Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
File: 1cZc2ktjD3K_ZA0WtB9y9aD511E.mft (raw, json)
Hash identifier: uISloE460ur7YiZQxWY5S3/0xVVGToN7YiaDnA6/FRA=
Subject key identifier: E7:31:A2:C7:BF:AE:EC:FC:0B:4E:0D:B0:29:AD:4A:43:64:E0:EC:D0
Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
Certificate issuer: /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Certificate serial: 019787D89AFFB59565443F44AB4D7101BCC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
Manifest number: 0D97
Signing time: Thu 19 Jun 2025 11:00:08 +0000
Manifest this update: Thu 19 Jun 2025 11:00:08 +0000
Manifest next update: Fri 20 Jun 2025 11:00:08 +0000
Files and hashes: 1: 1cZc2ktjD3K_ZA0WtB9y9aD511E.crl (hash: KyStGoNhoXxRNPxQLZl8mFg8/GQf09bMyHpUqdEryOA=)
2: vIfeAKl09iQuJw6UGqaMNu-i1xM.roa (hash: rnTrCrEZ28gshco/rvGtOCS7V1pX6Xki2r8crF4TWeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:d8:9a:ff:b5:95:65:44:3f:44:ab:4d:71:01:bc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Validity
Not Before: Jun 19 11:00:08 2025 GMT
Not After : Jun 20 11:00:08 2025 GMT
Subject: CN=e731a2c7bfaeecfc0b4e0db029ad4a4364e0ecd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ac:bd:39:43:98:fc:01:f5:70:cd:ee:70:a9:
46:b3:1b:a2:14:85:5f:e8:bb:f1:41:d8:c7:ef:fe:
19:35:66:7b:bc:6f:e4:79:96:4c:5e:b5:ef:97:59:
dd:a0:40:f3:79:2d:eb:0c:f8:30:d3:82:ca:c8:f0:
2f:9e:26:e9:41:2f:03:5d:b3:ad:72:7f:93:ed:2a:
87:97:da:9d:fa:48:8a:34:57:3f:47:e4:92:ae:f1:
52:96:dd:68:95:ef:89:f8:10:ee:68:4f:90:07:10:
1e:f5:f2:b0:e9:d0:2d:c1:d0:43:47:78:8f:ad:66:
69:4f:8e:d2:8a:3a:0c:6a:f6:b3:d2:7f:c8:92:65:
7a:67:68:d3:11:47:f3:5c:44:21:e6:70:4f:cc:28:
d2:28:a1:0e:d2:48:cb:41:c8:d2:b5:7e:b4:c6:b6:
f7:2f:ae:2c:81:6f:3d:b4:59:a5:99:80:d5:14:c3:
22:ca:fb:9e:de:d3:bb:55:f4:22:13:e4:2e:5c:02:
96:a5:1a:ac:06:23:cb:21:32:5e:4e:2b:89:c0:2f:
36:ff:12:94:c3:3f:85:26:c3:db:af:a2:8e:3d:e4:
81:41:68:5b:0f:21:eb:ec:52:2f:c4:e8:1e:44:f2:
cc:89:4a:b4:94:8f:aa:1c:43:1a:4b:93:49:35:37:
73:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:31:A2:C7:BF:AE:EC:FC:0B:4E:0D:B0:29:AD:4A:43:64:E0:EC:D0
X509v3 Authority Key Identifier:
keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fb:dd:e6:83:8d:ec:1a:78:f6:20:28:79:4d:c9:73:bd:c5:
45:5f:d5:62:1c:dd:ca:e0:48:fe:b0:5e:67:79:2f:6f:1b:3c:
70:d3:a0:94:37:af:43:05:1c:78:4c:9b:9f:c8:da:74:41:d6:
07:07:72:56:f1:dd:45:c8:d7:18:3a:04:b1:17:aa:c9:a4:2f:
c2:5e:77:c4:51:24:81:47:eb:46:88:61:98:21:b1:b8:4f:ba:
06:e7:57:82:12:d8:52:be:23:40:59:41:e6:2f:4f:f7:34:b0:
9e:9e:2b:d5:13:04:e9:85:3b:a2:51:e1:90:d9:19:d2:23:10:
da:4a:52:06:88:58:8b:ac:5c:28:e1:e9:e6:ca:b2:20:6e:7f:
90:c1:03:5c:eb:01:42:a1:10:27:ab:4d:73:b8:f4:cf:0d:25:
11:f3:5b:24:39:36:04:c5:f5:8f:a4:79:3c:0e:be:05:6d:de:
1c:ce:fc:01:7c:b6:26:26:4f:16:a1:ea:ce:50:06:fe:0b:6d:
24:11:10:e4:86:69:71:89:4e:0c:30:5e:3e:98:4b:9f:b0:97:
35:7a:23:5b:ce:0d:e7:25:98:42:aa:c5:d7:64:ea:a7:e6:87:
e2:71:e2:6e:83:9a:46:a9:1b:f8:18:bd:09:4a:cd:06:f0:3b:
8a:81:2e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 15:03:59 2025 by rpki-client