Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
File: 1-DzK75yREg7G-xT_TExXRaAjm3c.mft (raw, json)
Hash identifier: G8V58v2G0b3SMwyN7lp75rGsUVGhKnGYaTajp1E68rc=
Subject key identifier: BF:E3:9D:84:8D:E4:67:10:51:BF:BB:85:27:1A:58:93:47:63:AC:92
Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
Certificate issuer: /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Certificate serial: 01976CCF9EB0903C41B279144815CA1B5B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
Manifest number: 14D3
Signing time: Sat 14 Jun 2025 05:00:35 +0000
Manifest this update: Sat 14 Jun 2025 05:00:35 +0000
Manifest next update: Sun 15 Jun 2025 05:00:35 +0000
Files and hashes: 1: 1-DzK75yREg7G-xT_TExXRaAjm3c.crl (hash: GNrjXLzxJo8WDp1OtWtIqJQXdPit48PU0L/TYU6IyW0=)
2: gi2nB3ojIWFvbp9ceI5eykRUnBQ.roa (hash: SdF/4kUgrmuoBf7uz2K1ONEXYqOeDgBsypfMdmo+6rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:9e:b0:90:3c:41:b2:79:14:48:15:ca:1b:5b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Validity
Not Before: Jun 14 05:00:35 2025 GMT
Not After : Jun 15 05:00:35 2025 GMT
Subject: CN=bfe39d848de4671051bfbb85271a58934763ac92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:6d:f4:ee:6b:22:6b:c1:f5:46:4f:72:b8:
18:ac:c9:6e:d7:9d:db:2a:74:ef:1b:b5:9b:e8:de:
f1:0e:28:c1:5e:1f:cc:21:d4:60:de:67:83:f3:a4:
d8:ce:70:07:02:0e:2e:46:ba:26:78:45:11:9c:a8:
21:7e:c5:ef:41:6a:40:ce:9c:cb:00:d2:5a:83:a2:
a2:9c:77:80:22:41:96:77:c0:c2:f6:26:f0:3c:db:
06:31:12:2f:8f:fa:aa:9e:6e:19:0a:30:22:44:60:
8e:1e:5e:b2:52:0d:29:20:3c:5b:1b:f5:33:96:f0:
83:8d:db:08:1d:ca:2e:29:0c:66:ee:06:ce:50:56:
19:5b:39:dd:00:4e:93:f2:b5:29:89:19:53:47:ed:
d4:56:43:16:37:56:5b:b9:2d:b3:d0:21:82:cf:ac:
93:c0:0f:83:24:37:ec:33:ef:9c:6c:3b:8b:2c:4f:
37:97:a3:25:5f:22:33:14:82:27:7f:b9:33:bf:87:
08:d9:86:5c:ab:53:95:58:db:61:75:4d:28:2a:0a:
f9:40:1d:34:17:41:7f:ab:0c:a0:e9:e0:48:32:b0:
0d:64:88:b6:66:1c:ad:a6:35:c1:fe:57:16:9a:a9:
d4:a5:55:ef:ee:41:8b:1f:ba:22:d3:bb:69:a7:f6:
83:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E3:9D:84:8D:E4:67:10:51:BF:BB:85:27:1A:58:93:47:63:AC:92
X509v3 Authority Key Identifier:
keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:b1:d2:a5:fe:c1:b4:f4:bf:ee:52:30:ae:07:c8:48:82:46:
b2:b6:e4:98:5e:1b:60:89:f4:1f:31:5a:96:0b:e1:f6:87:e0:
7e:9e:2a:72:2a:3e:fa:9e:31:48:4a:dc:d2:ab:0f:41:e4:f2:
c4:12:1a:a8:1d:44:34:66:83:ba:57:02:6c:48:53:f5:af:61:
55:24:80:e1:b1:e2:15:c1:25:04:25:74:cc:ce:9d:ba:0b:6b:
af:48:e7:6e:93:19:f8:85:38:b9:2b:ee:aa:55:b9:8a:34:28:
dd:f8:31:12:b6:09:31:69:6a:85:00:c5:36:6e:a2:d2:95:21:
e8:3a:dc:a2:6e:0c:00:cb:58:57:ea:e6:b2:ff:8d:b0:c4:20:
ec:4d:d1:60:1a:25:6c:a6:aa:4a:8b:12:f3:63:36:2c:2e:8c:
56:40:6f:5f:62:62:d4:21:3e:7e:70:53:5a:f6:2e:ad:d8:81:
b3:ba:91:f7:55:9f:8b:7c:19:cd:c2:a2:81:5b:1a:45:6a:2d:
01:44:f3:f9:2d:10:f9:6e:5a:95:10:84:3a:1e:38:a4:e0:d0:
7e:75:69:c3:35:0a:cf:c4:d1:62:25:75:0e:d9:78:d6:64:7d:
ad:80:0f:e2:98:ab:57:89:0a:fc:d9:83:af:57:2c:3b:8f:06:
68:98:4e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:26:51 2025 by rpki-client