Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json)
Hash identifier: XwZq9/I9HwtVN0DJP11T0erCRgvRjcnQ5xJgbF+AS58=
Subject key identifier: 62:38:9F:5A:A0:7B:B7:8D:06:1D:65:F3:76:15:A1:E4:A3:5D:11:48
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 01977AC32BDBD04AF2036F50C45DC0BBAB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
Manifest number: 1201
Signing time: Mon 16 Jun 2025 22:01:40 +0000
Manifest this update: Mon 16 Jun 2025 22:01:40 +0000
Manifest next update: Tue 17 Jun 2025 22:01:40 +0000
Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: HCpi6FmP98VY99Mtm+1GQpOaW3MZeePovtv8bWuzvRU=)
2: MwEJqReLtYJIDzQC3nxs7sP0tvA.roa (hash: WyxWLsA6emUiFQU/YyUOL864IemIj/7UtRIviv8JcEw=)
3: iAzdsnC_l6rdd2kZ6hvA3HRXqCU.roa (hash: sMPWtnAj59EVmsTaMYwCg3wIrLPxpEslb0ZjPRwWR6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c3:2b:db:d0:4a:f2:03:6f:50:c4:5d:c0:bb:ab:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Jun 16 22:01:40 2025 GMT
Not After : Jun 17 22:01:40 2025 GMT
Subject: CN=62389f5aa07bb78d061d65f37615a1e4a35d1148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:87:a6:46:38:d3:81:52:ed:04:4f:e6:a3:
93:75:3a:a8:11:ec:10:11:39:8b:4e:51:49:ce:f5:
c4:e6:d5:12:c3:f7:ce:79:f8:4c:ca:a3:06:26:9f:
d9:ec:80:c3:de:65:f0:08:63:33:71:52:73:8a:dd:
70:e1:21:8d:24:95:fd:ab:47:a9:9b:60:b2:f7:21:
22:80:f7:02:58:6b:c0:8e:4b:96:8d:b1:cd:17:0e:
c3:f3:40:e0:e9:6e:1c:f3:c7:b9:3b:2c:86:a6:9d:
f6:38:4a:6f:db:77:e5:a0:b6:b7:b4:e1:1c:49:75:
a8:c7:15:e8:65:b9:08:8e:0f:a9:c3:30:2e:df:ab:
7e:cf:8d:8c:af:53:56:dc:64:82:ae:45:9a:e6:f4:
60:3f:29:ea:fd:d0:6c:a4:65:93:60:a2:a3:42:09:
e3:ef:29:3c:1e:6b:6b:b1:cb:f3:16:d6:52:fc:9b:
f9:62:a4:b2:a2:fa:8f:44:86:23:ae:40:ff:1a:17:
1d:d7:7a:ca:a0:cc:94:69:7a:d5:26:b0:38:e5:1c:
4f:1c:9f:01:3d:83:a1:8c:60:a1:bf:b3:30:cd:bf:
29:3d:15:cb:7f:e3:23:ac:8a:12:80:67:cd:0d:bc:
6f:80:4b:cd:7a:b9:02:79:6c:dd:18:9d:25:a4:21:
ff:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:38:9F:5A:A0:7B:B7:8D:06:1D:65:F3:76:15:A1:E4:A3:5D:11:48
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2c:6e:b8:df:04:ed:a3:fc:b3:11:09:4d:83:36:d8:7d:87:
b8:90:f2:b5:82:2b:64:37:b1:cc:c2:6a:b6:de:8e:4f:2a:8a:
86:b4:6a:43:8f:d3:4e:eb:7b:b3:0c:f2:af:73:64:8f:5c:35:
e0:a8:ac:9f:bd:63:03:50:bd:2f:9a:b0:76:05:97:14:b0:76:
80:85:3f:98:23:fb:70:f6:e9:2e:d7:d4:9c:fa:2e:99:ab:06:
67:c6:ff:0e:71:b8:cb:fe:d7:fe:fd:3b:88:bd:23:e9:79:1a:
6f:24:5d:d9:09:16:cd:56:ac:f0:25:e4:ab:dd:cc:66:26:10:
ca:b7:f2:e3:76:7d:ff:fd:10:38:62:d3:15:a2:f6:38:f9:d2:
42:29:69:4d:c5:70:18:96:b8:52:bd:0c:49:30:5d:45:7e:79:
e2:46:88:4e:c8:e3:75:12:50:9a:3b:ef:83:b0:60:ce:75:08:
86:61:7a:18:93:ce:ee:73:71:16:b4:1d:53:c6:55:36:39:e9:
0a:fc:df:82:32:0a:63:aa:b7:91:a2:a1:39:ff:7a:48:cb:01:
a9:9b:5a:eb:69:67:1d:4c:d8:26:91:c3:1f:46:be:20:59:85:
c7:03:40:e8:d7:94:bc:24:be:fe:1b:33:45:f5:8c:52:66:6b:
9e:14:d4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:44:30 2025 by rpki-client