Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier: 1WZtdmVxAIgqHM7KZj7VRtrR9sdz6A1piycZ4Q5CLp0=
Subject key identifier: 2E:DC:C4:21:39:3F:16:EB:83:CF:61:31:F3:69:7A:78:E0:D4:94:21
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 01976EF4BF66251E66EDF7C2F0D373C718A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 15:00:22 +0000
Manifest this update: Sat 14 Jun 2025 15:00:22 +0000
Manifest next update: Sun 15 Jun 2025 15:00:22 +0000
Files and hashes: 1: M_ZucCsuJb1Fkv6phLwqAkn6J0Q.roa (hash: f0NnZS14FEEVK+otZH9sTWdHvzqdq6zBgg0/lm/taxs=)
2: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: j3OWaLAb7xK48PXkIzxRb6Mk7o5o+OZCg9GEFWkrrW4=)
3: kNpqx0tZlqJV-cV06kVoinEAEvE.roa (hash: yXJYbGR5++qBsVQrRHL4bHSCZiui648QCWfzX8PBFak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:bf:66:25:1e:66:ed:f7:c2:f0:d3:73:c7:18:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Jun 14 15:00:22 2025 GMT
Not After : Jun 15 15:00:22 2025 GMT
Subject: CN=2edcc421393f16eb83cf6131f3697a78e0d49421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:ce:fe:e7:99:2c:90:d6:76:67:70:8e:d0:
8e:89:45:65:30:92:a6:b6:24:42:a5:c7:4e:f8:10:
3c:d3:93:a5:f7:c6:ea:fc:cd:1c:14:a5:82:c4:0a:
f3:98:4c:64:e9:0c:cc:02:18:97:8a:7c:85:11:c1:
15:e3:1d:81:f5:02:53:be:6c:c3:ed:f2:fe:50:8f:
4d:5d:2f:a7:c2:f3:bf:47:45:9e:2e:a2:27:ab:3d:
93:33:f7:39:70:fa:9a:70:b6:5f:fb:1b:1e:40:ea:
9a:6f:19:99:b6:e6:3f:39:11:90:1d:1a:8f:3a:e6:
17:67:3a:a9:42:b8:6c:15:83:6c:d7:78:8a:c1:b4:
e6:47:f9:93:51:e1:d6:bd:22:72:02:e3:bd:d8:d6:
c1:1b:62:08:3d:90:73:45:41:44:11:43:e9:4c:42:
dd:aa:34:9e:20:86:8d:22:e5:b4:b3:ae:2c:bb:85:
8e:eb:09:a9:fc:1b:cf:eb:ea:14:95:d7:67:17:2a:
54:ad:bc:57:5e:fe:1a:ef:b1:6e:05:20:f8:78:dd:
63:11:61:8e:ce:de:40:55:50:88:62:0c:75:74:bb:
88:8d:17:c1:1e:68:52:97:09:80:bb:0e:a2:22:96:
79:df:91:ea:73:55:29:8a:54:d9:e2:0e:cd:59:cf:
56:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DC:C4:21:39:3F:16:EB:83:CF:61:31:F3:69:7A:78:E0:D4:94:21
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b7:02:64:1a:5b:ce:0f:f5:11:9e:28:32:65:40:d1:b1:b8:
67:6f:09:2b:bc:a3:31:74:6e:6b:b9:47:a5:24:e8:54:22:49:
36:cb:02:b7:be:c1:35:1d:fd:ba:c3:fd:51:9f:89:5e:ae:d9:
a6:40:3f:8a:a8:f8:b0:3e:96:33:70:37:0b:d1:fe:0a:e4:52:
45:68:00:ec:4a:48:fc:0e:d4:e1:59:33:72:b0:54:f3:bb:75:
4d:fb:89:39:3d:a4:cd:90:b5:a8:66:01:b9:86:7b:69:1f:8c:
e9:14:32:d1:05:b8:9e:29:ad:c4:2d:2a:d4:03:52:af:4e:b7:
10:a7:9c:e0:89:06:d1:4a:6d:e4:6c:5f:28:96:06:23:e9:ec:
2c:31:c2:ec:f0:10:e3:69:15:3c:bc:ab:63:1c:fb:ad:c1:17:
ac:c1:6d:6d:92:63:2b:42:eb:f4:06:df:78:0f:2c:9f:1d:fd:
51:06:ad:c3:c9:d0:d0:f6:57:eb:a6:5e:67:94:20:d2:5d:7c:
68:54:db:ae:47:ab:c0:7d:94:a1:6f:6c:54:09:8a:3c:e2:8d:
58:6e:be:80:3c:6f:b8:bb:45:8b:6d:cd:4c:f3:7a:3a:91:49:
37:9f:5d:ba:dd:77:3e:35:96:31:06:15:29:7b:89:72:27:fb:
e6:39:fa:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:59:08 2025 by rpki-client