Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
File: 1-puJ82fU-5UCh3AfYtSgObf2yyA.mft (raw, json)
Hash identifier: YAV83KTwqxkdUk38XKtlejgKw4mnIHKHcQwF+Iq/Bvg=
Subject key identifier: D1:64:5E:AA:B8:73:AD:72:85:74:BD:AA:B6:79:85:36:07:36:25:CA
Authority key identifier: FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
Certificate issuer: /CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Certificate serial: 01976C98E04FAB986180119D6250D8C02098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
Manifest number: 139C
Signing time: Sat 14 Jun 2025 04:00:47 +0000
Manifest this update: Sat 14 Jun 2025 04:00:47 +0000
Manifest next update: Sun 15 Jun 2025 04:00:47 +0000
Files and hashes: 1: 1-puJ82fU-5UCh3AfYtSgObf2yyA.crl (hash: Dn+2/sA5+aImkktXuXZla8ZbTKbgIPzlCsGKn/CeYaI=)
2: BkhUnEeKLpdw7zqQsCW8fb_TG_I.roa (hash: krWgcFHtgzZmGIlUNG6InVr0KfezPC+cFYoPcdTkKaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:e0:4f:ab:98:61:80:11:9d:62:50:d8:c0:20:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Validity
Not Before: Jun 14 04:00:47 2025 GMT
Not After : Jun 15 04:00:47 2025 GMT
Subject: CN=d1645eaab873ad728574bdaab6798536073625ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:95:82:d2:c9:98:88:39:86:e7:96:6a:71:cd:
88:56:99:15:fd:56:89:e9:b5:12:d8:8e:3f:41:3d:
d7:92:aa:1b:c7:10:bd:26:7e:4a:52:02:09:07:e0:
16:82:b9:6f:1a:85:9b:a7:1a:9b:a6:7f:6c:81:ef:
29:a7:a4:16:e5:ec:e3:13:1b:1b:5a:77:4f:75:f9:
80:e1:82:8c:27:07:97:b2:07:11:44:89:49:8e:66:
3f:ca:39:4b:f2:52:29:6b:48:7b:04:67:be:7f:b3:
88:f0:fc:e5:69:84:37:a7:b3:2b:e2:f3:fc:82:f1:
12:54:ac:25:a4:18:ce:6c:f1:56:2c:f4:61:68:42:
9b:cc:1b:d4:a9:68:4d:3f:48:21:bd:64:d3:fa:85:
21:b1:db:b2:e0:9f:7c:c5:bc:aa:4e:c9:79:e8:c8:
ee:a3:98:4f:a6:b3:9a:73:4b:64:8a:cb:3a:92:9d:
fa:78:70:2b:97:bb:be:58:b8:2c:0e:85:1c:fa:ae:
5e:0b:e5:20:7a:ae:b6:64:48:04:9a:cf:96:31:88:
d2:a6:da:5b:48:80:01:c4:30:73:67:b3:75:94:0a:
62:79:31:20:1c:a8:8c:91:cf:7a:c2:cf:92:29:fc:
ed:47:71:97:4d:49:6e:cd:c1:2e:2f:0c:f2:33:12:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:64:5E:AA:B8:73:AD:72:85:74:BD:AA:B6:79:85:36:07:36:25:CA
X509v3 Authority Key Identifier:
keyid:FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:90:ea:68:21:55:d2:88:7c:74:39:12:1c:f7:7e:d5:77:55:
f4:c8:da:a9:48:2f:c9:71:eb:60:85:e0:89:2c:31:e0:48:c4:
ae:5a:33:60:d0:3e:14:ba:6f:7a:1a:18:7a:a1:6d:b2:68:1c:
92:64:33:56:f7:ee:d5:3f:54:e5:ca:d0:79:91:a3:46:86:7c:
24:92:9a:98:a0:04:d1:0e:d0:dd:f9:d4:e3:01:c3:3e:64:39:
ec:ed:01:bf:45:79:c3:13:af:7b:e5:fe:db:fe:0d:05:e8:2f:
8e:f8:f1:73:01:83:2b:7f:db:23:69:9b:25:f3:e3:b6:ba:ec:
84:9d:91:14:e0:6d:f9:87:01:ee:e5:f2:85:f0:4d:b1:60:7c:
e2:9d:6d:5d:51:8f:85:19:3c:49:d5:9e:f4:60:a4:f3:b9:c2:
43:ca:cf:00:88:e2:02:09:e3:ea:63:cb:7c:ab:50:49:b4:bc:
5b:10:9a:68:2b:6a:cf:62:37:54:fb:67:e0:80:11:61:64:84:
5c:0e:ba:fb:f2:cc:b5:80:59:f8:6f:cf:39:94:59:00:f6:b4:
8f:89:31:7d:0c:08:71:1f:f4:b3:12:67:18:a2:a1:5b:12:b8:
d6:5d:df:b8:61:23:b5:4f:c6:2b:22:b3:1b:57:76:7a:e5:39:
9f:80:3c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:32:28 2025 by rpki-client