Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
File: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft (raw, json)
Hash identifier: rnRxllYedFrStcT2ksbP4na6t7mJvqObOc1EYisPv5g=
Subject key identifier: 8E:95:F3:5A:93:7F:93:3C:7B:15:18:73:1D:81:39:1F:75:78:AD:9F
Authority key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Certificate issuer: /CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Certificate serial: 0197469E0464E42E860B2A3D67776F04791A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
Manifest number: 1577
Signing time: Fri 06 Jun 2025 19:00:50 +0000
Manifest this update: Fri 06 Jun 2025 19:00:50 +0000
Manifest next update: Sat 07 Jun 2025 19:00:50 +0000
Files and hashes: 1: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl (hash: UPH8AgxuPMpHE43JOZAKEUxrnryB6B5VuhwWPJ6pNvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:04:64:e4:2e:86:0b:2a:3d:67:77:6f:04:79:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Validity
Not Before: Jun 6 19:00:50 2025 GMT
Not After : Jun 7 19:00:50 2025 GMT
Subject: CN=8e95f35a937f933c7b1518731d81391f7578ad9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:11:1b:e0:19:34:19:86:1c:e2:7c:e7:c9:
79:83:7e:e6:5c:3e:a1:d9:11:a6:a0:e7:6b:3a:71:
bf:2e:a8:e0:f6:8e:17:84:a4:ca:ba:72:dc:94:34:
2c:b4:20:0d:ae:70:34:ca:f4:75:62:3f:b2:97:c8:
e5:63:f8:ec:be:5a:2b:21:16:e1:ca:df:22:2b:f0:
80:59:f5:e3:ad:ad:2c:45:8e:4f:d0:26:03:17:07:
f6:ad:c4:4e:94:3b:e1:00:f8:7b:ca:ad:f8:a8:79:
fb:03:e0:27:b5:3e:fe:80:d3:49:5e:de:f5:2f:26:
8b:0e:d7:4b:66:b1:f6:48:3c:1e:b9:5b:c7:c4:ed:
3e:f3:2e:fc:d0:4e:b3:6c:26:7f:17:c1:b9:98:cf:
36:04:86:d1:df:47:e9:6c:f5:f4:6a:20:10:ad:58:
b7:1d:f9:26:74:f5:61:40:01:88:32:50:23:cd:62:
36:7b:5a:49:f6:1b:0f:6d:8c:84:b6:c5:cc:19:25:
04:f9:5d:c7:34:f8:52:6d:95:7d:4c:0b:d5:e2:2a:
20:19:4b:e5:7e:54:4b:a5:4b:11:69:58:16:1e:d5:
00:e3:d6:99:d8:bd:52:b2:92:85:a1:7e:2d:d3:9f:
b9:8f:0e:bc:09:18:22:17:53:77:6a:44:95:ed:b2:
81:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:95:F3:5A:93:7F:93:3C:7B:15:18:73:1D:81:39:1F:75:78:AD:9F
X509v3 Authority Key Identifier:
keyid:FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0b:0b:a6:56:86:c8:53:66:cc:45:65:f9:46:cf:7e:35:6c:
45:77:5f:50:5a:95:54:da:47:a5:20:1f:8f:3a:dc:c8:c6:3d:
36:5e:d9:a3:32:e5:e3:dc:a9:3d:fa:e8:1e:9c:10:d4:c8:9d:
a9:62:e8:53:75:db:4a:1e:c6:2e:f9:96:f3:12:b9:bc:5e:4f:
a2:ba:13:78:5c:c1:7d:f6:ce:71:62:f7:2c:35:67:58:df:f4:
2c:ba:a8:9b:82:a1:76:fb:54:69:ae:2d:f1:34:32:36:8f:c4:
9b:5d:d5:8f:22:c2:e8:03:b8:40:5d:41:68:63:6a:fa:d3:16:
4d:6c:c5:87:a3:a3:47:bd:c2:96:0b:58:0f:d4:e7:c5:c6:60:
1d:cd:af:68:0b:61:6c:eb:0c:5e:0e:c4:52:4d:f4:5e:b6:de:
6d:6b:79:d9:e9:b9:fb:af:c7:11:75:08:8f:f6:b2:52:2a:c7:
5e:85:69:2a:2c:72:02:c4:35:21:81:72:c8:18:24:18:76:41:
96:4f:4c:b1:12:80:29:dc:5e:28:35:50:92:de:b2:21:5a:10:
b6:d3:db:c3:d5:e2:c2:23:a3:2c:52:18:29:58:4b:35:a1:e0:
f9:ae:f3:be:d6:57:56:62:b8:e2:59:6e:a1:e8:d9:0d:e8:7f:
75:65:37:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:49:13 2025 by rpki-client