Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
File: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft (raw, json)
Hash identifier: 4VhsKNcfienNUGvInnIafhgdY1XgmrYl7y+I6l+RIpM=
Subject key identifier: 42:36:47:56:89:AA:46:29:20:F3:A4:30:58:92:A3:9F:F8:73:DC:C1
Authority key identifier: D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
Certificate issuer: /CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Certificate serial: 01976FD10DA4B4DCF9597FA4B459DD8B2265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
Manifest number: 1252
Signing time: Sat 14 Jun 2025 19:01:00 +0000
Manifest this update: Sat 14 Jun 2025 19:01:00 +0000
Manifest next update: Sun 15 Jun 2025 19:01:00 +0000
Files and hashes: 1: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl (hash: BB7eUwcOpYciTHiAC5uCPkS6zNjAtFNKi88VjVTOQcg=)
2: A0q8SzSP_vkB0Kdb-LLhQ_QObQQ.roa (hash: U5YBrDMRrX6ygfCOd+cwFtTn/aDz7ai314haVDrv0Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:0d:a4:b4:dc:f9:59:7f:a4:b4:59:dd:8b:22:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Validity
Not Before: Jun 14 19:01:00 2025 GMT
Not After : Jun 15 19:01:00 2025 GMT
Subject: CN=4236475689aa462920f3a4305892a39ff873dcc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:25:f1:af:14:92:c0:01:f0:5d:e3:be:f8:14:
bb:2e:86:e2:87:05:eb:b9:25:4b:14:27:8f:06:16:
d3:56:9e:f2:45:89:f1:9e:b9:d1:18:89:d7:60:59:
e4:06:23:15:21:05:28:6f:a0:c9:77:87:c4:9f:ac:
5e:6c:de:29:e8:ff:c1:9d:34:d4:62:fb:b5:69:7c:
4a:bc:31:29:62:87:46:03:04:02:25:31:0a:eb:84:
fe:56:fe:09:16:6c:71:b3:7a:8a:01:25:a4:b3:76:
52:53:ac:37:06:ca:ca:f0:ad:a0:93:0b:4d:04:35:
2f:92:d5:a5:88:d5:17:82:b6:3b:2a:e0:80:8d:b5:
38:9b:a1:7a:6f:69:f0:94:b0:a6:10:0e:4e:2e:d6:
f4:10:cf:89:61:75:94:b3:f6:bd:01:55:ee:34:59:
d4:45:73:05:1a:0d:1e:a1:b0:8a:7a:19:3b:0c:04:
b8:10:49:ce:d2:88:cf:23:5a:a3:8a:0f:2b:bc:5d:
60:17:30:b3:7d:36:6b:df:87:d7:82:0b:79:aa:4f:
b9:86:e1:72:d6:66:32:32:fc:b8:33:da:97:0d:c5:
86:76:92:79:8f:63:20:66:a1:a9:9c:fd:4d:89:72:
43:88:56:ee:35:23:0b:8e:06:8e:58:28:98:7a:b0:
4a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:36:47:56:89:AA:46:29:20:F3:A4:30:58:92:A3:9F:F8:73:DC:C1
X509v3 Authority Key Identifier:
keyid:D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5b:f5:59:9b:2f:91:9b:0a:55:96:d6:57:78:63:37:0c:57:
b5:b8:20:3a:7f:c4:79:37:e8:10:0a:38:f7:86:ed:12:c6:d9:
ce:d7:dd:2b:ec:e6:04:17:d2:63:66:1b:3b:72:10:20:63:74:
78:7d:56:3e:18:6d:f3:21:c9:54:fa:24:d3:23:33:bc:26:e2:
9b:b2:93:71:49:84:d7:80:27:45:8e:c6:35:af:0e:b5:fc:0d:
79:1d:c0:8e:a3:53:fb:0e:f6:b1:dd:8c:27:ae:02:2e:e7:0f:
5a:c3:8f:8d:78:8d:05:3c:8d:0b:41:8c:89:db:d5:9d:d6:c9:
a3:f0:5b:37:6a:4a:ba:ee:02:01:65:c9:c8:4c:0c:09:57:8d:
c6:f5:51:7c:58:46:9a:c7:26:b1:05:de:7e:11:e1:2a:83:de:
32:34:b8:8a:03:6a:9f:b7:e1:a8:32:01:f1:1d:b8:51:b3:0e:
6b:fd:d6:25:9d:43:48:a1:9b:dd:bf:c1:38:3e:92:00:08:82:
34:59:dd:ad:fe:82:26:74:95:b9:82:00:36:71:48:b4:7f:9a:
c3:02:42:45:1a:2b:20:78:0a:3d:7d:22:3b:58:9e:31:42:f3:
8e:94:3d:2a:8d:9f:be:4c:2e:8a:6c:6e:d8:98:f7:32:02:71:
ef:23:69:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:27:25 2025 by rpki-client