Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
File: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft (raw, json)
Hash identifier: pl2Nlic/SDMGLcEKDxQwUA4Pdu2ObhGaeCQFNUBjo1U=
Subject key identifier: 90:0E:95:50:9C:F5:76:63:0F:0D:9C:D2:3E:38:07:A0:5D:22:D9:1D
Authority key identifier: FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
Certificate issuer: /CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Certificate serial: 0197786632005AFB673ACBBDB8BC692D23B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
Manifest number: 1594
Signing time: Mon 16 Jun 2025 11:00:52 +0000
Manifest this update: Mon 16 Jun 2025 11:00:52 +0000
Manifest next update: Tue 17 Jun 2025 11:00:52 +0000
Files and hashes: 1: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl (hash: kK7pilhDyBMv3zmnxCS4odKjRoJYrSdXlhIe7v/SxTs=)
2: 5QzI9Kx0_zx8sVl6RSClMEylLsI.roa (hash: ouFHr10qAXIAq0kULKbopJbnAAixS5hvvnbbv6zQ1js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:66:32:00:5a:fb:67:3a:cb:bd:b8:bc:69:2d:23:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Validity
Not Before: Jun 16 11:00:52 2025 GMT
Not After : Jun 17 11:00:52 2025 GMT
Subject: CN=900e95509cf576630f0d9cd23e3807a05d22d91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:80:f0:8d:2f:24:40:d3:a1:0c:74:2d:35:76:
9f:e2:d5:40:30:85:f9:22:4f:71:d2:aa:ae:fb:49:
00:79:be:b0:dd:3a:8b:71:2a:eb:05:cc:5d:2c:a7:
05:86:ed:ef:38:34:e8:f6:d5:05:72:a7:87:9c:41:
6f:04:27:8b:d1:49:a1:b0:d8:5c:c3:df:df:fb:36:
4f:22:26:50:07:aa:b0:28:38:4d:1c:0e:5b:0b:51:
ce:18:c3:08:c0:8d:8f:b2:6f:5f:90:23:26:85:00:
0d:d7:92:53:c6:96:46:97:6f:f7:b3:7a:80:d9:e2:
60:e4:53:99:98:82:43:b6:7b:3b:e9:09:4d:3a:f1:
a8:51:c1:26:97:a5:f7:a4:89:7f:24:81:d9:69:d2:
5f:01:02:b7:6a:77:31:57:aa:d4:2a:43:e5:c4:53:
c8:97:70:10:3f:9f:9b:0e:1e:e8:a5:fa:0d:0a:72:
eb:06:3b:06:25:74:7f:56:c9:2a:be:34:32:84:fa:
ba:39:7f:64:59:ca:fa:9a:28:60:a3:6c:51:56:1a:
fd:59:5b:56:e4:35:9a:7b:14:77:f9:3a:05:2a:03:
7e:c6:a1:be:58:cb:b4:bd:7a:07:1a:ba:7b:c9:cf:
42:68:73:13:e5:6d:73:af:18:24:7e:56:cd:66:36:
c2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0E:95:50:9C:F5:76:63:0F:0D:9C:D2:3E:38:07:A0:5D:22:D9:1D
X509v3 Authority Key Identifier:
keyid:FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:3e:8c:cd:b1:9c:25:9a:2b:3f:0a:ee:38:b4:25:c5:0b:ef:
35:f6:84:0c:d5:a6:82:80:7e:1f:85:f5:19:07:e3:51:37:ef:
75:d6:01:99:a6:8e:d5:b8:b0:d8:ec:e3:9b:0a:38:20:68:c3:
f8:80:eb:8e:8d:a3:bb:78:af:d7:a9:1b:e0:98:dd:e8:a0:b7:
11:f7:6c:cf:5d:cf:fc:e6:2a:e8:90:f0:de:f1:63:46:e8:3d:
13:9c:5b:f1:7b:6c:35:07:36:1f:06:e4:3d:f5:bc:8b:07:ef:
f5:26:95:b9:8f:f9:60:10:4d:f4:35:40:92:f5:19:fe:b2:3f:
41:9c:eb:bf:1a:2f:18:a8:c4:1c:5b:06:3c:bf:7d:f4:b4:7e:
19:7a:e0:d1:39:20:81:a3:4b:bc:69:3f:a2:c0:6d:d2:d6:53:
17:09:f8:68:a3:22:30:28:4a:54:fe:c1:4d:79:fa:d3:99:64:
69:9f:a0:b0:05:9b:6b:f0:cb:1b:84:58:67:09:62:e9:ee:7d:
c8:36:1c:5e:c4:8f:1f:d8:30:c6:c9:24:c2:52:c8:0a:9f:34:
32:a7:7b:75:e5:ba:dc:b9:df:aa:33:f7:9b:57:17:ce:6d:cb:
1c:1a:b7:c3:1e:fb:1e:ad:d6:39:ca:cc:e5:b8:e1:b2:03:dd:
44:f1:d6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:50:42 2025 by rpki-client