Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier: vFmUAjkfTb9J7R3imz/Qgv7HHLonLQfeT8T5Bc587BY=
Subject key identifier: 94:C1:E1:15:4E:F6:4A:B9:45:5E:BF:27:33:8B:1F:A6:6F:71:88:81
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 019770076F7241B80EC878E3A6A904651449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 20:00:24 +0000
Manifest this update: Sat 14 Jun 2025 20:00:24 +0000
Manifest next update: Sun 15 Jun 2025 20:00:24 +0000
Files and hashes: 1: 0rDYOCiVnQy1wBfGsCwgf4uCy6M.roa (hash: dtebcZBA/CIRFXc0hvNHRfZk/QfKnBn3jDoKUNxXxXo=)
2: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: 5kySrd//rbS40oJ6HvXnDnA4AUun4kFHGDARVZ0hbak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:6f:72:41:b8:0e:c8:78:e3:a6:a9:04:65:14:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: Jun 14 20:00:24 2025 GMT
Not After : Jun 15 20:00:24 2025 GMT
Subject: CN=94c1e1154ef64ab9455ebf27338b1fa66f718881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cf:8f:f3:3a:27:b2:29:3d:fc:f8:da:70:1e:
23:16:c5:56:2d:87:34:07:53:ff:15:e9:a6:1d:20:
16:63:d5:8c:f2:f1:77:30:85:7c:45:a3:cb:26:93:
31:b5:11:2c:a6:96:ed:e5:2a:d9:d6:8c:33:96:b0:
39:62:12:f0:b3:27:74:93:24:29:56:c1:21:c3:f1:
c3:5f:72:38:4c:3c:84:2f:5a:40:f8:69:d7:7c:eb:
ad:4d:be:3c:b7:41:58:33:8e:1a:0d:f7:5f:4b:bb:
c7:97:7c:09:c9:1b:fe:35:9a:96:e9:73:a7:ca:36:
fd:25:60:0e:0f:0f:c3:62:52:30:09:b3:9f:ec:a4:
0a:fe:b8:10:2c:4d:2f:4e:4d:7d:8f:26:0f:69:3d:
9f:12:d1:a8:08:7c:3b:d5:b4:7b:7b:a0:da:c9:d9:
9f:0c:40:47:ed:6b:2a:44:2a:fc:c1:d4:05:6c:07:
a5:1c:11:f8:c1:47:b9:d8:55:39:5c:99:5d:67:fb:
7b:6f:80:14:6d:1c:9f:1e:f8:55:cd:2f:01:ca:50:
7d:fd:e4:29:a0:23:4f:a2:39:40:b4:de:42:fc:6d:
a5:b8:b1:40:8e:24:e1:06:a9:d9:e4:60:a7:e6:0a:
af:d8:6e:42:04:e5:02:e8:47:c2:52:02:d2:e0:8a:
78:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C1:E1:15:4E:F6:4A:B9:45:5E:BF:27:33:8B:1F:A6:6F:71:88:81
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:db:31:77:16:0c:79:56:7a:ff:47:53:94:7c:db:58:98:96:
3f:6b:4f:03:4e:e4:d3:7e:dc:2b:ee:54:7d:df:e9:1a:06:c5:
74:9e:2d:7a:4d:9d:77:b5:fa:25:71:fe:91:f9:43:03:25:2e:
c0:64:f1:33:5b:e7:c3:9e:62:23:0a:3f:46:9e:8f:4d:32:6d:
e6:69:ff:a8:5f:c4:e6:cd:0d:b4:ba:77:ad:3d:7e:f7:9b:55:
8b:e6:72:05:30:03:17:76:9f:7d:a8:3c:36:96:08:cb:ed:a2:
cb:80:01:3d:8c:f2:ba:4f:d4:fc:1f:40:a1:fd:7d:28:20:25:
f9:9b:a4:17:1c:ac:87:0b:40:32:19:6d:0c:2c:02:50:c0:67:
6a:66:f6:00:71:37:9c:e0:d6:d2:f5:d7:bf:2f:23:5d:24:2d:
d2:c2:45:ca:a7:a5:b7:16:59:c5:68:c6:9d:ed:5d:ef:dc:dd:
fb:0b:7a:64:45:98:fd:c7:15:e6:f8:38:fb:f5:91:ee:aa:da:
66:85:ad:4d:0b:03:39:91:b3:93:95:73:ca:b9:14:2b:a2:0f:
be:79:a2:2a:d1:ef:b4:b8:f5:ec:d6:80:58:37:0f:19:93:09:
64:a6:0a:f5:ba:63:92:85:89:e4:7a:a3:7a:3e:1b:20:0b:f7:
b6:67:36:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:46:53 2025 by rpki-client