Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
File: 1-2fE4ThzE8A0RTje_SzPoDTnwww.mft (raw, json)
Hash identifier: A2TBGqo5hvNksGQwJKz2xNozBpRWcz0ByD1ww9A9lIc=
Subject key identifier: 19:0F:64:72:7B:9C:B4:6E:57:4D:14:C0:E3:BD:02:A1:B0:0F:9B:57
Authority key identifier: FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C
Certificate issuer: /CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
Certificate serial: 01974C69B3EE8ABAF2C529229A8A0E62ABF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
Manifest number: 0B41
Signing time: Sat 07 Jun 2025 22:01:25 +0000
Manifest this update: Sat 07 Jun 2025 22:01:25 +0000
Manifest next update: Sun 08 Jun 2025 22:01:25 +0000
Files and hashes: 1: 1-2fE4ThzE8A0RTje_SzPoDTnwww.crl (hash: SmM2yRgRyVTEOXVXBQyZEWE3dwBt3Ojol4uai/aJh4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:b3:ee:8a:ba:f2:c5:29:22:9a:8a:0e:62:ab:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
Validity
Not Before: Jun 7 22:01:25 2025 GMT
Not After : Jun 8 22:01:25 2025 GMT
Subject: CN=190f64727b9cb46e574d14c0e3bd02a1b00f9b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:63:81:95:7a:e1:9b:37:d2:5e:81:5b:5f:
cb:c9:29:b7:24:fb:4b:cf:5d:d7:d8:50:e6:69:f3:
de:93:8f:2c:8f:da:ee:73:9c:3f:81:27:fa:54:29:
28:83:42:93:a6:b4:e3:04:84:49:9f:9d:a1:18:35:
b6:25:f6:c9:63:d6:eb:40:ab:ea:f9:8d:2c:1a:51:
3e:8b:e5:c0:d5:47:09:2a:05:b2:b1:47:2d:b3:df:
dc:9b:ce:07:2d:2a:ce:34:d8:73:63:b7:d2:8e:71:
e8:16:0b:fe:b7:22:80:c5:01:b9:45:00:58:5c:28:
00:a5:bd:fa:8c:3c:4f:e0:f9:b8:51:23:45:65:f2:
46:98:38:64:70:75:6f:a1:a9:24:32:3b:81:24:49:
a0:60:52:8e:94:b5:92:57:9b:e7:93:92:23:fc:6b:
fb:af:cf:db:50:5e:00:fa:5f:9b:26:47:1f:9a:83:
e3:d8:f3:23:0d:77:11:d7:1a:08:7d:ee:3e:0f:11:
4c:a3:d1:1c:40:ae:66:b4:88:0b:0c:3a:b3:65:bb:
1b:51:d8:2c:5a:1d:6d:25:33:eb:ac:ca:e5:5d:ca:
05:32:04:e8:7d:91:a6:09:25:b7:9a:d2:27:fb:7f:
dd:e6:8e:4c:b5:22:f4:d6:0f:07:7c:85:cf:33:fb:
e3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0F:64:72:7B:9C:B4:6E:57:4D:14:C0:E3:BD:02:A1:B0:0F:9B:57
X509v3 Authority Key Identifier:
keyid:FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:77:df:9d:1d:88:7f:9e:4d:f8:09:75:58:db:0b:8b:ff:a4:
1a:59:9f:32:9e:b5:eb:a3:89:f4:6e:8c:c3:bb:86:8f:99:20:
27:4a:a4:29:e2:d9:89:7a:c4:ae:e6:eb:e2:84:96:47:00:3b:
25:85:9c:5c:92:67:b8:35:1c:45:8a:ff:d3:82:78:30:ec:f3:
a5:9e:48:99:a1:1e:ba:aa:09:21:62:3a:59:9b:75:48:2f:cb:
f6:f1:ae:45:b1:f8:47:49:f9:78:3f:d8:ea:43:b5:fe:c3:d1:
7a:69:67:a4:95:9d:c7:84:b6:2e:d9:2f:b9:1e:30:8f:3b:aa:
c9:db:ee:fc:21:67:1b:ae:3c:61:ae:03:30:47:fa:43:ef:90:
37:50:77:e9:7d:a2:5f:68:4e:23:a4:a6:f3:a5:24:72:fe:59:
04:6c:da:43:e4:cd:fa:99:f8:00:1a:db:6f:27:02:dd:5d:7e:
35:b8:da:91:2e:a3:89:4e:7e:78:71:41:0a:b6:c8:47:7b:9f:
77:9c:85:1d:19:dd:17:f2:a6:9b:46:32:ef:6d:93:43:15:6c:
9e:ff:c2:09:45:9d:af:5e:84:6a:f5:6f:97:c1:bf:0d:a6:21:
bd:f9:18:05:75:f7:82:88:bb:d0:e4:a1:36:e7:44:5c:df:99:
21:4d:cb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:23:48 2025 by rpki-client