Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
File: rPsCQyaIZ0JgxtASpZfXC81RScQ.mft (raw, json)
Hash identifier: +NRtt1s5ymEDRvhttpjHtaksPlLu6gwZO7WUpLs+HXE=
Subject key identifier: FB:35:73:8F:C4:AF:C8:89:40:80:BC:5E:CD:1F:3D:06:10:EE:49:5D
Authority key identifier: AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
Certificate issuer: /CN=acfb02432688674260c6d012a597d70bcd5149c4
Certificate serial: 0197760A024D4EB2A9C91108587B18DD9995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
Manifest number: 1596
Signing time: Mon 16 Jun 2025 00:00:56 +0000
Manifest this update: Mon 16 Jun 2025 00:00:56 +0000
Manifest next update: Tue 17 Jun 2025 00:00:56 +0000
Files and hashes: 1: A88LbPdx-8cfYkVb8yLzaoaOIc8.roa (hash: vbrcMRJHvTfymU9cXgb/J1eu18qmF5+dFVWeyuuyCEU=)
2: rPsCQyaIZ0JgxtASpZfXC81RScQ.crl (hash: K8jVntSxWDRx+lCBOa25NepcNChz4l8S5VB4Stl8gOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:0a:02:4d:4e:b2:a9:c9:11:08:58:7b:18:dd:99:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfb02432688674260c6d012a597d70bcd5149c4
Validity
Not Before: Jun 16 00:00:56 2025 GMT
Not After : Jun 17 00:00:56 2025 GMT
Subject: CN=fb35738fc4afc8894080bc5ecd1f3d0610ee495d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4d:f0:24:b8:36:2e:32:c0:0f:62:c4:7e:5b:
3b:68:a5:7a:f5:5a:79:86:7c:92:e5:5f:89:d3:65:
1b:e3:c1:45:53:f7:67:de:07:f5:9d:f6:7d:4c:c2:
60:03:7c:13:69:6d:50:08:d5:aa:6d:9a:9f:7d:84:
be:b2:f9:12:64:d3:9a:d7:39:6f:82:68:df:da:a4:
29:f7:4b:e6:37:27:ca:f2:55:23:08:f0:41:1c:3b:
fb:ae:12:53:0d:a6:46:09:b9:62:83:74:a4:90:0b:
a8:1a:ab:24:98:18:ee:66:33:3b:b0:85:c1:a2:b0:
45:04:7c:6f:7b:01:b2:22:8e:4e:9a:32:8b:ab:89:
ae:70:10:50:d9:cf:32:36:20:46:52:51:04:96:8c:
8e:35:ab:8a:b2:37:e6:b9:df:35:3c:58:a6:92:cb:
30:2f:55:11:ac:72:6b:98:40:4e:4d:22:97:53:f1:
86:a6:8b:01:4d:eb:fe:f8:81:70:d1:72:e0:91:fc:
fd:c1:88:bf:b8:9c:e3:25:d9:fc:8c:1f:6b:44:d3:
f8:ea:9e:8a:b6:94:e9:fc:a0:6e:68:e1:dd:2e:8c:
85:40:e8:7e:6b:f6:b5:19:49:88:18:ce:78:6b:d5:
0f:85:57:0e:93:f0:6b:9c:92:c0:a1:3a:44:3e:81:
59:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:35:73:8F:C4:AF:C8:89:40:80:BC:5E:CD:1F:3D:06:10:EE:49:5D
X509v3 Authority Key Identifier:
keyid:AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:75:8b:54:a1:e6:60:41:33:92:19:f7:83:33:0e:8d:0b:7c:
e9:ed:df:6b:3e:24:9c:71:d4:49:6a:75:17:d4:77:bf:ee:a8:
51:76:e0:16:39:9a:64:2c:bb:88:80:2d:cb:9c:af:9e:8d:01:
05:e8:d3:70:59:a2:0f:fb:00:52:25:41:f9:9f:c2:28:47:d3:
5c:a2:63:67:2d:54:a1:fa:53:5c:72:73:e8:05:5a:49:d6:ca:
d0:7b:5e:0a:a4:0a:fd:2a:e9:cf:b5:07:70:0d:2c:f4:f0:64:
36:ab:55:f3:07:6b:8f:c1:e1:fd:a1:5c:66:18:80:42:6b:aa:
79:77:1e:50:96:62:63:6f:0c:67:36:4a:5d:c0:1c:4e:19:d0:
f3:60:fd:77:86:e1:7a:08:f8:03:36:4e:d8:41:45:90:33:86:
51:69:1c:f0:36:ae:08:d3:32:45:e8:dd:8b:de:e3:a4:fe:72:
7c:e4:eb:d4:ee:ab:a0:0b:5b:70:fb:ff:0c:b1:68:63:e4:d6:
d7:85:85:42:cf:b5:69:20:54:9a:f9:8f:e0:cb:2c:10:a7:f0:
a5:d3:28:de:94:43:2e:e0:61:7e:d3:fc:fb:17:00:2e:13:91:
9d:34:78:a6:88:0c:09:85:b3:4e:30:58:7e:9a:e3:1d:f2:83:
ce:70:f1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:33:39 2025 by rpki-client