Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
File: 1a8gwCbeEE2W8XrLr054fvnTAgY.mft (raw, json)
Hash identifier: 1O0p7PhKrMs3vlswSvGY04IevFxgHGD+cYXn2QmLxnk=
Subject key identifier: CD:E0:36:67:B6:2D:FF:95:31:A6:EF:7A:7B:10:68:87:06:EB:35:A1
Authority key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
Certificate issuer: /CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Certificate serial: 01977F7AC7DD8195AFA50CD4EF997B22BB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
Manifest number: 09D7
Signing time: Tue 17 Jun 2025 20:00:42 +0000
Manifest this update: Tue 17 Jun 2025 20:00:42 +0000
Manifest next update: Wed 18 Jun 2025 20:00:42 +0000
Files and hashes: 1: 1a8gwCbeEE2W8XrLr054fvnTAgY.crl (hash: Xm5f5w0RxIwxEwJ1wLDY6aZQnGx4kz9+YN1mG+a+kYA=)
2: ZntZKX2L_8Ma0koJ3HPW10lURHI.roa (hash: OJbq7vowsXJwKs2XlYdhIC+ZaJvxn8OPWmKWbar3xew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:7a:c7:dd:81:95:af:a5:0c:d4:ef:99:7b:22:bb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Validity
Not Before: Jun 17 20:00:42 2025 GMT
Not After : Jun 18 20:00:42 2025 GMT
Subject: CN=cde03667b62dff9531a6ef7a7b10688706eb35a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:8f:cc:ff:7a:bc:5e:46:d1:d0:50:56:ae:
09:4c:e0:69:34:e7:0f:60:b9:85:2e:e4:16:42:f3:
3e:70:ee:0d:8d:44:99:a3:cb:33:44:d7:47:0e:87:
eb:cb:d4:0e:05:94:09:25:30:c4:ee:68:a2:a0:db:
89:08:ad:fc:99:b6:91:64:44:d8:8c:43:7b:12:68:
61:c7:7b:6e:32:fc:67:06:8a:18:cc:f2:e9:b7:97:
7a:c3:2b:89:18:a7:8c:80:45:6d:97:d8:8b:fe:2b:
c8:3c:c5:60:5d:9c:dd:c1:cb:c1:dd:fa:1f:2c:50:
66:17:80:c2:18:da:c3:29:6f:14:c1:f1:de:69:cf:
44:77:de:e6:34:61:7c:8a:fa:3c:e1:e0:69:c7:ce:
3d:bd:09:9f:91:ea:2f:c1:45:af:f4:ec:f8:64:aa:
48:f3:6a:15:82:ef:c2:90:e0:77:d3:ce:c0:e1:e7:
ea:a8:05:55:2b:cb:e8:92:2e:b7:6f:b7:74:01:87:
dc:c1:ae:e9:e4:43:bb:21:a4:2b:54:ed:13:e2:6b:
84:d6:ad:04:16:50:65:06:8f:33:a1:9e:39:18:19:
d8:7c:90:46:70:37:33:6d:03:47:69:ad:90:7d:62:
a9:16:a3:97:94:56:ae:c0:aa:63:2c:d4:12:3d:df:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E0:36:67:B6:2D:FF:95:31:A6:EF:7A:7B:10:68:87:06:EB:35:A1
X509v3 Authority Key Identifier:
keyid:D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e3:0f:78:67:94:49:dd:74:f7:3c:6f:f6:da:28:ae:ff:df:
e9:6c:cc:c5:b5:4f:68:ab:0c:0b:45:81:09:ba:03:ce:48:9e:
f7:08:51:b0:a4:d1:a7:40:3c:9f:b2:06:6a:58:c3:ce:d8:ca:
ec:a1:f4:f4:da:8e:b0:ce:8e:d8:33:ca:9f:d3:3b:2a:50:a7:
bd:d8:02:fc:fc:bd:91:f3:33:5a:51:ec:26:8c:7a:13:a7:a6:
f6:49:83:cb:ea:e7:35:4b:e2:a6:d9:95:5e:25:45:ac:ad:49:
e2:bb:4a:00:5e:be:e0:59:df:6d:4e:06:f6:84:2a:df:38:43:
86:5d:95:b0:35:f3:9b:63:8c:7f:5f:60:f7:be:de:ba:71:2b:
29:14:33:fb:6e:60:a6:52:f7:cf:88:7d:8e:17:3b:c6:94:78:
ab:da:35:dc:10:40:8f:11:05:ce:9d:4a:49:b1:73:12:7b:9c:
92:f8:ef:75:70:31:dc:e9:58:5c:10:17:dc:b6:e4:cd:41:19:
03:94:90:1b:fd:68:7e:ac:32:a0:e2:1d:78:49:ac:4f:8b:1b:
21:c5:a3:29:57:96:fa:3f:6d:dd:c2:22:9e:91:17:8f:69:93:
a8:17:a2:13:f8:9d:a8:73:7f:ec:f8:5e:18:c0:8f:ab:8d:2a:
61:e6:81:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:23:59 2025 by rpki-client