fa:4f:93:e4:
e0:da:80:6a:e2:24:75:5e:e9:50:a7:ac:2f:3d:a7:
71:53:87:11:65:0d:25:ec:23:97:c3:5d:88:45:24:
7c:57:f9:38:88:a6:b6:3f:a3:ab:44:2e:9e:d0:c0:
5f:4d:4a:68:2e:4e:24:9c:8c:b7:13:da:a4:1e:e3:
d7:a4:e1:8c:ec:d9:8f:46:84:7e:89:f9:64:cd:19:
8b:4a:16:e7:1d:ca:08:ce:e0:77:de:11:c9:24:5b:
06:dc:6b:3d:4f:07:ac:a4:22:d7:68:65:09:04:12:
ea:f4:5d:6c:d9:84:99:be:9a:5d:4c:cf:61:87:47:
f5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:36:97:EC:D7:26:53:DD:2D:9C:FA:A7:87:23:09:E3:2F:D8:A6:19
X509v3 Authority Key Identifier:
keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:7b:04:7a:cb:af:aa:f9:9c:38:38:66:0f:43:03:21:c2:fd:
59:44:b8:cc:59:e1:6f:57:82:ef:53:b4:51:71:2f:fe:29:52:
c7:30:1a:96:d6:6b:9a:97:c6:e2:ed:e6:01:7e:ba:1b:c2:b3:
6c:05:b0:03:4b:f6:d6:5e:f9:79:20:3b:25:7a:b3:45:54:bb:
62:7f:ba:ca:34:c5:46:9d:9d:a7:95:6a:88:65:db:ec:b0:6d:
30:35:6b:68:ab:c4:14:d0:58:ed:c6:d5:8d:95:42:c0:b8:af:
31:61:1b:57:8a:01:89:98:a5:53:9f:2d:b2:c2:1e:30:11:a0:
9d:a1:a8:22:dc:0b:16:7c:4d:64:01:76:99:e6:4e:5e:c0:03:
19:27:d6:f9:76:07:72:84:f2:5b:22:34:fa:13:12:8b:58:ab:
7f:98:79:0d:7e:fb:b0:88:3c:f6:c5:9e:b5:af:2d:e7:18:26:
08:fc:c5:af:64:bc:76:33:64:e8:d2:8e:c9:07:04:3c:10:0f:
3f:ed:6a:74:1e:3e:e1:8e:d7:dc:c6:42:61:c6:64:3b:f5:be:
30:a4:d1:89:0b:67:fa:ae:01:7d:db:de:fa:7b:fb:f5:da:12:
ee:e5:6c:05:e9:8d:27:85:f0:31:c9:2b:b7:ab:55:56:79:a2:
57:69:62:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:09:26 2025 by rpki-client