Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
File: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft (raw, json)
Hash identifier: zFAK+ZaiNQZLPFhKLKsdDzNZIlgED4xzmeK2oINTlLA=
Subject key identifier: 21:8B:59:9E:9D:CB:40:50:7E:E2:B4:24:31:FC:28:06:12:CC:CD:5F
Authority key identifier: FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
Certificate issuer: /CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Certificate serial: 019776E52CB0D9AD0A8A76E790811D587060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
Manifest number: 1594
Signing time: Mon 16 Jun 2025 04:00:19 +0000
Manifest this update: Mon 16 Jun 2025 04:00:19 +0000
Manifest next update: Tue 17 Jun 2025 04:00:19 +0000
Files and hashes: 1: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl (hash: 8Epud9DiZkkBhdI2e6vVhUGqM0IQ23GGdjs1Kspb8eY=)
2: KK6CnYNVLgkO9qFyFOT9UGvXJYI.roa (hash: ZHlrP8V5BtXECEdhL9eJuVBZKLMvwmVQC0U5b4cXw08=)
3: o5N_jAG9g_aL4MkwpX9OBq0Dy-k.roa (hash: M8ydZ1fG/pikMq2g2Lj2Oo2CSVv2VUo2aqU5TzG0PFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:2c:b0:d9:ad:0a:8a:76:e7:90:81:1d:58:70:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Validity
Not Before: Jun 16 04:00:19 2025 GMT
Not After : Jun 17 04:00:19 2025 GMT
Subject: CN=218b599e9dcb40507ee2b42431fc280612cccd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d7:bc:2c:00:a2:1c:25:03:65:91:8d:6a:a5:
d9:de:1e:a5:65:a0:46:58:03:ae:e4:8f:fa:56:ff:
61:c2:6c:b1:5d:06:e5:8f:45:2a:65:23:e2:17:97:
01:fb:d6:75:03:d2:9b:e8:f7:19:c7:19:99:6f:90:
1d:09:dc:41:cc:07:75:a9:01:f6:45:b2:cd:d6:d2:
f9:3f:e5:6e:6b:c2:3c:a3:26:8d:d1:8b:b6:3d:3a:
93:ca:7b:2a:29:37:6d:a2:37:2f:55:d9:51:9b:b1:
08:71:fb:7a:99:1a:83:97:b2:0f:d5:a6:d5:df:5c:
45:e9:05:d4:08:ac:77:f2:43:86:63:40:62:f2:60:
e2:1f:84:3f:23:1e:55:3b:cb:3e:6a:96:b7:a7:eb:
aa:31:27:72:d5:c3:51:73:06:17:a4:80:fa:9c:a7:
0a:15:4a:92:79:c3:dd:22:20:7a:47:69:9b:45:68:
98:af:1c:31:de:6a:3c:59:0c:14:ab:c9:d6:5a:c7:
e5:bd:8a:0b:41:e9:ea:6e:7f:e2:16:82:de:69:1b:
12:eb:52:57:d2:41:bf:c5:86:09:1c:1f:9c:dc:8c:
7f:03:a8:99:58:37:44:e1:af:46:38:be:9f:3e:3f:
b8:69:64:ab:4b:fc:d4:1f:ba:d4:5d:b8:b6:62:6b:
a5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8B:59:9E:9D:CB:40:50:7E:E2:B4:24:31:FC:28:06:12:CC:CD:5F
X509v3 Authority Key Identifier:
keyid:FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:cc:4c:7b:cc:21:4a:aa:ae:17:ee:e2:21:3e:37:88:46:6c:
4e:7b:32:12:53:86:ae:e4:b3:94:23:d8:87:b9:52:24:a1:da:
5e:6d:85:2e:35:9d:d2:b1:b8:4f:bd:a5:a3:54:f9:63:80:ed:
39:f4:a1:0d:c6:66:10:d3:92:73:04:68:83:19:73:62:c2:2b:
a3:41:03:85:96:51:95:3b:49:a7:57:14:f9:ef:74:5e:45:59:
49:2c:8a:a5:82:cc:6b:8c:bb:0d:9e:af:85:4e:b7:03:24:8e:
56:00:59:31:5f:e9:61:2f:2f:ee:7a:a5:3e:87:b3:6a:93:c6:
b9:97:f4:cc:dd:e1:8f:a8:11:cf:1f:0a:ae:b9:38:09:8d:5e:
56:2e:8e:94:16:c8:9b:60:24:cf:3e:36:c4:c0:08:76:cc:f9:
01:34:2f:84:fe:a1:9d:ac:f7:62:84:82:57:96:bc:6e:04:51:
d9:71:7f:44:fb:1c:7e:20:64:c7:80:e7:b9:d8:03:20:d8:d6:
32:79:d1:3a:5a:09:25:4f:fe:f1:cd:3d:18:47:cf:99:3d:a1:
2a:67:4d:bc:27:8c:43:1a:b5:3e:af:7a:8e:81:96:ef:07:f8:
f5:db:d3:be:c3:1f:a4:fc:3d:73:fc:8c:f6:02:d2:36:e9:85:
09:8c:26:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:21:37 2025 by rpki-client