Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier: GA2LB15Px4msmGsaFADg8vPvir6S0rDCB1lR3pTsrj0=
Subject key identifier: 1C:03:E8:F6:A3:86:6E:46:27:FB:8C:3F:66:9A:A5:2C:30:03:DD:92
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial: 019748FA533144F39B2E79C651B0B0219463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number: 04CA
Signing time: Sat 07 Jun 2025 06:00:54 +0000
Manifest this update: Sat 07 Jun 2025 06:00:54 +0000
Manifest next update: Sun 08 Jun 2025 06:00:54 +0000
Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: EspA3KW9nfiAt9HM5aNNd+zd8zE1Xe/aK1KKu3rpn8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:53:31:44:f3:9b:2e:79:c6:51:b0:b0:21:94:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Validity
Not Before: Jun 7 06:00:54 2025 GMT
Not After : Jun 8 06:00:54 2025 GMT
Subject: CN=1c03e8f6a3866e4627fb8c3f669aa52c3003dd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:85:0a:b1:c9:c1:ef:d5:b8:bd:bf:48:a8:
cf:99:f5:1c:93:32:dc:77:8a:42:c1:8d:1f:80:82:
23:0a:17:51:c9:ee:4d:63:ad:b3:04:76:3e:a5:85:
d0:36:da:e0:d9:a5:d3:b2:fb:74:4b:a2:f1:9c:d1:
ea:91:a5:4e:63:46:de:fa:7f:42:df:89:03:ef:ef:
11:23:8c:3d:c7:8f:8a:11:2e:64:f1:d9:22:db:f1:
86:21:b2:77:0c:ee:73:0a:c4:5e:68:2d:e0:1e:03:
35:93:8d:ed:2b:dc:af:f0:ea:6f:fc:d1:38:df:4b:
94:58:6e:5b:43:c9:4b:51:6f:d6:26:ab:92:2d:3e:
da:64:c2:8a:d2:59:97:b1:7f:ef:60:02:e6:0c:05:
ee:1a:d4:2e:db:a5:1e:6d:ab:41:c4:71:5f:70:ad:
b5:fa:3f:b8:f5:f0:13:50:2c:04:61:52:a1:eb:1c:
19:a3:65:29:0e:da:6b:28:1b:e9:29:6f:39:2a:84:
46:b3:d4:6d:04:b5:60:8b:69:cc:60:9e:7f:dc:fb:
2a:e5:c6:69:d0:dc:a3:a0:81:e4:b5:58:18:6d:69:
34:6e:a1:af:01:03:69:fd:99:64:53:00:96:5f:fc:
d6:ed:4f:6d:6b:92:90:66:0c:52:b2:44:ad:39:fd:
56:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:03:E8:F6:A3:86:6E:46:27:FB:8C:3F:66:9A:A5:2C:30:03:DD:92
X509v3 Authority Key Identifier:
keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1c:86:4b:36:23:14:a8:45:0b:04:9b:ab:5d:a9:2a:63:5a:
3b:a4:b2:3e:7e:83:14:6c:6d:86:9e:9f:96:85:6c:d7:4c:5b:
7e:40:59:b0:09:66:4a:64:9a:a9:6f:27:9e:e4:98:a6:53:60:
b1:0d:ab:1a:1e:6a:51:7a:85:33:0f:4e:7f:18:5a:1a:95:4e:
17:52:9a:af:be:e6:6a:aa:5f:93:54:82:9f:2d:6e:e4:a7:e5:
3b:e1:4b:b7:31:cb:85:81:ea:b4:d6:50:0f:76:3c:0e:09:db:
07:2e:94:47:66:fa:dd:a9:5e:a4:de:78:f9:9d:85:ea:d8:d8:
1e:ca:6b:39:ae:15:f9:9e:77:fe:65:15:dd:e3:e5:48:3b:1a:
62:b5:79:b0:ca:08:d4:34:e9:d5:50:af:bb:eb:fa:02:e4:01:
bf:08:a6:10:28:b7:ab:be:dc:e0:9f:23:b6:9f:af:de:f5:9f:
12:0b:c6:e7:0f:4f:f7:7c:51:7e:cd:71:67:19:a5:d0:ef:4a:
0b:db:ce:df:f0:c9:d5:23:a2:30:40:26:74:4b:36:3b:6d:2e:
c7:bd:64:b7:c6:3d:5f:e5:35:be:b5:24:97:6c:82:f9:58:bf:
89:fe:d6:54:3b:6d:63:a2:54:79:39:9e:11:40:75:6b:cf:43:
ef:ad:d4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:54:57 2025 by rpki-client