Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
File: L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft (raw, json)
Hash identifier: Ity1gtIrgCFuijaNft9n1rkrG12YPh8feMsfAT9fjjE=
Subject key identifier: 2D:04:6A:EF:52:21:B9:F5:05:5D:2B:79:95:FB:98:59:C3:83:EB:05
Authority key identifier: 2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
Certificate issuer: /CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Certificate serial: 01974B5683CB257DEED8DFAD44E6D7B021D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
Manifest number: 1566
Signing time: Sat 07 Jun 2025 17:00:50 +0000
Manifest this update: Sat 07 Jun 2025 17:00:50 +0000
Manifest next update: Sun 08 Jun 2025 17:00:50 +0000
Files and hashes: 1: L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl (hash: bNr4NBItjANbtX5nII/ttdBC+Eg6tKPoXoRPr7Ct+Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:83:cb:25:7d:ee:d8:df:ad:44:e6:d7:b0:21:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Validity
Not Before: Jun 7 17:00:50 2025 GMT
Not After : Jun 8 17:00:50 2025 GMT
Subject: CN=2d046aef5221b9f5055d2b7995fb9859c383eb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:20:bc:ae:a9:db:ee:f8:f0:15:a0:40:57:
57:b3:28:df:8b:15:1a:bc:c9:95:7c:97:43:18:7d:
bc:8a:10:f5:a8:21:1e:63:f7:1c:c5:ef:c5:a0:62:
bc:0b:73:42:69:23:9b:7e:51:75:35:8a:0a:36:c2:
88:36:59:84:71:19:98:d0:4e:cf:12:c8:9a:6e:03:
5a:82:97:c9:de:fd:d8:e3:91:7c:a9:05:c8:61:b5:
e3:b6:f5:80:53:d9:e2:0c:69:cc:a4:10:b7:45:37:
18:4c:03:d9:52:55:14:e0:12:c9:76:3e:01:eb:c1:
70:2b:77:6b:f7:a2:42:ba:1b:08:ad:a1:d6:50:0e:
c0:fc:f1:02:29:5b:0e:73:de:70:f1:78:2e:bf:c9:
fd:f1:52:81:76:5d:b1:15:d7:9e:db:ab:39:0d:9c:
f3:a6:44:c3:bd:6b:79:b8:81:32:b1:f0:4b:38:cc:
03:4d:1e:07:da:3c:91:7d:4d:a7:2a:f0:59:fe:f6:
a4:73:81:97:c8:fc:86:de:6e:88:8d:d6:ca:2c:7d:
fb:72:17:4c:74:1d:57:c8:61:2b:e8:2a:a0:42:e3:
a0:b2:2e:4d:23:87:c7:ac:a1:7f:af:8b:c2:de:87:
5b:03:1a:1e:4e:23:bd:a0:2d:27:3c:9f:e0:06:70:
6b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:04:6A:EF:52:21:B9:F5:05:5D:2B:79:95:FB:98:59:C3:83:EB:05
X509v3 Authority Key Identifier:
keyid:2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:0d:f4:73:29:b9:9c:8d:37:c7:bc:b8:75:52:91:8d:31:ec:
c9:0a:86:ad:59:b3:e3:6a:f4:20:e1:16:27:52:72:bd:1a:92:
f4:b6:7f:a2:51:ed:c6:b8:2c:30:af:c1:ff:c2:8b:17:09:a5:
69:2f:30:ae:de:f8:2c:2d:b5:e1:fa:84:e7:6b:25:ba:59:af:
a4:e6:a8:04:c4:61:57:44:60:ce:ec:e6:96:39:ea:0c:db:d0:
a1:9e:f8:34:69:31:48:cd:8a:9f:80:2d:ef:40:25:54:f6:95:
e8:45:99:5b:98:cf:f6:5e:76:da:71:2e:7f:a8:89:88:fa:85:
0d:be:7f:19:16:c4:18:8b:6d:b3:42:46:90:97:27:f9:ba:97:
ee:dc:13:da:80:d1:22:89:c4:4e:60:2e:93:c0:fb:fc:2d:b2:
03:d6:e9:8f:c7:7d:63:7b:8e:51:18:95:bf:9f:1f:3a:ff:7b:
59:11:5f:a6:9d:fb:93:c2:5e:63:cb:c4:c9:90:da:2c:bc:93:
a9:8f:59:55:af:02:8e:b9:28:01:ce:a7:1c:fb:69:84:fc:48:
aa:ec:8c:9b:92:09:bc:2e:45:fd:45:5c:08:fc:c3:05:62:2d:
08:45:e5:60:84:c5:dc:f0:20:b0:d4:35:c1:04:57:38:08:2e:
53:f5:7c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:02:47 2025 by rpki-client