Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: BIPx7rfqCRpt2/XXx+2FXW+Nu6zNnIFIimY6swwB8v8=
Subject key identifier: 5D:B5:7D:04:0F:71:1F:0E:80:2D:08:91:59:CD:1B:40:C4:E8:91:A8
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 01974DB2441D3D666FC1D24DE58AAB174875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 04:00:17 +0000
Manifest this update: Sun 08 Jun 2025 04:00:17 +0000
Manifest next update: Mon 09 Jun 2025 04:00:17 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: 8MrYRPgRgQ/Ys25zoRHNdKCv+r7l9/kPN6MxJqCZKR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:44:1d:3d:66:6f:c1:d2:4d:e5:8a:ab:17:48:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: Jun 8 04:00:17 2025 GMT
Not After : Jun 9 04:00:17 2025 GMT
Subject: CN=5db57d040f711f0e802d089159cd1b40c4e891a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ae:19:62:36:82:df:1e:c3:df:27:2c:b3:11:
2c:d3:05:63:a4:60:46:34:e5:9f:41:b1:b2:b0:d9:
01:7e:da:33:4e:51:d6:37:bf:8b:41:75:19:1e:d1:
25:d5:03:70:5b:68:fb:79:0b:2a:93:aa:b5:be:9a:
7b:4d:ae:0e:16:d8:0f:f5:00:09:fa:79:d7:8a:79:
c1:10:3c:3b:28:56:fa:5f:08:cb:65:89:90:f0:39:
1c:cb:a6:f4:75:6c:0f:a1:ec:ae:37:1c:cd:4c:40:
7d:74:3b:32:a8:fe:3d:31:7a:f5:4a:95:df:ab:7b:
3e:31:94:a5:3e:9f:a1:b2:07:9a:56:c2:af:b5:44:
77:23:76:f0:7f:43:b4:f2:e9:2e:ba:f5:f6:ff:79:
68:95:80:da:6e:39:13:19:e2:58:d7:86:65:ee:9b:
13:2c:8d:82:bd:bf:ba:e3:e8:1f:a2:fe:95:0e:0d:
77:af:98:b0:39:78:57:38:a2:07:aa:f5:2c:f3:bb:
f6:42:17:5d:cc:1d:c0:4a:e1:d8:6a:08:82:49:8e:
70:fa:62:c2:a0:59:49:9c:e4:32:c3:e9:c2:3e:db:
0a:22:fe:b1:c6:b1:d7:ff:8d:2f:af:16:1f:8f:04:
7d:38:56:8e:bf:fa:3c:46:1f:71:82:79:11:2b:7e:
b4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B5:7D:04:0F:71:1F:0E:80:2D:08:91:59:CD:1B:40:C4:E8:91:A8
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c5:ce:84:af:4b:47:ff:ce:85:44:06:62:ec:be:a9:03:46:
c1:30:2b:ba:00:33:41:46:8a:4b:e1:0e:38:5f:21:ce:52:db:
75:d7:90:f7:d6:ec:76:96:3c:de:72:0c:08:fd:69:20:57:f7:
28:d8:27:f1:8c:c8:be:13:56:9f:60:31:d9:10:c0:fd:a3:fd:
41:39:4d:cd:68:e5:f0:33:20:a0:0b:ed:f5:a3:4d:5f:64:c8:
7d:77:cc:c3:6a:9a:ef:be:84:c4:8d:22:be:38:bd:1f:9e:33:
f2:63:56:75:c0:ec:7b:53:f3:06:8b:99:d5:5a:08:b3:cb:23:
c7:93:05:d6:96:2e:6b:16:32:8d:5c:47:43:b8:98:65:51:7b:
d0:c7:08:fd:56:b1:3c:a9:10:c4:5f:2e:77:b5:d4:e2:db:54:
df:5c:e0:c1:13:fe:37:ce:30:a1:6c:02:02:14:ef:40:d7:cd:
31:e0:7a:3f:72:83:9a:2d:a5:69:13:5f:a8:e0:60:5a:97:69:
89:22:a7:15:2d:f5:c3:e5:40:99:b7:ae:56:10:22:b1:23:6f:
23:bd:af:f0:d4:f8:f1:aa:af:9e:a1:49:b5:91:17:f2:5e:15:
4a:22:c0:6c:1e:2d:c0:9b:6d:f4:66:9a:c4:fd:10:c2:08:bc:
9c:02:38:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:43:12 2025 by rpki-client