Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
File: 1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft (raw, json)
Hash identifier: ctseXHFhodT4JH6lbxiZ5m7kC+psz6u/iXda5oke/Mk=
Subject key identifier: E4:E6:C7:46:B0:88:84:52:15:1B:F4:11:FA:0B:55:33:F0:9D:79:E2
Authority key identifier: F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42
Certificate issuer: /CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
Certificate serial: 019768F2DF2EA5699EED583FDB92580EC56E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 11:00:36 +0000
Manifest this update: Fri 13 Jun 2025 11:00:36 +0000
Manifest next update: Sat 14 Jun 2025 11:00:36 +0000
Files and hashes: 1: 1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl (hash: E98CdTzf1pm072sH5zw8f8eXaP8w3eFcaHuInDuz5v0=)
2: mab9pSsP0hPfmw5pFW9oVdvDO3s.roa (hash: QMgbTzBaUnDZaZXtIzkU3/zhP2tD7XocJ5teoU1UGow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:df:2e:a5:69:9e:ed:58:3f:db:92:58:0e:c5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
Validity
Not Before: Jun 13 11:00:36 2025 GMT
Not After : Jun 14 11:00:36 2025 GMT
Subject: CN=e4e6c746b0888452151bf411fa0b5533f09d79e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:18:cd:3c:b4:5d:21:33:52:c1:85:ec:21:a5:
ed:42:dc:6a:c8:77:ce:98:7b:00:8f:40:68:0d:5e:
f3:26:ad:37:04:60:96:68:84:9c:4d:6b:43:c9:83:
36:c4:35:8f:04:33:58:97:b9:1f:e4:06:da:68:2d:
04:73:4f:7c:5b:62:9c:7b:88:cb:ee:2b:3a:8a:6b:
8e:0b:bd:4c:3e:4a:bc:56:04:00:8b:83:8d:77:5f:
41:7b:1d:11:e7:31:6a:bb:aa:6c:5c:48:e1:2d:b2:
c3:4a:e9:f0:e2:69:aa:28:92:5a:6d:95:8f:37:17:
33:b8:4a:ea:62:df:70:ad:6a:02:99:77:7a:52:7c:
b0:16:bf:19:81:df:68:9a:63:54:c2:8f:67:33:14:
ed:e6:2c:d9:68:0c:3e:27:b2:f3:f1:da:60:91:79:
0d:00:fd:e2:74:94:6e:8a:8a:1a:9e:51:5f:4d:31:
0e:94:8f:68:ab:a8:f4:8a:fe:54:2d:04:26:35:73:
60:46:3a:10:01:a7:24:b4:81:14:de:47:3f:c8:fb:
64:23:98:f8:82:ce:84:89:3f:bf:49:c7:c7:36:ad:
d4:cf:0a:fb:c6:2e:58:03:da:0a:7d:68:a0:9e:a3:
35:07:27:2e:b7:90:b9:36:11:a4:5c:cf:b1:7d:e4:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E6:C7:46:B0:88:84:52:15:1B:F4:11:FA:0B:55:33:F0:9D:79:E2
X509v3 Authority Key Identifier:
keyid:F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c9:b8:48:c0:0c:cd:ca:9a:79:75:64:77:5f:19:4a:20:01:
03:62:5c:ef:09:5f:fe:d3:8a:1a:b1:a1:da:72:56:d3:64:59:
92:ca:4d:c0:08:12:6b:3a:89:4b:c5:a1:44:5a:e4:6d:66:5d:
32:94:25:8e:cb:16:67:91:c3:aa:80:cf:d5:40:bf:52:5f:ac:
e6:0a:86:25:f3:0e:6d:5e:99:e8:f4:a3:06:15:54:ee:aa:e9:
a8:ea:86:d3:1c:dd:82:e6:e1:c9:25:16:4c:6f:52:31:51:dc:
e5:22:9f:72:a6:10:20:89:f0:72:f6:e4:2c:d2:a6:f6:bf:67:
98:fc:2c:b3:96:b2:73:1e:87:6f:73:34:63:4b:17:60:59:af:
f5:7e:ee:8d:b9:12:f7:2d:4a:28:f8:21:45:0e:8f:d4:5e:ac:
06:ed:34:a7:d3:29:27:ef:96:90:b4:6a:93:59:83:60:60:54:
2e:f4:5b:2f:da:89:c8:cb:76:94:f2:52:1d:fb:54:2d:a1:af:
02:6e:16:4d:94:50:44:7e:12:96:7a:12:ed:0b:3e:f7:6d:1e:
48:2b:76:e2:32:f3:c3:59:b4:cc:00:65:8e:d6:65:6b:23:1c:
ac:dc:b0:82:5e:f2:82:79:80:8d:df:05:9b:b8:ff:64:1d:7e:
88:e5:fc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:01 2025 by rpki-client