Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
File: 1-n6xEVEw-slAkQYeMUYqVlImiFo.mft (raw, json)
Hash identifier: gYtDzkj6xBKqh3PUcycPiEl1MBrIeVFDQUdkJ3uoiBQ=
Subject key identifier: AF:44:AF:0E:BE:20:C3:3F:5E:46:EB:CD:AA:E7:AA:91:27:87:77:0A
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Certificate issuer: /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial: 01977C79F70BE202721A0351F9B7B76FE390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
Manifest number: 0A7E
Signing time: Tue 17 Jun 2025 06:00:57 +0000
Manifest this update: Tue 17 Jun 2025 06:00:57 +0000
Manifest next update: Wed 18 Jun 2025 06:00:57 +0000
Files and hashes: 1: 1-n6xEVEw-slAkQYeMUYqVlImiFo.crl (hash: 73sGjW7pz2scw/w3Eaug+X1azyBwtLZWX3qmUgbrv/I=)
2: 8jLs6VGmOeqUeiHElaeR3LqYElI.roa (hash: Atd4yjEwjoj5JGYuPikoIPA1A5Gpt38GxeMnhualwSA=)
3: heyE1gtTjLmdNCX82aeJdr0FIAo.roa (hash: ZejOC6mn1mNz9pg99nxI8IIG+SDEeycsyMgYYFPq42A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:79:f7:0b:e2:02:72:1a:03:51:f9:b7:b7:6f:e3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
Validity
Not Before: Jun 17 06:00:57 2025 GMT
Not After : Jun 18 06:00:57 2025 GMT
Subject: CN=af44af0ebe20c33f5e46ebcdaae7aa912787770a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:12:6c:2f:fe:03:dc:9d:71:50:77:4d:d9:
9e:d7:44:57:02:ea:3c:c0:00:34:d0:20:dc:b7:5a:
1b:81:de:e5:9e:88:3a:2f:a5:56:ad:d3:21:2e:8f:
a1:f6:5e:5a:be:af:4c:0b:5c:ff:94:01:be:05:86:
9f:fe:ee:d9:44:40:62:78:4f:62:e5:7f:66:4c:b4:
3c:6c:ab:3d:f8:16:e3:5f:5c:9a:ea:3d:bd:31:65:
5c:81:38:7a:5f:61:a7:97:fd:93:cc:8c:ef:19:22:
d1:79:d9:33:7e:7f:ab:06:c0:60:59:db:0a:d0:83:
e6:1b:d0:71:b3:cf:e2:3c:79:3f:4a:7b:3c:4a:ad:
c0:5b:6a:d1:09:3a:bb:70:97:9d:68:1a:f1:02:cc:
6c:7f:4b:25:4f:d3:5b:e6:73:d5:c7:34:05:fc:2e:
60:04:5c:57:72:ad:26:80:f4:41:a9:d4:58:c5:68:
5d:ea:a5:ed:f6:48:06:37:0b:c5:74:22:81:76:71:
fe:5a:8b:5d:bf:a0:e0:dd:67:fd:d3:d5:35:1b:d9:
b5:17:c3:22:42:a3:51:ce:fd:06:80:0e:c2:57:30:
e6:ab:cd:d0:43:47:e3:0f:ec:ad:60:19:0f:df:f5:
8a:cd:f8:59:b9:5a:f7:27:e0:6c:04:96:4e:3f:45:
af:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:44:AF:0E:BE:20:C3:3F:5E:46:EB:CD:AA:E7:AA:91:27:87:77:0A
X509v3 Authority Key Identifier:
keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d5:c4:04:df:69:7f:fe:97:4b:33:2b:59:0c:4b:b7:c4:29:
7f:2e:8a:06:48:37:ef:36:24:3b:49:9a:93:d8:8f:98:94:dd:
cc:4a:9c:6f:d2:90:67:be:0b:6a:f9:90:45:9c:db:9f:44:e7:
f4:78:78:51:3c:a0:28:bd:6e:56:c4:ac:a2:c8:e6:03:d1:05:
a8:75:e4:e7:26:a6:2f:3c:ea:17:27:79:ff:e6:4e:43:6a:c5:
b8:35:73:58:9e:7a:5a:9e:9e:e9:9e:c6:2d:9c:64:dc:d6:f7:
45:53:d9:da:ce:95:23:36:24:e8:42:ef:b7:57:b9:bb:d4:48:
b2:b2:07:26:61:b5:f5:60:e4:34:a4:28:fe:1c:14:42:15:a6:
ec:c9:1c:3d:03:d6:27:08:98:14:43:1b:d8:7e:cd:ba:4c:1a:
91:4b:9e:ab:4c:7a:b9:45:11:ea:93:ab:25:79:3e:7a:4a:20:
c0:84:61:9e:f3:72:2d:bb:1b:6e:94:ed:b7:74:95:17:57:27:
99:b0:98:73:7f:60:22:0e:f2:0a:22:bb:25:93:6d:e0:41:4f:
80:ab:3e:64:7a:24:17:b2:09:32:67:1d:09:16:5e:94:39:6b:
73:b6:86:2b:30:cd:13:bc:d4:c7:30:c9:d9:ca:96:4e:13:34:
a9:16:99:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:40:52 2025 by rpki-client