Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
File: 1-83RF-rHV7b485QoZTrhJQjMaYk.mft (raw, json)
Hash identifier: DBkU5LiUNBPxbl15pGAn+VOCUDBYrs4FM2MAwNxEHeI=
Subject key identifier: 10:41:61:EB:6F:DC:11:9A:25:04:34:D4:80:E0:A0:17:E1:EC:91:D8
Authority key identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
Certificate issuer: /CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Certificate serial: 01976F2C239BB60E351355CA1CED0F277C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
Manifest number: 13AB
Signing time: Sat 14 Jun 2025 16:00:52 +0000
Manifest this update: Sat 14 Jun 2025 16:00:52 +0000
Manifest next update: Sun 15 Jun 2025 16:00:52 +0000
Files and hashes: 1: 1-83RF-rHV7b485QoZTrhJQjMaYk.crl (hash: S5ms463Bk/Stft4HWREdbna3grBiwOOjcyb7p1sBXYE=)
2: HLsqpW_Z-fbGO_aC3llZw59d0HA.roa (hash: zNqiqKUQYXwQHeg5g/DJfaZuunabikgAw4lZ3lENgDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:23:9b:b6:0e:35:13:55:ca:1c:ed:0f:27:7c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Validity
Not Before: Jun 14 16:00:52 2025 GMT
Not After : Jun 15 16:00:52 2025 GMT
Subject: CN=104161eb6fdc119a250434d480e0a017e1ec91d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:09:d9:12:4a:b9:98:4b:df:68:d1:bf:5f:
d5:37:ec:d7:7a:58:5d:c0:5c:18:38:dc:97:81:98:
b0:91:e9:82:0e:44:ca:c9:46:db:73:23:39:d6:20:
04:36:6a:22:23:53:e1:0b:33:46:29:d3:3a:c3:21:
6c:6e:1c:2d:f7:45:57:54:7a:02:3e:36:7d:c5:ab:
c7:3d:96:b2:17:77:66:1d:a2:a2:fd:02:22:03:40:
5e:1b:20:76:32:98:0b:df:a5:2b:8b:c7:37:43:0a:
37:07:c3:f6:35:5e:d8:17:cf:e2:89:2e:2c:5b:75:
60:49:1e:ed:fa:c7:d3:57:d1:da:07:27:e5:2e:6f:
99:d2:e0:3f:d6:21:45:13:1e:cb:62:c7:38:5b:a3:
c7:ad:f0:29:eb:31:99:f1:83:7b:6d:2d:11:8d:93:
6e:9d:cd:cf:93:59:d0:d1:6b:d9:05:9b:92:df:de:
51:83:3d:9d:32:55:da:ce:b2:81:1a:29:67:42:89:
0f:88:65:ff:61:86:e5:0f:da:b9:2c:de:66:8c:9c:
75:c7:5f:66:57:44:0f:f9:e6:7f:65:cb:d1:10:f0:
38:20:e3:57:1c:63:29:4a:c4:6e:b8:4f:4f:34:41:
7d:20:a2:72:a9:b2:08:b8:0c:c5:36:b1:c5:89:92:
da:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:41:61:EB:6F:DC:11:9A:25:04:34:D4:80:E0:A0:17:E1:EC:91:D8
X509v3 Authority Key Identifier:
keyid:FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e1:f3:af:ff:5e:4d:be:bb:2d:f2:ca:40:1a:ab:66:84:74:
07:0d:75:2c:9e:63:7e:4d:ec:f7:2a:a5:4f:5b:97:fd:0c:7d:
7c:aa:49:0f:2c:78:1c:19:0c:3d:90:2d:05:33:6d:d3:72:9c:
f4:a0:7e:a3:e5:d8:76:52:eb:47:04:17:ad:a2:8d:7a:c6:8c:
f8:82:43:1f:c8:45:67:ce:c1:b5:e2:c7:48:25:45:cf:ec:49:
d6:d9:3d:1c:fa:46:46:41:bf:f9:5c:60:0e:73:a4:08:d9:0a:
be:a2:e6:dc:06:a0:92:a0:4a:63:26:9e:b7:ec:3d:9a:0d:e6:
67:5f:6f:be:88:3c:d2:9d:14:63:9b:87:38:f3:8e:97:59:fd:
1f:10:49:c1:86:99:0d:c6:10:76:01:cf:9b:c2:a9:df:18:f1:
24:d5:0c:83:16:01:dd:f9:c1:6c:86:f1:ab:eb:7d:e1:4c:31:
88:77:68:4d:9d:1e:03:10:fd:74:90:2b:61:54:5e:c0:b0:e6:
2e:cc:38:27:b1:35:c8:c3:96:19:06:d9:92:79:25:66:ac:03:
1b:77:2b:b6:83:93:35:1d:9f:96:1c:69:88:ec:df:9b:87:69:
ce:52:17:be:7b:67:39:a7:c9:68:6c:e2:d3:55:59:f0:2b:28:
e6:47:7d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:50:06 2025 by rpki-client