Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
File: 1-cEFknmJ7EHAiQOtjNVqidrovl0.mft (raw, json)
Hash identifier: qBF2gwOUk+s4p8Kl76X/kAed3jUuRg9y1mXI7N6ypFo=
Subject key identifier: ED:9D:40:ED:B2:AF:AD:DB:21:3D:2E:E2:46:48:F4:6B:5F:95:80:55
Authority key identifier: F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
Certificate issuer: /CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Certificate serial: 01975046C913441F1A4E5D79D3028382DC1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 16:01:45 +0000
Manifest this update: Sun 08 Jun 2025 16:01:45 +0000
Manifest next update: Mon 09 Jun 2025 16:01:45 +0000
Files and hashes: 1: 1-cEFknmJ7EHAiQOtjNVqidrovl0.crl (hash: KDrKS8BCXKxcw/lQaz4SfKbc6jGQVbH49sEUEFtLcYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:c9:13:44:1f:1a:4e:5d:79:d3:02:83:82:dc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Validity
Not Before: Jun 8 16:01:45 2025 GMT
Not After : Jun 9 16:01:45 2025 GMT
Subject: CN=ed9d40edb2afaddb213d2ee24648f46b5f958055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:0e:23:13:f6:fb:fb:39:4d:d9:90:33:57:
ba:ce:d3:26:2c:bc:88:42:4f:22:9a:89:41:9a:3a:
1c:81:14:be:68:92:07:f8:55:c9:e3:65:61:1e:af:
a7:57:fb:e2:9b:f5:42:75:e7:b1:a5:b4:f5:ef:ce:
59:19:ea:60:43:e4:aa:f3:ef:d9:89:96:a3:af:8c:
fb:4d:6d:d8:bf:f8:f9:4f:46:49:87:2f:46:3c:17:
af:e7:8c:4d:05:d4:a2:62:f4:fc:26:2d:9c:ce:ca:
d7:96:6c:42:42:d8:99:61:83:c2:38:81:b2:9b:f6:
2d:55:2e:b4:b1:40:30:84:b4:59:97:b4:5a:2b:93:
50:3c:fe:c1:0d:c8:df:52:ed:bd:5f:e7:f1:e9:7b:
fd:a4:72:50:fd:d3:0d:eb:dd:69:17:62:87:80:3e:
05:9b:d4:9f:91:c1:ad:78:45:a9:ee:5e:0d:b9:27:
34:7d:b6:1c:1b:bf:ea:5f:9d:fe:5a:1d:8f:71:b7:
5f:91:f8:c7:62:57:7a:be:75:a2:11:1c:45:8c:0c:
a6:3a:c4:fb:88:06:23:af:1d:ec:e8:19:a5:7f:88:
8d:75:5e:ad:04:58:13:f4:74:e5:9d:b1:66:30:c3:
90:a8:d4:aa:96:c4:78:47:f5:22:38:65:b8:61:08:
2f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9D:40:ED:B2:AF:AD:DB:21:3D:2E:E2:46:48:F4:6B:5F:95:80:55
X509v3 Authority Key Identifier:
keyid:F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3f:08:f1:4d:0c:36:0e:40:bc:fe:c7:33:0c:a7:79:1c:3d:
cb:c6:c8:9c:3d:45:08:b9:d4:2b:3c:37:cb:ad:19:b3:10:e2:
d9:0c:69:1a:3b:ce:b7:b5:7c:b3:10:0c:f8:5a:c1:66:1e:56:
eb:90:04:2a:6b:48:0a:90:35:e1:94:e9:09:c4:b4:4a:0e:48:
ad:fc:40:1d:2a:ab:98:fb:51:11:55:41:80:65:8b:9f:a4:2d:
00:66:31:24:4f:04:67:18:d8:c5:2f:6b:3a:5f:0f:c3:38:cd:
d0:08:99:ff:ce:d3:1c:be:f7:ee:87:4b:59:d5:aa:d9:67:35:
e9:36:4a:3b:b1:57:fc:81:29:f9:64:3d:b8:e8:b3:10:32:46:
ef:74:f8:12:c0:e9:85:49:38:48:d4:22:f5:10:32:ad:df:d7:
c0:25:ff:65:5e:89:33:b2:6a:eb:23:bb:10:0e:a0:5c:09:73:
ec:f8:64:26:75:2f:35:8f:47:31:19:4d:55:ea:c0:27:ce:74:
4d:c3:1c:a0:f0:23:0f:90:b4:2d:12:a3:12:b1:85:f1:a6:d6:
21:79:6c:16:11:4e:cf:3d:75:f3:57:29:f5:15:29:8b:49:5e:
38:d4:dc:58:1a:09:ac:13:33:dd:a5:fe:c4:e2:0b:19:ba:8e:
3c:71:5e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:12:40 2025 by rpki-client