Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
File: 1flHhtA2aFRAkBo9zlozTPEycqA.mft (raw, json)
Hash identifier: 750/+VGf/7KwJoLN2/1M341V/hZowcU0DnbtQKgsorY=
Subject key identifier: 53:9F:5A:BC:C7:E3:21:6E:64:80:4A:41:4C:6A:D6:BB:84:CC:A9:27
Authority key identifier: D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
Certificate issuer: /CN=d5f94786d036685440901a3dce5a334cf13272a0
Certificate serial: 01976BBCB2261B7ECFF9DCB75E0BE3E4EFC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
Manifest number: 09DE
Signing time: Sat 14 Jun 2025 00:00:17 +0000
Manifest this update: Sat 14 Jun 2025 00:00:17 +0000
Manifest next update: Sun 15 Jun 2025 00:00:17 +0000
Files and hashes: 1: 1flHhtA2aFRAkBo9zlozTPEycqA.crl (hash: XcJ0c/hemics8qaq2/oN4HSYSO+6s7ER+l4Z0J4T0ZA=)
2: axjnfZLg_Tc1d6ZsOwItmppUeQ4.roa (hash: L++63wCXKAgo0Nta63++qRFUhLIAbDFglc5Q/4n9sQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:b2:26:1b:7e:cf:f9:dc:b7:5e:0b:e3:e4:ef:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f94786d036685440901a3dce5a334cf13272a0
Validity
Not Before: Jun 14 00:00:17 2025 GMT
Not After : Jun 15 00:00:17 2025 GMT
Subject: CN=539f5abcc7e3216e64804a414c6ad6bb84cca927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:4c:66:53:0d:33:5a:d4:5f:22:1e:aa:9a:
2f:9a:83:04:ff:27:ed:8d:05:a5:f5:ec:ac:e2:50:
e8:6f:01:89:ea:69:0c:50:4d:5d:e2:30:7f:24:f4:
fe:dc:ae:9e:a7:ac:08:8b:1d:ae:db:26:10:b4:ed:
93:c0:aa:63:6c:e1:63:60:de:6a:7b:a4:7f:a6:b6:
ec:35:6f:6f:a1:c3:74:08:b1:18:ab:26:be:ad:37:
f6:d3:cb:14:42:44:c7:23:95:f6:f2:f0:2a:2c:0b:
ba:7d:0b:8c:20:03:d2:ec:9c:4e:d3:d3:49:ea:9a:
e9:20:3a:e9:1c:ff:1e:4d:45:f9:4c:3b:11:f0:98:
53:2b:00:80:4b:e1:2b:c2:74:19:82:cf:40:8e:85:
9f:35:c9:e7:92:81:63:f2:03:dd:2c:fd:59:2b:3c:
06:53:26:8f:6f:66:36:c2:13:1b:ea:3b:9e:43:39:
c4:57:1b:35:c4:61:d4:a2:30:0e:91:d0:4a:3e:41:
d0:65:51:2b:26:e7:d7:7b:19:8f:7f:5b:d9:9d:0a:
a7:5b:a3:56:95:1e:53:2e:48:68:0b:7c:28:7e:58:
81:18:8d:c0:fc:d0:f4:9d:78:e3:7b:17:39:46:e6:
b5:68:77:55:ab:32:97:9f:44:86:0f:74:5b:89:d3:
97:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9F:5A:BC:C7:E3:21:6E:64:80:4A:41:4C:6A:D6:BB:84:CC:A9:27
X509v3 Authority Key Identifier:
keyid:D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:79:25:dd:1f:52:32:b8:75:91:06:0f:0f:3a:3c:07:44:c5:
7e:31:1c:62:1b:ad:ba:02:e6:e2:07:d6:ec:1b:9d:7b:38:d2:
18:e9:f4:2c:e7:fe:6f:3d:95:3c:3a:cc:56:76:57:3b:bc:33:
d8:2d:1d:9a:fc:7d:c2:30:ea:b1:2e:be:fa:00:87:53:81:ab:
0f:cb:84:58:13:0d:30:f2:ae:ca:79:bc:27:3a:2b:6e:7c:a7:
5e:84:4a:51:ec:f0:34:ef:f1:6f:b8:84:cd:d5:10:d7:02:6b:
50:2e:d8:65:32:bc:4c:60:7a:df:07:4f:47:4a:87:e4:29:8b:
54:c8:d0:26:a7:a0:7f:40:5d:c8:99:93:09:fa:3f:1d:c3:b6:
c8:b3:5a:74:b0:25:91:8b:c1:d5:9c:50:06:64:e7:b0:d8:49:
e9:cb:8c:74:2d:e0:d4:76:50:5f:4a:ad:86:3c:9d:0b:a6:78:
4e:c0:c3:b0:14:f9:6a:0a:c2:6e:e0:ea:67:d9:c6:8c:50:bf:
32:9c:a1:70:c1:7a:f8:7f:77:f4:34:d5:b9:5b:4b:85:4f:85:
88:14:aa:ea:22:45:e9:e6:00:bb:73:09:70:17:a3:05:b0:eb:
7a:2a:c3:12:6f:84:5c:87:b4:fd:23:78:ad:40:1d:d3:40:39:
28:6a:2f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:54 2025 by rpki-client