Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
File: 1-3R7GNuDDz6-M4b8n8jaldkyetg.mft (raw, json)
Hash identifier: FmF4lfFdw6lEaSI/h+yJMINzpzyhbjtuetiLe46/1LE=
Subject key identifier: 53:32:FB:89:55:94:2F:AD:39:1C:02:64:30:4B:67:D2:56:F7:71:6A
Authority key identifier: FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8
Certificate issuer: /CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8
Certificate serial: 01974BC43F025BA286CA7098005317A7D5DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
Manifest number: 018E
Signing time: Sat 07 Jun 2025 19:00:41 +0000
Manifest this update: Sat 07 Jun 2025 19:00:41 +0000
Manifest next update: Sun 08 Jun 2025 19:00:41 +0000
Files and hashes: 1: 1-3R7GNuDDz6-M4b8n8jaldkyetg.crl (hash: 9BiMlIXUd8gv4uOF9Eb/P8z44WE3QqBfSzPyj9pEmds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:3f:02:5b:a2:86:ca:70:98:00:53:17:a7:d5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8
Validity
Not Before: Jun 7 19:00:41 2025 GMT
Not After : Jun 8 19:00:41 2025 GMT
Subject: CN=5332fb8955942fad391c0264304b67d256f7716a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:49:2b:07:c3:ab:76:52:5b:07:94:64:74:
3d:85:bf:21:e7:1e:60:58:fe:45:ee:9c:52:4c:70:
9b:d4:4f:b1:02:ea:72:f6:c2:98:e4:e9:68:38:11:
cb:0f:f3:98:a1:94:ae:86:a9:58:cf:4e:6c:3f:31:
cd:c9:07:63:80:4e:55:45:3a:f8:b4:38:c8:b0:2a:
11:90:80:21:59:4e:97:f0:52:14:1c:00:11:fb:90:
8d:7b:9c:db:b1:bf:27:fc:4d:ed:22:d9:e0:51:b5:
e6:8b:ff:d4:9d:15:eb:76:a7:1c:5d:59:0f:b1:8b:
ec:55:a0:c5:ed:80:4b:c1:e1:ce:3a:be:e4:2c:b0:
b7:60:26:69:82:0f:c9:32:b5:5d:fc:e8:8f:20:a5:
2b:d8:ef:4c:fc:0d:7d:b0:5e:58:5a:87:b9:4d:fe:
b7:b8:7e:49:4c:63:b2:9d:76:3c:21:91:6f:b1:6e:
08:ff:ba:99:45:b4:24:d2:35:59:8b:bc:0c:f2:51:
2c:06:d3:c6:d5:91:f9:2b:68:14:e3:29:41:8f:65:
f8:9f:ce:d5:2a:eb:e3:eb:d4:8c:48:bf:45:99:ba:
35:f2:d1:9b:7c:27:ed:8c:f6:64:1c:39:26:48:bc:
99:bd:80:7f:66:df:cf:81:00:8a:85:82:63:57:67:
fa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:32:FB:89:55:94:2F:AD:39:1C:02:64:30:4B:67:D2:56:F7:71:6A
X509v3 Authority Key Identifier:
keyid:FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:7d:98:17:b3:33:e3:18:15:a8:2c:ee:22:75:1c:bc:84:1d:
16:32:41:f0:27:4b:3a:c5:9c:3c:9b:67:78:47:58:25:d8:09:
42:d7:54:a9:d9:0d:95:de:8e:e0:5f:b5:4a:9c:7a:f0:df:74:
5e:9b:b9:8f:b2:3b:bf:fe:1b:93:b2:a3:59:ce:be:55:f7:95:
39:45:c3:76:0e:2f:22:b2:9b:a1:ca:29:d6:87:fe:ac:84:8d:
63:f6:d0:e8:4b:4f:55:e5:c8:c0:2d:4e:47:94:7d:46:b0:2f:
9a:b0:76:24:a5:58:5f:ab:28:e1:53:55:72:73:c7:6a:48:91:
d5:8c:0c:05:fa:52:7c:3f:c7:3d:ac:f7:50:10:cf:55:ab:b1:
17:a5:2e:07:9d:ab:2f:c2:d9:45:24:0f:2b:f3:80:cf:94:0d:
de:58:af:0b:71:76:2d:85:d0:b5:41:98:be:d7:5f:39:4f:38:
a9:01:39:04:6e:40:4c:a8:d2:0e:82:34:34:b0:0c:2c:6f:74:
a9:6d:49:74:2f:70:11:24:ad:9c:52:67:7d:58:c1:66:88:07:
43:a7:1f:69:ef:a6:44:d8:18:94:a2:fc:53:31:fe:ca:e5:99:
46:46:a8:90:ac:2d:42:cc:6f:8d:b8:21:87:b0:d0:c3:51:1c:
7f:68:9f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:16:53 2025 by rpki-client