Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
File: 1-2fE4ThzE8A0RTje_SzPoDTnwww.mft (raw, json)
Hash identifier: MfDc2BaA0y0SnO9r0/1w04LbfGCUwlFobAkmSA8/8xQ=
Subject key identifier: 0A:12:76:7E:CC:C7:22:12:B6:AF:AD:66:FD:0C:60:B7:EA:4E:D7:4E
Authority key identifier: FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C
Certificate issuer: /CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
Certificate serial: 019849663560505793AB1D03F0B9BFD4A0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
Manifest number: 0BC4
Signing time: Sun 27 Jul 2025 01:01:31 +0000
Manifest this update: Sun 27 Jul 2025 01:01:31 +0000
Manifest next update: Mon 28 Jul 2025 01:01:31 +0000
Files and hashes: 1: 1-2fE4ThzE8A0RTje_SzPoDTnwww.crl (hash: RS9e1VhGr7mivCPRkM9zkstwxnmUd3uvLAk1BaGDwEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:35:60:50:57:93:ab:1d:03:f0:b9:bf:d4:a0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
Validity
Not Before: Jul 27 01:01:31 2025 GMT
Not After : Jul 28 01:01:31 2025 GMT
Subject: CN=0a12767eccc72212b6afad66fd0c60b7ea4ed74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:49:52:e9:b8:99:90:c9:75:3b:93:a0:df:74:
3f:16:26:66:12:29:1e:b8:ae:ac:73:a9:53:81:32:
f5:ec:f0:b3:6b:0c:83:02:39:35:7c:fc:24:0a:77:
c2:3c:a3:67:65:8d:2c:47:e6:36:f8:69:0e:73:af:
e7:9f:74:8b:b3:6a:94:66:c8:b5:fa:ad:2a:79:7f:
07:12:03:1f:5d:de:14:5e:4c:91:6b:9f:4a:df:77:
9a:01:10:56:36:c2:52:94:a0:30:4f:43:d1:7d:0d:
40:a7:8f:64:dc:92:b2:03:b5:44:66:93:a9:28:f7:
51:61:75:ff:87:f5:90:6e:e5:b2:2a:77:9d:22:9f:
e4:85:cf:74:e3:5b:50:bf:63:8b:a4:c7:84:d5:11:
04:97:3d:eb:4b:1b:6a:19:2d:e4:7d:05:f3:1a:0f:
8e:f8:ca:bc:55:04:01:2f:5c:04:ab:f7:44:19:be:
18:75:ff:cf:2a:e5:ef:1d:e3:08:5d:17:bc:65:bc:
03:c3:79:c4:4b:dd:00:89:f6:33:da:d4:ee:b5:e9:
09:0b:5a:be:3d:55:fa:4a:0e:0c:03:3e:c6:26:db:
0a:54:bc:ca:d4:77:e8:28:b0:90:b1:a4:5f:43:28:
f2:c7:57:e2:f3:fd:3a:62:28:e3:2d:f3:7a:c1:8f:
58:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:12:76:7E:CC:C7:22:12:B6:AF:AD:66:FD:0C:60:B7:EA:4E:D7:4E
X509v3 Authority Key Identifier:
keyid:FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e8:c1:d4:f5:62:9e:87:eb:3f:ef:a4:1d:ea:29:69:e6:fd:
5b:cf:44:f8:57:c0:d0:dc:2e:a0:33:48:c7:c5:3a:ec:b0:98:
64:92:09:80:e5:af:90:85:21:b5:ee:31:fb:37:68:2b:1d:91:
18:c8:29:77:0f:e2:48:71:b4:c5:1b:28:41:c5:18:16:e9:48:
f6:34:66:ff:b9:e0:56:f8:4f:b2:3b:1d:a0:1a:9b:69:bc:64:
bb:9a:64:7a:dc:e6:01:cd:6a:14:f7:57:ac:65:9f:28:8a:92:
1b:a3:71:90:c3:51:b8:91:8d:51:64:20:36:01:03:3c:0a:88:
b9:79:12:4f:e5:bc:31:cd:fa:48:13:d8:12:13:94:ea:1b:de:
0e:7f:18:d9:4c:42:23:18:3a:ef:11:c6:a1:87:f1:93:a8:50:
fc:5b:20:80:c3:b4:58:46:03:f6:d5:ea:db:f7:42:56:b1:27:
78:e3:e4:f1:dc:9e:82:aa:59:8c:66:f0:43:15:44:a4:ca:72:
e4:33:d0:bb:d0:99:21:ff:07:38:08:33:b3:e4:f9:79:9f:af:
ad:29:58:dd:36:47:9e:b5:cc:7d:f2:8c:ce:4c:f6:93:6d:aa:
d2:10:10:65:ed:d3:71:80:3f:07:0a:b4:a0:58:64:6c:08:e8:
af:96:1b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:24:27 2025 by rpki-client