Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
File: 1PkhKd96qnFX4VlzwkdT4RjJBX0.mft (raw, json)
Hash identifier: SbK8a9gaVV56MH3dL0HoHzxE4ScUriw0M8zqEcQZCpo=
Subject key identifier: F2:F8:C6:B5:C4:A9:54:6E:3B:91:F6:54:63:FF:FE:54:43:BD:35:9D
Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d
Certificate serial: 01977B3099E0A390D97E5B38BF81DA8A81F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
Manifest number: 1596
Signing time: Tue 17 Jun 2025 00:01:12 +0000
Manifest this update: Tue 17 Jun 2025 00:01:12 +0000
Manifest next update: Wed 18 Jun 2025 00:01:12 +0000
Files and hashes: 1: 1PkhKd96qnFX4VlzwkdT4RjJBX0.crl (hash: idb6CorjD0tnoG+0MMuUhoS4rMbcmdNDsOpxzeB1YPU=)
2: qe7WgTc0pmEzzldB9WeXLDwRwuY.roa (hash: QJYNnjPlPIICfSb9VCBEBsTZ9KLpm8+zxTVc8XyL9RY=)
3: yPpTiNnoGdGVkfC9weXZ8IcYOvo.roa (hash: GPROq8bCcJ/0NryOKaC/XQSUJzGn/7Y4gmLVXUsuJPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:30:99:e0:a3:90:d9:7e:5b:38:bf:81:da:8a:81:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d
Validity
Not Before: Jun 17 00:01:12 2025 GMT
Not After : Jun 18 00:01:12 2025 GMT
Subject: CN=f2f8c6b5c4a9546e3b91f65463fffe5443bd359d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:31:91:76:2a:0a:2a:e0:e1:5b:aa:e1:0f:
59:84:bf:ef:6b:5d:db:21:6d:0a:e8:f7:d6:3b:a6:
d3:d9:b9:97:93:72:f6:0a:53:e7:80:3b:e7:3e:47:
5d:62:a6:d8:c4:14:0d:81:b6:fa:a4:54:50:8f:b0:
bd:fd:7f:1f:3b:d5:7f:94:7c:d4:1c:4d:17:8d:3a:
82:59:86:43:d9:85:11:80:2f:16:fc:aa:a8:47:7a:
6e:2a:42:45:c7:ba:a6:03:5c:ad:a8:24:10:49:37:
cb:9f:e1:ad:06:2c:3d:24:7b:b1:22:11:c0:aa:a5:
22:48:d3:95:2a:19:19:55:69:98:46:72:32:4e:42:
78:53:57:94:c6:06:36:32:e6:b1:72:9d:6d:29:c1:
4b:96:25:d8:a5:b7:cf:bb:bf:41:2a:ec:de:ac:55:
75:14:44:d3:b8:53:02:7a:9d:53:2e:58:74:0d:c8:
5b:cc:61:ee:3d:20:ad:d6:2a:1d:51:d4:24:3c:c7:
10:45:78:c2:e0:47:d1:cb:fa:61:e2:9d:4e:97:46:
8e:bc:d8:83:4e:8e:a9:09:c5:96:b4:66:00:a6:a6:
22:b2:65:48:fc:0e:6c:1c:dd:67:60:73:de:63:94:
cd:72:e6:20:67:eb:eb:3c:02:4c:15:0c:11:5e:f6:
a6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F8:C6:B5:C4:A9:54:6E:3B:91:F6:54:63:FF:FE:54:43:BD:35:9D
X509v3 Authority Key Identifier:
keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1f:54:ec:f4:e4:fe:79:95:60:49:a1:3e:81:ed:ef:fd:ee:
27:82:a6:4c:13:71:8e:d5:1e:4a:f4:5c:00:4b:da:1d:ab:f4:
ba:00:a5:6c:7a:c3:f2:2f:8f:63:e8:33:7c:72:bf:21:78:de:
3f:8d:0a:88:04:d1:83:af:99:93:fc:0b:e6:08:a2:64:bc:4e:
f1:f5:80:c4:c6:a4:16:00:9c:cf:82:a6:18:35:6a:2b:e2:b5:
6c:3d:0f:bd:81:29:26:a0:1d:9f:22:55:7d:05:ba:66:a4:9e:
6c:ee:75:f1:ab:b7:e4:6b:2a:38:ec:67:5b:72:79:e3:6f:a6:
40:47:1e:d1:8f:ef:2f:57:dc:dc:df:33:12:a4:19:07:15:a2:
f7:37:68:e9:37:6b:79:66:29:d1:68:ca:10:1a:29:68:24:12:
9f:9e:90:ca:7d:53:c9:e0:bf:b2:e1:ea:b9:73:03:00:86:73:
b1:de:ef:c2:6e:e2:da:61:bd:8e:9b:66:66:eb:07:3b:24:0f:
b4:a0:87:03:c8:5f:5f:b8:14:fc:ce:ee:11:c8:50:68:00:7f:
4f:d2:a9:8f:4b:00:cc:0d:15:4d:fc:02:08:73:82:e7:32:d6:
39:27:9f:3e:83:8c:35:d3:81:c1:7c:d8:96:c0:8f:b7:9c:76:
84:0c:ae:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:50:14 2025 by rpki-client