Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
File: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft (raw, json)
Hash identifier: q9nwqVyFvw3OzTcFVpL+uUGwJekCv7F0Al9enbFg6zc=
Subject key identifier: 64:34:45:BF:AD:1F:A2:7B:F9:E5:2C:30:4B:B2:A3:A3:F2:9C:15:E6
Authority key identifier: FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
Certificate issuer: /CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Certificate serial: 01976DABCDA7A61BDEE147CBA19CAE8CCADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
Manifest number: 1134
Signing time: Sat 14 Jun 2025 09:01:05 +0000
Manifest this update: Sat 14 Jun 2025 09:01:05 +0000
Manifest next update: Sun 15 Jun 2025 09:01:05 +0000
Files and hashes: 1: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl (hash: kB018Z0C755yN5SlT04TDty6pi+dETuM21nEdYdJ+cE=)
2: h0w_kFKT0XqvvDjFWN0hbdP6R0I.roa (hash: HwjG9qWbKXQOPWt9s3bE5FAbNnpfV2VmVkVACeqa+SM=)
3: mduo7I3wNgYNMDFTnFs9bATZw0U.roa (hash: cwDJD0pk/dLmG1tNo7Q1h2nrGc/1dBKFJ1gp1DO7kqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:cd:a7:a6:1b:de:e1:47:cb:a1:9c:ae:8c:ca:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Validity
Not Before: Jun 14 09:01:05 2025 GMT
Not After : Jun 15 09:01:05 2025 GMT
Subject: CN=643445bfad1fa27bf9e52c304bb2a3a3f29c15e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:d8:0e:aa:a2:fc:79:a7:ec:b6:c3:2a:6e:
5d:ae:08:86:e1:90:8d:a3:57:42:ec:17:e3:2d:14:
c4:f3:dd:94:c3:94:9c:d4:ec:b3:21:12:2f:5f:89:
29:6e:8d:ee:09:ca:a4:76:29:cf:86:53:4a:9c:97:
99:a3:72:f2:4c:ea:b2:fa:9b:48:44:27:f9:15:bf:
d6:d4:3f:00:be:56:6c:55:fc:de:19:55:d8:e0:67:
57:ae:2e:76:38:84:65:52:04:08:f3:44:de:4f:a3:
9b:44:4a:86:f5:18:93:30:ae:38:66:c5:a2:5a:82:
c8:a4:8b:d5:df:48:26:01:c4:af:71:10:27:6f:4c:
85:e1:da:4a:82:02:72:65:eb:f9:94:9c:d5:d9:0d:
fb:5b:46:0b:68:86:07:17:00:23:b5:b8:09:33:76:
63:69:75:7a:b7:bd:b6:fb:ef:7b:9f:0c:1c:59:1f:
5f:50:ab:d2:74:e6:fc:d4:2a:80:9e:08:0d:0b:ec:
b7:ec:04:c8:89:08:5b:a5:9e:2a:d4:7e:99:b5:85:
41:ad:a6:db:0c:ee:48:f0:65:2a:41:6c:85:1c:ce:
70:49:98:88:8f:71:7d:81:2c:90:53:83:91:77:86:
9a:c7:8a:1f:a1:9a:6f:56:1d:11:27:b5:d3:65:d7:
24:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:34:45:BF:AD:1F:A2:7B:F9:E5:2C:30:4B:B2:A3:A3:F2:9C:15:E6
X509v3 Authority Key Identifier:
keyid:FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:88:8c:30:44:05:96:1e:b2:9d:08:78:ab:2b:f9:e3:14:7f:
bc:54:4a:4f:c5:8e:3c:4e:99:ad:4f:33:d0:c1:07:49:66:1d:
95:9a:dc:b6:ac:54:12:eb:8b:ae:a1:49:aa:68:1b:7d:b7:c0:
c4:e2:a4:03:62:b6:2d:87:c3:ed:84:ca:de:a4:e1:5c:4b:db:
3a:a8:24:b2:15:d1:c1:af:3d:5b:5a:c3:22:07:53:5d:5c:59:
57:8f:22:c8:13:e9:73:9f:40:6a:79:38:05:9e:16:c9:ec:a3:
d6:45:04:8e:e7:1f:18:c8:ee:1e:e1:19:48:cf:53:34:c7:2e:
2c:2a:0d:99:c6:93:bf:ee:49:a8:bf:b0:30:46:87:81:61:05:
86:59:c5:97:b3:23:f3:44:01:85:d7:8f:47:3d:c5:eb:36:0f:
60:63:91:5f:1d:f0:2a:fb:23:54:a6:cc:07:f2:03:a6:ff:96:
c6:fd:77:58:ea:e7:fc:52:8d:f4:d4:57:e3:d6:62:88:f5:c7:
2c:50:ca:37:7e:33:63:83:d5:3b:5d:dc:d1:ed:81:7f:9b:a9:
0b:58:ab:d2:cf:a0:9b:cd:15:5f:2e:35:78:63:c0:9d:54:bd:
aa:7d:8f:0c:58:b2:0c:33:7b:fe:da:11:29:cd:0b:57:13:de:
7e:ac:6c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:50:38 2025 by rpki-client