Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier: HJQPoxT/9Hm0FOKa9sZ2N6Cb+6Mp6m6sFog/oGixrIk=
Subject key identifier: 45:E5:80:3E:FC:B6:77:D5:D1:28:43:B2:0E:84:D7:63:84:98:E7:05
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 01976C622749B3EED5E1AB7B0FD9F6965AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number: 1307
Signing time: Sat 14 Jun 2025 03:01:01 +0000
Manifest this update: Sat 14 Jun 2025 03:01:01 +0000
Manifest next update: Sun 15 Jun 2025 03:01:01 +0000
Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: udWxIBCq2X8qaRhRHbUrm66IX7OTzVyKoBr7WcQeiDE=)
2: wiMZyenwx3I7xwOHgp4nhnMI51s.roa (hash: Qx/P/QV7oNsKOLP9lE01kMvoM8G9Aq9IlKHXWkjW/bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:27:49:b3:ee:d5:e1:ab:7b:0f:d9:f6:96:5a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: Jun 14 03:01:01 2025 GMT
Not After : Jun 15 03:01:01 2025 GMT
Subject: CN=45e5803efcb677d5d12843b20e84d7638498e705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:65:9d:0c:ad:11:2e:28:1b:41:12:58:ad:0f:
54:aa:a8:ff:86:b3:c6:25:ef:dc:93:e2:07:a0:cd:
a5:27:8e:eb:40:1b:53:a6:05:7c:a2:e2:ed:3b:d1:
43:09:e7:5e:af:4a:26:96:04:0c:0c:63:93:13:40:
80:4d:74:74:31:8d:32:39:00:d7:3d:02:82:ac:05:
71:c5:7c:98:9d:43:0e:b3:27:a5:5c:11:c6:4d:98:
63:ff:cc:fc:fd:1d:1d:44:73:4b:73:67:1c:ee:fc:
e0:92:02:da:cf:61:c5:59:cf:bf:4b:22:78:d7:bf:
48:7d:6c:00:38:f1:c5:95:53:b4:32:68:8d:a2:3b:
79:60:b3:e4:4b:99:0b:b4:80:88:ea:a3:cb:51:e0:
a9:eb:6d:1f:ed:ca:e3:58:f4:18:65:17:0b:59:f4:
65:39:b7:7d:1c:74:d4:44:16:b8:ac:2c:e9:2d:54:
d0:2f:98:50:7d:1e:91:43:4a:c3:2b:04:ba:f4:56:
8a:74:26:8f:62:65:31:37:43:0a:ad:25:85:6b:03:
09:81:59:94:3e:77:a5:ea:0f:91:a9:b1:92:75:c2:
cf:3a:23:21:b7:82:23:b7:97:83:39:eb:11:bd:6c:
f3:93:0d:da:a0:67:e4:d8:37:36:38:a6:aa:02:06:
9c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E5:80:3E:FC:B6:77:D5:D1:28:43:B2:0E:84:D7:63:84:98:E7:05
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:11:c5:49:99:7e:5d:2f:42:8f:f1:46:f6:04:8d:b0:5d:66:
0f:65:2e:3a:a4:53:98:50:12:2e:03:2d:04:ad:6a:f9:49:34:
0f:73:0d:f2:05:e7:6e:6a:eb:9f:62:d6:46:aa:ee:ce:e8:bc:
1a:2c:65:a9:79:75:eb:96:3a:03:98:53:a7:b5:d5:77:f0:df:
7a:fa:31:85:39:d2:2f:c8:c3:75:08:da:1c:da:ec:a8:cc:5e:
11:64:e7:60:37:7a:2f:d5:b0:b5:ce:ad:a4:e3:24:90:ef:d0:
39:1e:08:98:08:82:75:e0:94:38:2b:c6:ed:0a:57:70:a1:eb:
03:76:ce:f9:56:44:53:b9:35:11:c3:81:e6:28:ef:0e:7e:45:
06:2e:67:24:4f:43:95:b5:da:19:8c:84:89:00:77:2d:5a:55:
fa:1d:a3:4f:3c:9c:00:03:9a:ff:09:cf:ad:b4:45:0c:68:ef:
b7:bc:b9:f3:72:4f:83:43:54:7b:bd:bf:3c:29:5b:80:f7:24:
fa:1e:09:06:b1:0b:a6:6f:85:76:20:dc:f1:bb:cd:b5:1c:67:
89:2f:45:95:c2:aa:c6:05:aa:db:f1:e9:b4:c3:07:8e:9c:69:
3c:64:a7:a9:49:e5:24:13:87:99:69:42:ee:f2:66:5d:8e:af:
15:ff:3b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:38:54 2025 by rpki-client