Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
File: 1-d-A98aS6G081rdV0Gz3zpwTf_I.mft (raw, json)
Hash identifier: 6lHore0/hes5q6sXKDrtzTqzgjDYMBEokP0Y1YgPNYQ=
Subject key identifier: 02:05:13:D6:74:D6:DB:8C:0D:A8:11:56:62:6D:0B:54:FE:6E:EE:22
Authority key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
Certificate issuer: /CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Certificate serial: 01976929A0AFB89E287EA5A2C1A104F1E5D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 12:00:25 +0000
Manifest this update: Fri 13 Jun 2025 12:00:25 +0000
Manifest next update: Sat 14 Jun 2025 12:00:25 +0000
Files and hashes: 1: 1-d-A98aS6G081rdV0Gz3zpwTf_I.crl (hash: 5gjCSd3WiLJAm0kAZj1mcVJX3GdCGjLH7la8lQMRPrc=)
2: GM9qrO2uL8x1ZY0DdW6CbnXZWBw.roa (hash: +PS0Zeo/h7j5Rz8hACgz8q1qwFa7bESNHkPZUu+sEMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:a0:af:b8:9e:28:7e:a5:a2:c1:a1:04:f1:e5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Validity
Not Before: Jun 13 12:00:25 2025 GMT
Not After : Jun 14 12:00:25 2025 GMT
Subject: CN=020513d674d6db8c0da81156626d0b54fe6eee22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b9:61:43:01:d2:00:b0:20:9b:84:8c:bd:43:
be:cb:b0:5a:08:2b:37:ba:be:09:43:bf:80:0d:c5:
e1:14:f8:8e:6f:e2:10:50:76:f4:c2:7b:5d:1c:ed:
8f:5f:30:8e:5a:c3:de:69:4c:62:e7:2d:ad:97:8c:
a9:f7:bf:47:04:9b:fe:7c:cc:e6:5a:b7:73:f8:83:
45:24:2f:00:f9:04:e9:aa:af:18:39:20:73:f6:2a:
f4:9a:82:55:43:cd:38:89:a7:bf:7c:f6:0e:58:1b:
eb:37:06:21:20:27:90:54:d4:c0:bb:0a:b1:bf:9d:
ca:fb:e8:3a:34:78:46:af:dc:a6:54:e3:20:6c:03:
2e:e3:80:f5:fa:10:2a:64:0f:b1:77:64:c8:4e:63:
9e:3c:97:d9:bd:ef:24:0d:97:e4:c9:82:36:75:7f:
75:21:84:45:71:f6:ef:4a:74:f4:a8:47:ec:a6:b0:
44:ff:2b:61:27:a5:40:56:09:66:1a:ec:f8:26:05:
38:a4:2a:bc:21:ac:75:0b:2f:95:87:37:81:c1:72:
bc:3e:85:0a:9a:d7:10:58:e4:eb:dc:4a:6a:61:a8:
4f:ca:af:13:6e:0f:95:c0:74:76:7e:71:2c:69:d8:
c8:24:ce:2d:ae:c5:45:45:a3:94:e2:59:9c:4d:61:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:05:13:D6:74:D6:DB:8C:0D:A8:11:56:62:6D:0B:54:FE:6E:EE:22
X509v3 Authority Key Identifier:
keyid:F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:86:bb:be:81:b1:f0:2b:a7:e7:19:d2:19:41:cf:10:68:68:
39:0c:4c:89:c5:92:28:f1:ea:2a:11:29:32:58:4d:1b:6f:98:
c0:88:09:76:70:36:f2:3f:ac:6b:eb:57:cb:17:5b:3b:2b:6f:
8f:0f:b8:7f:ea:39:7f:d2:96:60:33:2e:6f:b0:cd:15:57:e2:
60:6a:f0:5d:9e:cf:af:85:db:7d:90:09:71:b2:0c:99:eb:1b:
d8:3d:4c:29:37:2b:00:9e:4f:41:9d:4c:93:40:aa:cd:7b:42:
36:2d:4a:9f:0c:cb:1c:59:7b:87:aa:e4:f1:b8:a8:2d:a2:e5:
9a:a7:e7:07:a8:0f:23:81:9b:de:1d:7e:b4:4f:49:b0:e7:86:
cf:f1:31:53:bc:96:be:13:b9:c0:02:db:cf:61:5f:9a:25:c3:
3b:51:eb:2c:25:58:31:d3:c6:ac:2b:81:bc:cd:b9:c3:a8:d2:
4d:24:25:00:85:0d:a0:f3:4e:9d:39:28:b1:2f:6c:1a:4b:24:
55:78:30:7e:f3:dd:42:1b:44:38:c4:61:55:69:a2:ea:18:04:
75:da:25:05:be:d1:ef:34:57:7a:28:83:2a:32:15:eb:f6:f9:
9f:69:64:3e:7e:c3:35:29:08:05:72:59:12:8e:0d:32:ab:f4:
d3:84:a7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:32 2025 by rpki-client