Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
File: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft (raw, json)
Hash identifier: V+t5f3PWZG0vn4Y4mdJ90SOrk/JP3iasWzePgbLo14w=
Subject key identifier: DF:71:D0:27:F0:C0:92:5B:3A:2F:38:C9:4F:E4:37:33:C9:04:65:5F
Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
Certificate issuer: /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Certificate serial: 01976D3D56620ABB5224B2E1040DBED3405E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
Manifest number: 0939
Signing time: Sat 14 Jun 2025 07:00:25 +0000
Manifest this update: Sat 14 Jun 2025 07:00:25 +0000
Manifest next update: Sun 15 Jun 2025 07:00:25 +0000
Files and hashes: 1: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl (hash: 84JD1NQVcYGHRxDEFpDTs8eUI/tusDdA+KXHYsG3tdA=)
2: nyuERDVJh6-PTXV2ajcksYw_55g.roa (hash: K7CKnx/jM/EuzQ/IpR2qcCsRtlnJ0y6qFH+bAbkXnGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:56:62:0a:bb:52:24:b2:e1:04:0d:be:d3:40:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Validity
Not Before: Jun 14 07:00:25 2025 GMT
Not After : Jun 15 07:00:25 2025 GMT
Subject: CN=df71d027f0c0925b3a2f38c94fe43733c904655f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5e:1e:2c:63:60:e6:d8:80:76:fa:86:52:87:
1e:f4:0a:2e:c0:3e:5a:5a:57:b0:c9:7a:9f:7d:e8:
0a:a9:de:42:72:14:c2:94:24:f6:b0:eb:50:2f:88:
e7:45:44:dc:07:06:6d:c5:de:a1:70:7b:3b:0b:3b:
c4:08:57:d9:23:24:48:9c:d9:df:c4:f6:28:55:09:
a3:f4:d7:23:21:d8:dc:1c:43:3f:9c:8b:5b:81:98:
88:3f:b6:9d:50:e1:2b:e3:1c:db:77:f5:2a:85:be:
21:37:40:4f:50:f8:18:a6:ca:a8:f8:74:9f:a9:bf:
54:fa:52:5e:15:06:b4:43:7e:78:9f:2d:be:80:62:
00:80:29:91:f8:68:cc:41:f5:d1:1e:65:e3:51:b9:
45:f0:a8:21:aa:e4:cb:27:9f:ea:86:10:06:d5:89:
47:a2:ea:05:5e:5b:9a:71:05:3d:10:e9:c1:c8:09:
4c:09:b4:d8:89:67:b6:57:a1:7f:83:0d:42:7c:af:
d9:4a:0a:ff:80:ce:3c:e8:bc:84:58:da:06:60:4c:
19:23:12:60:f3:6a:11:8b:44:2e:61:4c:18:c3:ce:
57:11:7e:1f:df:1d:57:61:00:b9:bd:cc:4a:45:fc:
e7:33:b5:13:fd:f3:e0:34:f0:28:6c:26:d7:10:16:
4e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:71:D0:27:F0:C0:92:5B:3A:2F:38:C9:4F:E4:37:33:C9:04:65:5F
X509v3 Authority Key Identifier:
keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d8:04:df:bc:25:85:ed:6a:a9:60:b4:f4:02:8c:b8:0e:e4:
01:a7:b4:1f:28:07:51:a6:76:e1:c2:cb:8f:f7:60:b4:c3:85:
0f:55:0d:7f:7d:c2:0b:48:67:12:c9:6d:15:7d:bf:e4:80:f5:
06:34:25:ab:66:a0:d1:de:6e:df:b6:c0:82:a4:ef:6e:f7:87:
ed:df:8f:66:ed:78:1d:f4:33:ff:4e:e9:92:49:72:79:e3:69:
25:af:5e:68:7c:dc:94:06:75:ae:b7:b5:f8:02:0e:4d:3e:cd:
08:f0:b9:b0:77:c8:58:9b:95:42:11:47:9a:7b:2f:ac:ff:fc:
13:f4:19:8a:47:09:4a:d2:c2:91:6f:4a:53:3f:11:57:27:48:
09:1c:fc:c3:45:82:05:a1:6a:32:e2:f1:09:1a:7f:c7:e2:c3:
4c:4b:db:b1:31:fa:0d:78:5b:a1:9a:e6:70:57:80:e6:fa:09:
b4:04:57:1d:ed:e4:a1:f4:c3:16:42:1a:c9:fe:6c:52:8d:cd:
24:d7:ae:94:4f:95:3d:f1:2c:e6:c9:b9:c3:33:d8:8d:36:0e:
02:e7:a5:71:e8:9d:27:36:ad:d6:7d:bd:3b:fe:b6:5e:4e:25:
f1:23:c3:7a:33:fd:7d:19:bd:02:b0:9e:c4:4d:5b:40:c0:99:
73:f3:77:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:06:33 2025 by rpki-client