Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
File: 1-vZEdu85RbNE_-442lbKzMXQObA.mft (raw, json)
Hash identifier: HKNNLwmnhUHYIlhiTLEQB2t94Glj8sRIAQIqsEZVfWU=
Subject key identifier: 53:92:DD:8A:8B:ED:EE:98:E9:28:F1:55:C2:8D:91:08:40:B9:DF:04
Authority key identifier: FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
Certificate issuer: /CN=faf64476ef3945b344ffee38da56caccc5d039b0
Certificate serial: 01976F9991EA5E150C4A4F2BFCB37A6A0DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
Manifest number: 1595
Signing time: Sat 14 Jun 2025 18:00:24 +0000
Manifest this update: Sat 14 Jun 2025 18:00:24 +0000
Manifest next update: Sun 15 Jun 2025 18:00:24 +0000
Files and hashes: 1: 1-vZEdu85RbNE_-442lbKzMXQObA.crl (hash: E8cnUdqVUUkrcguVv+PRsHkHZ0jfmdwj6z/WSm1HbUU=)
2: SyEVUI3N-GA_i-uzTD16e1zmM2E.roa (hash: LqMTwONwWzte69tiLUqbC66cMzx5aiQvY2EzU+SnCGc=)
3: jnW4jrIpgrgFGee1gUUQCX9nMQM.roa (hash: Pg7xp2U2lzFs5nMdCFW1WCbmFf1TrwqIn5BPDmSukZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:91:ea:5e:15:0c:4a:4f:2b:fc:b3:7a:6a:0d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf64476ef3945b344ffee38da56caccc5d039b0
Validity
Not Before: Jun 14 18:00:24 2025 GMT
Not After : Jun 15 18:00:24 2025 GMT
Subject: CN=5392dd8a8bedee98e928f155c28d910840b9df04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:a8:8d:d5:30:a8:75:ec:89:80:02:d2:f3:
4d:a7:ec:cc:f4:b5:af:93:f1:ef:25:a7:3a:e7:e9:
ef:0c:d7:5b:be:ed:88:75:9e:e6:98:4c:f0:3d:58:
5a:a7:15:ed:08:55:95:42:16:73:6a:85:a3:4d:e7:
ea:7a:95:f6:61:80:2e:48:d8:d3:39:02:18:eb:dc:
eb:79:be:3c:9f:b6:ab:c0:10:04:38:ed:76:31:00:
70:08:b1:2a:49:0d:7d:fb:a6:fd:c4:61:85:65:d6:
65:8f:05:19:17:6a:4b:b3:7d:03:58:38:2d:a9:7b:
94:fb:e8:8d:7a:3a:5f:d2:83:2e:ca:02:6a:85:0a:
83:e7:05:3d:e2:50:ab:26:12:cd:ac:4c:f3:a6:d2:
86:85:bb:7b:33:cc:d5:f1:1c:ab:87:e0:eb:43:f5:
de:52:5f:72:00:9f:76:06:fe:32:f8:2d:a7:62:3e:
df:e3:af:0c:28:29:22:0f:b2:a1:11:74:0e:99:80:
b4:12:cf:33:54:3d:30:42:4f:a1:fa:ea:67:07:b8:
3b:ff:45:aa:21:60:1f:4b:f4:26:f3:6b:5e:86:98:
9b:41:4e:a9:b3:fd:a8:94:ba:0d:80:fc:7c:3b:c7:
ed:8d:39:5c:bb:27:6b:52:71:ad:27:cf:81:3d:dc:
4d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:92:DD:8A:8B:ED:EE:98:E9:28:F1:55:C2:8D:91:08:40:B9:DF:04
X509v3 Authority Key Identifier:
keyid:FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:44:ba:d6:2f:6d:c0:e0:6d:09:86:fc:e5:69:cc:37:fd:5e:
e4:9d:ef:dd:0f:74:e7:c6:ea:87:25:dd:a8:cc:ba:8d:65:5a:
bc:ff:6f:ac:9b:7d:e6:94:e4:71:1d:82:72:74:0d:52:46:34:
0b:20:e8:96:15:1f:21:0d:7d:75:92:6a:fc:d2:50:fb:a0:e7:
aa:48:ea:28:27:a1:00:f9:02:f8:50:6e:b9:6e:87:c3:49:c0:
ae:6a:a4:51:50:42:c5:ea:1e:93:fe:d5:70:83:98:42:7a:84:
25:7a:e6:4e:ca:7b:68:41:ef:4d:e3:68:df:ac:24:7d:3a:62:
b8:31:77:c4:b5:e9:46:d9:eb:97:7b:ed:9e:c7:8b:42:cd:59:
d7:e7:f8:dc:2f:e6:91:18:eb:20:23:45:5f:14:b1:4e:5b:5b:
1e:b5:59:0b:c0:97:6d:43:13:49:c3:b8:c1:de:29:90:06:ef:
84:2d:5a:89:3a:41:5a:00:cf:9d:33:f6:29:b8:00:af:d3:de:
25:a6:64:21:2b:b8:95:05:84:c4:73:79:a1:86:d6:e3:64:65:
8d:49:69:3f:07:6c:6c:18:e8:04:cc:40:48:61:f9:49:67:89:
84:31:f4:26:a4:ee:69:53:e9:74:70:7a:0e:25:4b:3e:59:ef:
de:97:86:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:56:04 2025 by rpki-client