Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
File: 1vgHZgvyzZKu45FEKlNDr3GMGMc.mft (raw, json)
Hash identifier: dAuYMnb+JWYpQrK1VdiFs85pTtYwyr8kw09Bta5W1dg=
Subject key identifier: AA:A4:05:86:4E:16:C2:63:6F:3C:0E:42:F5:D9:6F:21:F4:DB:A7:8A
Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7
Certificate serial: 01977609CD630A5E9FB2406EBD7D214387CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
Manifest number: 1526
Signing time: Mon 16 Jun 2025 00:00:43 +0000
Manifest this update: Mon 16 Jun 2025 00:00:43 +0000
Manifest next update: Tue 17 Jun 2025 00:00:43 +0000
Files and hashes: 1: 1vgHZgvyzZKu45FEKlNDr3GMGMc.crl (hash: +1BdOgx8FGYuArbHO66hly4HNI3UylMo1/QjHAA3IoU=)
2: KWwJmTARHeAHpXQEJKYr4FNXsos.roa (hash: 1063ws7p1tPR9qPGeDgdtnc+pragLeBe3JdEiKbe844=)
3: axQ4QcGTmWCvhs7XYE0LSyL0bR8.roa (hash: jnmoj5c8hE+D/ASpXs+Aut4m2SL0NpIhMDG7HImlpO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:09:cd:63:0a:5e:9f:b2:40:6e:bd:7d:21:43:87:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7
Validity
Not Before: Jun 16 00:00:43 2025 GMT
Not After : Jun 17 00:00:43 2025 GMT
Subject: CN=aaa405864e16c2636f3c0e42f5d96f21f4dba78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:55:c8:d5:ef:74:38:5f:ba:49:2d:43:b5:
2f:5c:73:35:53:11:ec:32:33:e5:38:41:03:80:14:
a4:3e:51:d8:48:c3:61:42:a2:71:5a:05:71:39:1b:
41:8c:e8:3f:96:60:9f:4d:1b:4a:b7:fc:92:c8:26:
3e:dd:77:6e:36:91:56:ed:ae:c8:a0:92:72:0d:48:
e7:b7:8f:06:6f:90:6e:86:d9:9c:ff:42:6b:e7:d0:
e4:d1:9d:5c:d2:3e:73:fe:f1:71:53:5c:3e:ff:00:
d4:04:37:95:7f:e3:cc:b8:46:5b:16:89:be:7a:68:
37:43:23:eb:4f:b9:2a:18:c1:95:50:e0:9a:44:20:
b9:d7:3a:9e:a7:79:54:97:fe:c0:3d:7f:34:dd:aa:
8b:54:ab:e2:2e:ce:e5:08:bc:42:ce:71:11:3a:25:
24:13:5e:69:e1:f9:84:07:8f:50:af:c1:af:3e:f2:
3f:3a:78:c3:c2:0c:c8:5c:f2:a7:bd:a2:93:54:63:
77:4b:74:ed:e6:3d:06:16:a6:29:ec:82:3d:ac:84:
a2:e1:ae:7d:92:ae:28:da:11:1d:91:0f:cc:57:6f:
76:a5:a9:9e:5e:e1:35:05:99:00:e5:61:62:2c:6f:
a0:01:0c:95:90:94:8b:de:05:f0:e2:d5:a8:3f:25:
88:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A4:05:86:4E:16:C2:63:6F:3C:0E:42:F5:D9:6F:21:F4:DB:A7:8A
X509v3 Authority Key Identifier:
keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b4:6a:de:b5:1b:2f:f1:21:45:ca:39:a4:be:ed:7e:2c:e8:
b4:ca:1b:ea:0d:bf:fd:c1:b5:b4:c5:72:7e:7f:8d:a8:31:ba:
7a:44:ac:a9:8f:5c:e1:e9:a5:17:b4:c9:13:d5:37:aa:5a:08:
cf:93:40:a2:1d:24:54:6e:4b:d7:f3:66:af:4e:0a:76:7c:03:
70:3c:93:f8:9c:4b:46:56:d8:17:20:af:1b:e8:3c:fa:59:63:
37:57:69:f4:8d:86:55:8e:6e:bd:b5:62:51:39:0a:16:6b:be:
13:f0:b7:a0:3d:ff:3f:79:c9:6b:ba:42:6d:be:ed:bb:12:16:
b4:a0:61:3f:2f:16:34:33:9a:44:09:f2:6e:fa:79:1e:f7:85:
5a:a9:93:c8:c4:43:66:5b:e7:5c:d3:6d:f0:bb:e1:d3:41:f7:
79:bb:17:8f:9d:20:2e:d5:36:2a:ba:14:bf:e7:5e:b4:28:58:
88:e0:f5:f0:61:db:0c:54:83:af:23:c7:17:23:3d:fc:24:13:
46:c5:f4:d9:7e:c5:61:aa:ed:40:f7:23:4f:37:9a:90:7e:8a:
b0:6f:d9:ec:1e:fe:26:a3:3d:3d:47:00:46:4e:81:78:cd:5a:
3c:63:dd:3e:32:fa:38:73:2e:41:8f:40:84:97:8f:f9:cf:2b:
24:a2:67:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:21:12 2025 by rpki-client