Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
File: 1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft (raw, json)
Hash identifier: t+rmtw4VJPDVXbzU7VHetYV50sb8N8u2lB0W+N/uL18=
Subject key identifier: 2A:F0:10:07:B0:AB:C5:E1:EC:72:2E:DE:07:52:DB:DE:FC:71:A9:DC
Authority key identifier: FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC
Certificate issuer: /CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
Certificate serial: 01976F629040CD93BCC34264B91952913CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
Manifest number: 0FDC
Signing time: Sat 14 Jun 2025 17:00:19 +0000
Manifest this update: Sat 14 Jun 2025 17:00:19 +0000
Manifest next update: Sun 15 Jun 2025 17:00:19 +0000
Files and hashes: 1: 1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl (hash: +4w4dAw6n1tXkdAQefNOSs4WDTyxNceruBVKRTen2k4=)
2: Qqhw1hFjAH2cjMyIzDFuLuhBB38.roa (hash: N8UT7eSxYsrDW5XIIE4cv48SYlBhyKYdxt2C78AnGxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:90:40:cd:93:bc:c3:42:64:b9:19:52:91:3c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
Validity
Not Before: Jun 14 17:00:19 2025 GMT
Not After : Jun 15 17:00:19 2025 GMT
Subject: CN=2af01007b0abc5e1ec722ede0752dbdefc71a9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:57:1a:d3:e5:36:6b:f8:ec:67:e5:9d:af:0a:
04:57:70:e5:23:95:aa:5e:d7:6f:20:90:ca:10:4e:
e8:ae:f7:a6:72:d4:66:47:06:35:0a:12:47:2f:6e:
83:81:a7:b0:3e:19:66:20:db:ad:65:1c:99:14:c9:
bf:6e:ac:75:f5:fe:49:5f:8c:ff:de:66:9f:d8:21:
24:3c:b1:a7:54:b8:ee:e7:64:14:c8:75:6e:70:a8:
30:fa:6b:4e:10:7f:9a:7c:19:d6:9e:37:57:89:df:
8e:93:6e:fa:57:3e:7e:25:89:41:cd:f1:c9:3e:8d:
44:5f:48:f8:0a:9f:e5:01:69:21:4f:cb:57:54:87:
e8:75:57:c0:c5:20:c5:66:af:a4:40:30:48:50:8b:
37:5a:be:d8:54:e9:79:fe:94:81:94:03:77:2d:79:
3d:d0:23:60:6a:aa:d0:a3:20:4a:10:fb:0a:1e:2c:
20:20:92:14:63:b3:30:3e:5a:73:e7:d6:57:77:b6:
f9:81:21:40:41:ed:4b:2b:ae:19:f5:a0:01:bb:86:
20:03:74:45:0c:dc:cb:17:14:ac:6b:cb:73:c1:0d:
75:17:d2:62:f3:ca:87:ff:50:ef:ea:dd:1e:11:80:
15:53:4e:e8:f1:2f:c4:4c:47:93:aa:e3:d6:51:1d:
d4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F0:10:07:B0:AB:C5:E1:EC:72:2E:DE:07:52:DB:DE:FC:71:A9:DC
X509v3 Authority Key Identifier:
keyid:FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5a:a9:42:ab:29:9a:ac:c1:d6:a4:d7:18:4b:1b:46:07:1d:
b8:6e:4b:a1:79:7b:e7:36:13:c5:b8:72:7b:12:53:60:ea:a4:
26:fc:8a:d8:c1:95:a7:76:01:cd:88:62:43:ff:5d:9e:f6:af:
70:fd:3f:be:ea:e5:e2:17:15:39:18:b2:76:8b:10:05:00:7d:
61:c6:3e:ec:33:de:60:4d:32:e6:c0:5d:03:f8:bc:76:df:96:
87:b3:86:f4:dc:cf:04:74:bd:86:c9:00:03:d3:4a:78:28:61:
35:25:e6:6b:e7:b1:76:a4:97:5e:70:d3:05:ea:5a:6e:8a:ac:
6d:fc:d6:86:fc:58:81:ee:40:34:8c:99:b2:a1:33:0c:35:1e:
06:f2:e8:1a:e0:01:a0:28:2a:49:01:c9:a7:74:9c:0e:98:55:
f7:db:17:dd:ff:ff:f0:97:96:bd:80:85:83:0b:2f:9c:6f:80:
d2:71:2c:6f:fc:9d:33:4d:bd:d6:fd:a1:f2:e9:36:86:96:b2:
b7:1e:7c:81:99:8c:fb:82:58:22:fa:91:32:2d:d6:f4:1f:01:
a4:0c:82:89:65:28:b6:7e:78:1c:24:df:38:6c:34:f6:1b:03:
1c:94:6e:8f:fa:25:1d:71:a0:5f:9c:05:af:57:2d:7b:af:b5:
4e:a4:c0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:02:21 2025 by rpki-client