Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
File: 1Fib0sD75-LYWSzuaHGSu7V5efc.mft (raw, json)
Hash identifier: JkJuaj0gqoR10/3aMApEpE8f5NKjggsQLgzS965lnqM=
Subject key identifier: 26:88:72:A9:18:0A:D3:41:55:90:49:4F:0B:8B:09:00:03:6E:C4:4C
Authority key identifier: D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
Certificate issuer: /CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Certificate serial: 019746670E63B80DDDB44A7A845BAAEA79A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
Manifest number: 023B
Signing time: Fri 06 Jun 2025 18:00:48 +0000
Manifest this update: Fri 06 Jun 2025 18:00:48 +0000
Manifest next update: Sat 07 Jun 2025 18:00:48 +0000
Files and hashes: 1: 1Fib0sD75-LYWSzuaHGSu7V5efc.crl (hash: PslszWVfiUFrG/+tCxxZX3uJZAuh568F75XObQIe8YY=)
2: kWLYBV2lkiSE5J3RZk5fvmnmzB0.roa (hash: fcVu1jDo+tZnVop9ajN9Wj6s2WROmvxL/2WZUAGhZDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:0e:63:b8:0d:dd:b4:4a:7a:84:5b:aa:ea:79:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Validity
Not Before: Jun 6 18:00:48 2025 GMT
Not After : Jun 7 18:00:48 2025 GMT
Subject: CN=268872a9180ad3415590494f0b8b0900036ec44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9e:9a:e1:ac:39:74:25:4b:61:85:11:8d:2f:
be:ec:5c:a3:0d:ab:55:40:46:68:a9:91:af:b3:c2:
8a:4c:2c:43:35:cc:b5:8f:b8:2a:b4:5d:b3:c9:87:
76:9c:09:96:af:cd:88:f7:94:07:e1:2f:67:ca:c6:
9e:bd:54:5c:92:6a:a1:e8:bb:5c:41:d6:96:a4:c0:
f4:f7:bb:57:28:22:0e:30:ab:80:65:6f:e5:07:ee:
ed:a3:18:62:9c:4b:84:89:51:e8:55:71:71:0f:be:
4c:d4:e3:50:52:6b:d0:12:0d:7a:e8:d8:17:5f:c4:
21:87:14:dd:5c:04:16:77:68:a2:b1:8f:af:dd:41:
19:b7:10:2f:38:1c:46:6a:34:2e:86:a5:f0:19:9e:
ea:a4:a1:f7:dd:ee:ce:02:5e:dd:3d:b7:81:91:2e:
1b:11:dd:bc:a8:f9:06:e1:bf:83:1b:ee:5e:97:bf:
41:3f:90:99:b4:ed:17:e6:ec:1b:3d:29:f6:86:96:
ad:de:2b:39:d5:6f:96:72:9f:d1:41:ec:e8:d4:91:
f4:ca:90:a4:44:d9:20:df:f7:0c:e9:a9:74:d2:6c:
94:ce:ef:92:33:73:2a:46:7d:fe:c4:17:39:d5:f8:
4f:64:08:3e:87:76:49:37:6c:6c:27:8d:df:76:48:
06:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:88:72:A9:18:0A:D3:41:55:90:49:4F:0B:8B:09:00:03:6E:C4:4C
X509v3 Authority Key Identifier:
keyid:D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c2:f5:54:cb:f9:33:90:75:c2:e0:1a:20:c4:e6:c6:9d:06:
8b:51:50:82:32:6a:1a:22:ab:3d:82:f1:04:f7:fc:46:27:27:
ec:35:12:17:79:d3:0f:b2:e5:c4:e6:4d:d4:54:ab:0f:a1:3d:
bb:32:a3:db:ee:8f:67:2b:29:db:6d:fc:ec:b4:d8:b4:c1:d4:
f7:a7:4d:af:95:14:8f:4c:75:7e:08:ff:34:ae:02:05:7d:bb:
a9:50:52:7b:70:a4:97:6e:97:ba:1e:c0:a2:49:d3:43:a6:d0:
9a:91:ad:e4:24:51:ad:3b:2d:c5:e4:84:38:3f:15:a5:bc:1b:
30:da:20:ce:3f:b3:79:45:3e:d3:df:8f:ba:e3:d7:29:4c:d7:
f7:7b:40:3a:a5:bb:b3:21:d3:b5:a5:34:43:d3:b2:a0:94:0b:
ed:5e:c0:0b:a1:34:28:d5:f6:38:a6:be:76:2e:5a:3a:52:e1:
f1:02:89:5a:46:19:da:d9:1c:b8:da:9d:70:46:eb:b5:86:06:
94:21:7b:d8:0d:86:50:85:cf:92:af:db:42:56:bf:22:30:37:
66:5f:d4:d2:b2:b4:9a:3d:2d:df:09:3b:c5:29:9f:ad:b3:ba:
bd:73:fb:7f:82:7a:40:ca:6e:13:31:d6:62:5d:e6:8c:d6:a3:
15:82:33:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:06 2025 by rpki-client