Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier: IXCeJFAgoc3RfmPUooVFN3jZH9huPPXBNetdH4lK6G8=
Subject key identifier: 63:5B:0E:BA:62:32:96:82:B0:2D:62:0D:F1:43:4E:E1:AD:4C:F2:8B
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 019769CEEC56F3D8A9C1BC3DE8C7E525D9E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 15:00:57 +0000
Manifest this update: Fri 13 Jun 2025 15:00:57 +0000
Manifest next update: Sat 14 Jun 2025 15:00:57 +0000
Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: 6yvxyxTWBVQ6F87mxPh9+Qd8Dz2LFFGbxBYMhPD1hVc=)
2: ceTKZ_Kbl5fdTbjM1BoGVl6TegM.roa (hash: DR/tSwdyZFDYwu3nLD2VKueV4ylVlrU59jgXrK70o90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:ec:56:f3:d8:a9:c1:bc:3d:e8:c7:e5:25:d9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: Jun 13 15:00:57 2025 GMT
Not After : Jun 14 15:00:57 2025 GMT
Subject: CN=635b0eba62329682b02d620df1434ee1ad4cf28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:a4:55:10:30:15:6b:d1:f4:41:f7:da:2a:
06:0a:be:bb:6c:61:11:d1:1b:82:84:ca:66:17:d5:
db:ed:47:d9:6c:5d:e0:9b:bd:bb:64:ec:f1:58:42:
5e:4e:c3:28:ee:85:d4:f5:fc:8f:5f:d3:01:f8:7d:
48:0e:ab:99:17:26:06:bf:6b:8d:d7:f3:d8:74:42:
f8:8e:27:c9:46:59:e6:9b:c6:b0:87:0e:09:df:9e:
f5:e6:48:bf:f0:ef:a5:0e:52:bd:49:8f:83:10:42:
78:b3:35:9e:c6:d5:2c:4c:52:eb:a3:d2:e1:db:96:
db:b3:53:35:7b:94:a4:76:bd:aa:6a:fe:3a:a7:aa:
4d:e9:99:a0:8d:b8:fc:6a:59:b0:7a:6c:a8:86:b3:
36:f2:92:3c:5c:da:df:ff:60:e9:bb:e6:9a:4a:bb:
08:2b:54:c8:12:68:bc:2b:cd:2a:80:3a:39:2d:ea:
aa:0b:9e:2b:68:cc:60:74:76:f4:a5:3d:fb:ac:88:
83:25:53:4f:66:65:76:5a:ab:f3:f6:ce:12:a6:25:
cc:aa:54:13:07:44:20:5c:c2:b6:04:83:d9:fc:86:
fd:a0:1f:41:ce:76:41:91:ac:a1:5b:1e:2c:ed:32:
77:47:0c:88:fa:34:7e:dc:a8:ed:b9:b5:14:eb:41:
ee:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5B:0E:BA:62:32:96:82:B0:2D:62:0D:F1:43:4E:E1:AD:4C:F2:8B
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:60:e9:d9:fc:0a:f5:11:58:38:d2:cb:bd:bb:28:48:fc:74:
31:23:97:e8:bc:3b:1b:96:d2:29:72:f3:df:72:1f:c8:50:5c:
f3:43:32:0d:89:9f:95:01:f6:12:5c:56:52:22:ad:9b:77:9b:
78:08:25:db:03:24:7e:4b:e8:5d:52:36:ff:7b:46:b5:df:e1:
7a:1a:3f:c1:8c:17:ed:e0:ea:db:01:fb:62:05:79:7f:bd:3e:
73:de:20:f3:10:59:ef:24:11:8e:28:37:68:2c:80:ed:9d:42:
46:b5:9d:ac:47:50:a9:fe:55:b7:be:53:43:b6:28:e9:51:6f:
5d:51:20:96:03:5c:0a:a6:47:84:e4:06:0a:76:ba:ef:a0:c9:
2f:63:18:9b:7b:cc:16:9d:8f:79:29:3c:a2:82:32:16:4a:39:
94:d9:e6:a1:93:eb:d9:ab:75:1c:a6:81:69:27:4a:1b:f3:fd:
18:83:72:2a:8b:60:6c:25:f3:58:2f:02:c9:41:ee:13:14:97:
fd:8d:b1:93:b0:4d:fc:44:b3:a5:b0:ab:05:49:52:ce:49:66:
88:18:41:73:85:e2:b0:07:1a:c7:34:65:16:fa:fc:bc:c5:c8:
d4:67:ed:b6:05:4d:04:44:72:a6:7e:c8:97:49:1c:9d:7c:16:
63:5b:af:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:06:02 2025 by rpki-client