Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
File: 1BcD2zAgzB7y_XEJGkaPSmScI48.mft (raw, json)
Hash identifier: 3xdrKH7SrhsPsJ/xMrl48UkcNXNoxrWAmUVYSB9GdM0=
Subject key identifier: C5:B1:DC:36:35:07:BE:3E:6B:43:6B:F5:25:F5:60:E2:D0:46:06:32
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 01976F99E76E022902EFFFEA1E2A752B8FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
Manifest number: 15A4
Signing time: Sat 14 Jun 2025 18:00:46 +0000
Manifest this update: Sat 14 Jun 2025 18:00:46 +0000
Manifest next update: Sun 15 Jun 2025 18:00:46 +0000
Files and hashes: 1: 1BcD2zAgzB7y_XEJGkaPSmScI48.crl (hash: z2cKQ/V8u/lcWqqyzMZxGSFyo17I1NePbr5LZxHUtTw=)
2: JoOIhSAqKdpIXX40gcKLusWeNyE.roa (hash: XGkJT13q1QJrNBJYi9R9LyTuLa34GhQ10YEFypzjsJU=)
3: dumiLPj8dIgbkOu_ODKjUhmF_rM.roa (hash: kFpbhODmKPkVFS8czIjYIk5us47dHmcmchszyizHwz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:e7:6e:02:29:02:ef:ff:ea:1e:2a:75:2b:8f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: Jun 14 18:00:46 2025 GMT
Not After : Jun 15 18:00:46 2025 GMT
Subject: CN=c5b1dc363507be3e6b436bf525f560e2d0460632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:ad:9d:22:17:cb:ca:e8:e5:aa:88:b0:89:
ee:fa:eb:90:ac:ee:96:ad:8c:d2:8a:17:f8:8d:a5:
dc:3a:7c:93:c9:eb:c6:11:dc:5e:f3:ba:80:30:a9:
12:83:35:47:9d:1f:d9:01:b9:74:07:67:c2:d8:c8:
47:82:92:08:44:4a:8f:56:8e:7b:04:7d:7e:30:ad:
3d:56:52:28:06:e7:15:33:a2:97:3b:d3:5c:46:bd:
88:da:e0:c9:ce:53:3a:68:e8:63:76:7d:3e:47:34:
e4:b3:55:dd:76:d0:7a:5a:8f:53:d5:8c:47:06:b7:
b7:48:ea:ae:54:1a:a9:5c:67:37:3a:ab:ec:89:1b:
eb:80:3a:2a:16:08:1c:c1:34:ac:75:9a:93:0e:1f:
3e:e3:93:c7:b7:95:dd:ac:5d:ef:ae:d6:31:c2:bf:
b7:c9:25:bb:53:d5:53:b1:80:eb:81:2a:f3:5a:13:
9d:2d:f9:e3:ee:57:60:b5:73:f8:53:8a:25:61:b2:
07:5e:a5:6c:85:46:d1:b8:73:67:ab:dc:96:ad:a7:
66:48:2b:21:f3:16:0f:2f:1f:14:31:43:ac:d6:25:
4f:30:9d:98:03:97:14:fd:83:e6:16:93:13:0a:a0:
47:1b:9c:90:3e:b8:a2:52:ef:61:8f:15:8d:64:c5:
d7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B1:DC:36:35:07:BE:3E:6B:43:6B:F5:25:F5:60:E2:D0:46:06:32
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bf:2c:10:44:fa:d1:88:6f:19:e0:8d:84:db:cc:6c:69:f6:
ef:13:e6:5f:c9:9c:66:c2:c0:cb:c0:14:ef:35:d2:77:56:06:
c9:2d:88:f2:8e:b3:b9:43:30:9b:df:88:19:f5:17:b5:d3:b1:
eb:f2:46:56:fa:62:9d:61:f6:3b:c8:13:c4:30:98:23:87:80:
b1:4d:91:e8:d6:1b:3a:e1:d6:e0:ee:bf:b8:2e:60:67:92:b7:
b8:c0:a1:66:3f:8e:1b:16:b2:0e:ef:5b:7f:ba:89:b1:29:84:
c5:20:8b:79:96:49:87:a8:bf:c4:a4:bd:68:83:ff:71:36:25:
7b:01:cf:ef:5e:e2:98:54:42:4f:2f:10:d1:39:28:54:fd:94:
b6:c7:c7:f0:2a:99:2b:9d:11:05:fb:94:e6:4a:05:7f:f7:7d:
f7:db:76:1e:d3:c2:5b:49:59:d5:25:a0:d8:01:de:5f:0f:71:
f2:09:90:3e:96:b2:01:5c:f7:d6:96:c3:44:7c:d9:83:d1:b6:
d0:18:5f:15:40:b2:db:97:01:50:7b:d4:40:e0:36:1a:f0:ee:
ae:b5:b1:c6:51:97:49:f8:cc:7f:bb:9a:13:46:10:43:f9:d7:
2c:5c:7d:f0:3b:43:64:31:44:1c:1a:a8:f7:1e:de:e7:c2:22:
b4:2a:08:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:58:57 2025 by rpki-client