Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
File: mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft (raw, json)
Hash identifier: /pgtPhT9twR7L+0jrK6agVClzHUg40Oy1jhtCYMn7Bs=
Subject key identifier: 75:64:99:FC:84:AD:FC:C3:2B:40:C7:EC:8B:B9:FC:AA:89:A2:10:0F
Authority key identifier: 9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
Certificate issuer: /CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Certificate serial: 019771F6199E547BD3DFA47A092133BFBDF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 05:00:43 +0000
Manifest this update: Sun 15 Jun 2025 05:00:43 +0000
Manifest next update: Mon 16 Jun 2025 05:00:43 +0000
Files and hashes: 1: mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl (hash: giB/i9FlkvQ932XTFAEAOXJUuJgZLjQ6oaBE4sIfONM=)
2: u9xJm6a8iv-NU5QCZgFCUyU_CIQ.roa (hash: a1ccdr3daMuWhcGyGVwNFs2+CFRCY21VguoNG+TE+38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:19:9e:54:7b:d3:df:a4:7a:09:21:33:bf:bd:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Validity
Not Before: Jun 15 05:00:43 2025 GMT
Not After : Jun 16 05:00:43 2025 GMT
Subject: CN=756499fc84adfcc32b40c7ec8bb9fcaa89a2100f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fa:ff:2e:c2:36:d3:a6:bf:13:ed:2a:57:99:
38:c1:90:3f:e1:f0:39:4a:90:24:45:3f:82:ce:c6:
a4:1d:71:e3:66:9e:12:27:d2:e7:40:77:1b:8d:8d:
aa:cd:1b:33:fe:6c:5c:f3:a1:7a:0d:e7:8b:5c:53:
8e:a6:0a:a1:d2:61:3b:94:97:1b:af:75:d2:d1:75:
2e:b0:47:ce:05:50:f5:58:1f:03:ec:40:ca:87:66:
a2:8b:91:1a:1d:5d:25:6d:92:5a:41:86:ce:1c:de:
c1:ad:97:bd:ec:df:79:1b:3c:7a:cc:f4:e7:37:27:
5d:15:cb:e3:fe:32:00:f0:aa:c0:e5:6c:bf:ec:c9:
f8:bf:d5:b4:6e:18:79:61:02:bf:76:3d:87:7f:9e:
ad:79:ec:72:c9:2c:27:40:94:5b:cb:f1:66:55:2d:
f2:90:8c:a9:84:fc:dd:30:df:e6:e2:e1:6a:a5:48:
ea:e4:c7:76:64:6f:e4:cf:1a:d5:4e:39:7e:ac:5c:
3e:3d:aa:27:5d:20:53:00:6d:28:bd:e5:73:bd:f6:
b1:ab:af:b3:5a:07:61:a1:e6:d1:8a:dc:62:ac:fc:
68:bc:e9:d8:67:42:15:d8:76:ce:a0:ea:46:21:a5:
80:cc:10:25:eb:72:d9:76:86:0f:17:a9:76:04:2a:
7a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:64:99:FC:84:AD:FC:C3:2B:40:C7:EC:8B:B9:FC:AA:89:A2:10:0F
X509v3 Authority Key Identifier:
keyid:9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c6:b5:5f:f9:f7:f7:9f:a1:c5:32:dd:c6:14:f5:98:76:9c:
0b:b6:ee:47:05:0d:6c:1c:97:ee:6f:af:e4:60:9d:b9:48:ef:
36:a3:04:59:cf:39:9a:b8:82:a0:87:f2:44:2c:68:90:97:bc:
47:49:3c:ae:f0:26:0d:7c:bf:78:1a:e4:ef:2c:5f:b8:50:01:
f0:07:35:8a:6f:c6:0f:c7:96:94:50:f8:bf:7d:3d:4b:e2:59:
ed:1d:9b:b4:d6:c9:88:14:2f:27:25:4f:06:a2:59:cd:60:23:
1a:0b:02:9c:df:14:e5:57:69:f7:0f:86:b7:3f:a8:62:e2:4b:
a5:ed:9f:f7:23:d3:77:b1:df:37:69:f7:01:11:f2:6f:53:81:
94:14:9f:8d:72:f6:71:2f:67:9c:12:67:57:f8:f7:8d:ee:48:
81:d3:b0:85:32:c8:4e:fe:f7:01:ad:ae:96:94:ae:0c:ec:3e:
03:d2:1e:a0:b3:e6:89:13:95:1e:a4:47:8d:dd:8a:2f:9e:9c:
51:75:41:41:3d:ba:0b:ac:d1:26:31:bc:e2:71:c0:e5:bf:0e:
e6:aa:62:0d:8c:71:18:55:7f:5c:b0:93:f1:a9:ca:6b:22:4f:
73:31:f2:19:79:01:4d:d2:17:44:f9:fc:f9:82:a5:26:50:a6:
13:4b:76:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:36 2025 by rpki-client