Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
File: md1vCIIq4LpQVFQkVpI_r5BA9dA.mft (raw, json)
Hash identifier: ApN+TmOvTQGZDay6+kmS/PxwoZqTMrrEebbxW4aCJbg=
Subject key identifier: E9:F7:4C:2B:EC:88:4D:23:5E:B7:74:84:6E:41:F7:62:9C:9D:3A:12
Authority key identifier: 99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
Certificate issuer: /CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Certificate serial: 01976A060F645F235E4ECA45B224F4C87F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
Manifest number: 0F78
Signing time: Fri 13 Jun 2025 16:01:11 +0000
Manifest this update: Fri 13 Jun 2025 16:01:11 +0000
Manifest next update: Sat 14 Jun 2025 16:01:11 +0000
Files and hashes: 1: NUWfScDSH56OaOCaPfBblPu0Ydg.roa (hash: a4F0KmJ+v3pAeFAh9qDTsIqvwa1PoPI9PowXceZRGfg=)
2: md1vCIIq4LpQVFQkVpI_r5BA9dA.crl (hash: SuKzKa6MhJZ7UEqX4MNAotXm8KsYMuwm2OE5AXTwTSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:06:0f:64:5f:23:5e:4e:ca:45:b2:24:f4:c8:7f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Validity
Not Before: Jun 13 16:01:11 2025 GMT
Not After : Jun 14 16:01:11 2025 GMT
Subject: CN=e9f74c2bec884d235eb774846e41f7629c9d3a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:5f:ee:ed:c3:69:c6:18:98:7e:9f:8f:89:
68:b0:44:ff:94:f3:71:76:e5:26:d2:fa:a4:2f:b6:
c0:19:35:48:4a:65:44:b1:a2:54:01:2c:b0:36:f3:
e2:16:66:00:1f:3e:7d:59:72:f3:88:b6:26:88:35:
9b:69:56:89:6a:b3:9d:b7:1f:fa:34:ce:11:3a:31:
77:26:bd:d6:dd:75:c7:80:f5:64:59:ab:b0:97:42:
c0:e7:a4:16:f1:08:81:0d:0f:21:9d:5a:bf:63:7f:
26:73:a2:cd:e2:ca:f4:0e:3c:82:b4:35:24:f8:5d:
bb:4c:3e:2b:0b:d9:ba:76:a1:bc:77:0d:aa:2f:e3:
18:26:20:8f:18:66:42:0a:a5:29:7c:06:35:ad:3c:
84:72:cb:22:c8:25:7c:2f:03:9c:a0:e9:22:88:ee:
3c:ef:dc:da:2a:9a:62:dc:ea:3c:fa:2a:a7:54:1f:
d7:b6:30:2f:d2:39:f7:15:21:d9:d3:8a:65:f6:9f:
a3:28:1b:b2:21:be:cd:4c:d6:b7:85:77:ed:60:85:
fd:69:04:a1:bb:b2:03:6d:ae:5f:db:95:8b:61:b0:
d1:37:91:f4:a0:c6:33:3d:77:26:b2:ea:9f:d4:39:
26:68:2a:a6:03:c5:b2:83:30:3d:97:b0:a8:41:ac:
e5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F7:4C:2B:EC:88:4D:23:5E:B7:74:84:6E:41:F7:62:9C:9D:3A:12
X509v3 Authority Key Identifier:
keyid:99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:09:6c:61:42:49:f2:a7:1c:e1:39:06:fc:5d:ba:72:92:8c:
ea:64:29:58:9b:77:4b:e3:58:2b:bc:a2:f7:e1:2e:82:c3:70:
a1:ae:bf:83:ec:e1:ce:e8:14:dc:4b:ed:b1:4c:f4:dc:7c:f5:
b1:7c:01:c3:81:08:47:f1:8f:29:1c:d0:1d:94:8f:01:7b:09:
1f:15:63:40:73:4c:8e:59:01:44:bd:0e:78:72:1c:e1:06:75:
71:00:6c:6f:3c:2f:5c:00:c4:a2:f2:67:d5:b3:88:26:d5:ba:
6a:5d:30:82:05:df:03:5f:e3:99:93:51:01:54:84:87:d7:4c:
c7:6d:af:19:e1:d9:47:ab:e2:a2:0a:44:b3:88:ea:91:a5:9e:
df:c8:61:01:04:ec:77:d3:11:d7:73:e2:9a:f1:3a:a0:71:04:
13:97:8a:46:25:61:f6:3f:ee:17:0c:0f:6f:c4:2f:7a:df:42:
3c:24:41:41:8f:cb:4a:bd:20:52:1a:97:20:29:55:40:42:7f:
a9:ef:62:80:92:a4:90:db:b0:f1:ea:8b:bf:e1:cf:fc:df:4c:
25:39:1c:e6:0b:2c:73:b8:78:ca:d3:6a:69:3b:7b:be:0f:9c:
a9:a3:72:8a:d0:c6:31:cb:d1:92:8c:b7:1b:67:ad:6a:70:9c:
fb:a0:31:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:55 2025 by rpki-client