Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
File: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft (raw, json)
Hash identifier: zwd4VdM30xkSwq8Af9Rm396US0dP+F1EPRZyOWeis3w=
Subject key identifier: 56:3D:36:36:DA:24:EA:99:34:F8:8D:54:24:63:7A:95:E1:2D:70:6C
Authority key identifier: FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
Certificate issuer: /CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Certificate serial: 01976D068A4B20292C9B3BA35645E09A65D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
Manifest number: 44
Signing time: Sat 14 Jun 2025 06:00:34 +0000
Manifest this update: Sat 14 Jun 2025 06:00:34 +0000
Manifest next update: Sun 15 Jun 2025 06:00:34 +0000
Files and hashes: 1: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl (hash: SJydIrehF0xmDtIGOpmbdh0hwt1SBjbKXsBsf0XE3DE=)
2: aw0urpJM4p93PhWqM7da0_3Fozc.roa (hash: y+1M15neToXwBCTOLJI0dSNYHmOEXNHkxHoQ5Af6Zqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:8a:4b:20:29:2c:9b:3b:a3:56:45:e0:9a:65:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Validity
Not Before: Jun 14 06:00:34 2025 GMT
Not After : Jun 15 06:00:34 2025 GMT
Subject: CN=563d3636da24ea9934f88d5424637a95e12d706c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:69:61:0f:f4:6a:bc:b2:57:27:19:7f:d0:
e5:6d:50:9d:4d:5f:02:a2:d9:e2:b8:7a:ab:6f:63:
b3:95:9f:50:29:ac:ef:7a:8c:5a:3e:a1:5f:44:de:
9d:27:6d:be:d1:44:99:06:d4:3f:b1:4e:6e:c4:99:
8b:ba:3c:fb:d0:7e:c2:18:fb:ec:94:26:bb:a7:c9:
a0:4c:2a:3a:2d:fc:20:a5:72:ad:6e:ce:c6:b8:0b:
f4:10:c8:67:60:c2:22:cf:67:d3:f7:ad:9e:9a:12:
73:5e:06:10:96:54:c3:e5:60:f6:ef:6a:95:b6:35:
52:1d:8f:5c:01:c7:c8:49:1d:88:30:8b:a9:dd:e3:
6a:81:50:13:1c:8a:df:59:53:d6:27:3e:37:1c:e3:
b3:1c:83:5d:78:1c:a8:77:f9:8c:aa:88:43:38:f0:
17:c5:17:ae:dc:0e:af:63:8d:a3:eb:a0:07:22:2b:
67:2b:a3:b9:50:22:00:72:4e:4c:d4:c6:a3:a7:07:
73:74:d0:51:bf:43:72:15:61:03:7c:5c:ac:96:06:
31:be:5c:57:68:e3:77:08:82:4a:26:de:13:12:b3:
10:63:e4:a3:0b:9e:c3:a8:39:78:52:38:52:3f:79:
20:52:2f:02:c6:89:f1:1e:14:95:3d:66:3e:0e:84:
23:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3D:36:36:DA:24:EA:99:34:F8:8D:54:24:63:7A:95:E1:2D:70:6C
X509v3 Authority Key Identifier:
keyid:FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:34:34:62:c1:6c:54:fa:e5:36:cb:ae:b4:f8:67:dc:97:a9:
5a:0a:7e:b4:ab:39:61:c5:f8:b6:c3:da:03:ff:31:0d:b9:75:
87:24:df:fa:fa:8f:af:5e:44:ae:a5:13:45:39:c0:81:ad:9e:
03:7a:f7:ae:85:99:ba:31:da:fe:cc:24:ff:a8:04:8d:20:9e:
30:1b:41:0b:24:7e:63:5e:cc:99:f5:bb:12:3f:86:18:71:5e:
ba:69:4c:60:d9:6c:a3:34:64:af:a0:e9:c7:8e:30:65:df:a7:
eb:8f:35:a0:9f:6c:9f:3d:30:b3:9f:2c:70:28:b2:8a:40:a8:
17:8f:d2:68:df:35:36:28:21:05:6b:c9:4c:0d:c7:1a:4e:a0:
aa:7c:4e:26:05:db:3c:77:84:21:a1:55:95:8c:a6:2f:6b:ab:
1b:23:d6:f3:93:78:23:0d:89:50:8d:3c:54:46:43:64:cb:86:
e4:c2:41:ac:2b:3a:6f:7c:2c:4d:df:17:e1:c8:f2:ef:c2:7d:
69:6a:a6:f3:18:b9:cc:b3:21:ad:09:b4:6f:97:9f:38:e9:40:
7e:a8:0d:e1:97:c2:12:ab:20:25:58:a9:95:f1:a8:6d:24:ef:
68:05:81:41:81:a4:fe:05:8b:e7:17:c2:4a:42:63:c7:90:54:
90:01:02:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:15:20 2025 by rpki-client