Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
File: 1-IesflsonOaBskdMOPeVLMqcD7g.mft (raw, json)
Hash identifier: g3W6WB32bIWVuty1um7S/2DYfH29pp8n+oJroln/YBU=
Subject key identifier: A0:FC:88:BA:7D:EB:BA:FF:A1:50:F9:E2:D9:A5:BC:F1:3C:BC:5B:B7
Authority key identifier: F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
Certificate issuer: /CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Certificate serial: 0197711B2712462CB6035031CF31174E98BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
Manifest number: 6C
Signing time: Sun 15 Jun 2025 01:01:34 +0000
Manifest this update: Sun 15 Jun 2025 01:01:34 +0000
Manifest next update: Mon 16 Jun 2025 01:01:34 +0000
Files and hashes: 1: 1-IesflsonOaBskdMOPeVLMqcD7g.crl (hash: xoaqqLf6Pb1N8DQN7McqrLwACNZnoNNKUv6PZlagiTA=)
2: m3TD70Wk8LjMHagCf7nprKktZHM.roa (hash: +OB3m2U7o6BE+QfdP9KhiHkHyl0xJ3vodcbBJvAYpFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:27:12:46:2c:b6:03:50:31:cf:31:17:4e:98:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Validity
Not Before: Jun 15 01:01:34 2025 GMT
Not After : Jun 16 01:01:34 2025 GMT
Subject: CN=a0fc88ba7debbaffa150f9e2d9a5bcf13cbc5bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:20:d0:26:84:22:82:be:1b:81:09:39:f0:
c5:cb:16:fc:98:42:e6:60:25:c8:fb:14:39:4d:bb:
5a:60:0f:38:01:2e:25:e3:13:d2:08:77:a6:f4:77:
d0:79:2b:66:a8:41:f4:18:f6:19:df:9f:c4:f6:eb:
2b:be:bd:53:0b:b9:ea:32:f7:3d:70:ff:1c:91:a1:
8c:47:07:c8:f2:b1:ee:b4:a0:c3:2b:79:81:c4:cc:
86:a3:13:8a:45:65:2a:c8:8b:d2:45:f7:42:d6:a5:
4a:63:be:e3:ee:60:2d:eb:73:5e:d4:a0:54:1e:cd:
13:c5:bc:9d:dc:81:06:e1:9b:4d:70:82:78:e2:b6:
bc:4e:3c:39:26:82:68:bc:43:7f:38:8d:68:97:77:
c3:df:7e:a0:5f:67:92:8b:5c:fc:66:e9:d1:fd:78:
d2:15:78:37:ae:b9:0c:47:8d:84:ca:e0:b2:b1:64:
33:a5:60:10:eb:c6:45:4d:d0:80:e4:19:43:ab:75:
79:9d:d4:7c:d3:06:b0:ca:67:53:ce:b4:6f:fb:2b:
e2:22:fd:b7:99:69:a4:26:87:3f:62:0b:29:3c:a3:
da:49:91:eb:2a:93:de:f5:dc:b4:d7:9c:b2:9a:bf:
28:89:d2:85:52:90:ef:03:6e:07:87:5d:b3:20:04:
8a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FC:88:BA:7D:EB:BA:FF:A1:50:F9:E2:D9:A5:BC:F1:3C:BC:5B:B7
X509v3 Authority Key Identifier:
keyid:F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:0e:cd:63:e5:88:41:41:98:ac:18:22:2b:8f:7f:b9:a9:a9:
d3:3b:68:57:33:c5:88:78:43:e1:b1:2b:3a:ff:8f:ba:4f:4f:
d5:50:40:6d:3f:8d:3e:26:08:e8:d6:00:70:f2:d6:98:d4:4a:
2c:f7:1e:fb:8d:10:79:02:52:7e:47:28:a8:db:35:fe:aa:82:
38:c7:93:0a:43:55:a0:a7:05:30:9c:d4:02:91:88:5b:46:af:
43:04:4f:da:3b:ae:b5:da:7a:81:57:9d:a6:e8:d9:40:4b:f1:
a7:5a:f4:9d:6c:a1:92:1a:7d:63:26:5b:61:02:ca:32:5b:14:
e3:6b:dc:54:4f:ad:7a:b6:14:12:bf:ee:38:e8:d1:d4:30:9f:
2f:fd:85:c1:10:56:ac:53:6b:13:d4:77:d8:b6:93:c6:b8:62:
60:91:ca:ba:da:91:02:ef:c7:9f:bb:9b:45:da:a1:66:3a:02:
ec:8d:6a:73:48:1a:a6:2f:80:56:72:21:15:d0:3a:60:26:be:
41:fc:3d:60:54:ee:ba:40:04:1a:43:42:76:2a:61:44:46:9f:
86:40:57:6f:f2:c1:1d:5a:f2:5b:f0:f6:8a:d6:ac:8e:59:55:
fa:c5:65:39:63:e0:01:cf:ab:ca:29:d7:4b:af:c0:48:05:f9:
64:fa:6e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:12:51 2025 by rpki-client