Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
File: 00vPISevCy4KJGrkV0MEx653Fek.mft (raw, json)
Hash identifier: /xRLWrWPIdrAh2NOjXoc4DVp0DnLuA1vP+8SedCgSYc=
Subject key identifier: 1C:37:47:F7:F3:5E:8C:EB:78:70:4B:31:E6:03:5C:E3:12:11:D0:1F
Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
Certificate issuer: /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Certificate serial: 01976D3E2367534ED3197F9DA37EC54E5089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 07:01:18 +0000
Manifest this update: Sat 14 Jun 2025 07:01:18 +0000
Manifest next update: Sun 15 Jun 2025 07:01:18 +0000
Files and hashes: 1: 00vPISevCy4KJGrkV0MEx653Fek.crl (hash: dzao4M6s/DO7BCPq1oOaXVO7fzmxNfQx54v9tNLy/Uk=)
2: SqjmPfaLrtBpjmBn0-LK2-XYK6E.roa (hash: oP41hXDxiX++ad4HH6tMbCxCouHbTfiMX6JPBOFqfjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:23:67:53:4e:d3:19:7f:9d:a3:7e:c5:4e:50:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Validity
Not Before: Jun 14 07:01:18 2025 GMT
Not After : Jun 15 07:01:18 2025 GMT
Subject: CN=1c3747f7f35e8ceb78704b31e6035ce31211d01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:63:aa:2d:db:44:35:98:af:2e:7e:58:e2:4f:
bd:ab:a9:f7:f6:85:14:21:13:6b:4c:bf:c2:e6:2c:
c8:3a:d9:d1:9a:1b:5a:de:ba:da:10:2f:70:68:3d:
a8:53:2b:2b:0f:bb:2b:43:cb:68:2e:d6:37:4b:79:
e4:c7:77:fe:09:70:a4:fe:dd:99:46:ca:58:41:5e:
0b:c2:88:f5:35:f4:77:25:43:7c:e3:30:1b:2b:91:
8b:96:95:a9:76:b1:c9:09:74:6f:61:7f:9d:98:ad:
51:17:c3:47:49:18:d2:89:14:9d:f9:05:d0:b1:fb:
6d:b3:fe:24:ec:4c:5c:62:cf:91:19:ba:b2:72:d7:
38:34:cb:43:4b:13:dc:e3:10:ad:0e:4d:2a:7d:06:
61:d2:4b:5b:41:22:d7:32:2f:f7:17:3a:ec:1a:ca:
09:c4:f9:bc:fd:a6:02:40:72:e0:2b:7a:ad:5b:76:
0b:69:5f:77:6a:3f:13:1c:d6:d0:70:1a:94:b5:c6:
d9:50:fe:4c:bd:68:e6:85:e5:52:6c:17:d9:45:07:
c9:74:46:00:58:43:7b:af:5f:ae:82:26:0c:2c:9d:
83:25:db:5d:bf:7c:49:42:07:66:54:a2:75:e7:91:
ea:61:e7:ca:c9:4c:b1:ee:01:ca:14:d4:05:09:e6:
43:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:37:47:F7:F3:5E:8C:EB:78:70:4B:31:E6:03:5C:E3:12:11:D0:1F
X509v3 Authority Key Identifier:
keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:30:e4:cd:4c:52:c7:b2:87:b5:07:3f:e1:21:e2:28:3e:26:
68:9e:cd:68:14:c5:42:36:4f:ac:34:37:8b:4c:0f:92:39:d4:
6a:9e:c4:e8:ae:c1:f5:b8:99:22:97:72:6b:3a:dc:cb:25:30:
b7:ee:53:0c:58:10:c7:56:a4:fe:b6:82:ae:70:40:10:58:ff:
15:40:83:ab:3a:49:0e:64:ca:b1:9e:8c:b7:b8:5f:a8:e6:69:
5d:58:32:05:be:bc:2e:a6:a7:b5:50:4f:1c:ad:c5:b4:cf:1c:
35:d9:2b:90:6b:e6:db:a8:84:c2:03:b3:86:57:0c:77:34:b3:
5c:35:ad:d5:03:19:d5:07:c8:b2:c7:bb:7b:ed:2b:07:d0:be:
6e:0b:39:3e:6b:88:1f:d9:fa:04:54:de:38:2e:1d:e0:d7:e4:
c4:71:72:33:1f:61:a4:9a:b9:ef:f2:fa:6d:76:2e:96:6c:a9:
5a:be:34:5c:13:d1:b0:52:b3:23:65:24:c6:26:1a:28:a8:9b:
5e:58:17:48:16:3f:0e:b8:52:df:a3:71:67:3a:1e:13:63:d7:
96:1d:be:ff:c9:c4:d1:7b:fd:e2:7a:b1:a8:0f:57:17:e5:ce:
dd:cf:c2:f1:69:43:73:32:ef:c2:a0:23:f1:07:cb:03:ab:b5:
9b:90:67:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:07:36 2025 by rpki-client