Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
File: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft (raw, json)
Hash identifier: 2ta6aVVGXN97PZ2GijVZiJg5gdoX5tjeIBSG30rm6Ro=
Subject key identifier: 94:18:B6:35:13:3F:EC:25:61:24:57:D8:93:D1:37:F3:D5:48:96:EE
Authority key identifier: FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
Certificate issuer: /CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Certificate serial: 01975422578CE7AE57FCB4B7F0471D467A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
Manifest number: 05DA
Signing time: Mon 09 Jun 2025 10:00:26 +0000
Manifest this update: Mon 09 Jun 2025 10:00:26 +0000
Manifest next update: Tue 10 Jun 2025 10:00:26 +0000
Files and hashes: 1: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl (hash: y2arHCdPWCiYXGGSgOdKFVwZAiKWALuLhi6gNNLEg8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:57:8c:e7:ae:57:fc:b4:b7:f0:47:1d:46:7a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Validity
Not Before: Jun 9 10:00:26 2025 GMT
Not After : Jun 10 10:00:26 2025 GMT
Subject: CN=9418b635133fec25612457d893d137f3d54896ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:40:b4:8e:30:03:b3:50:66:78:74:49:e8:d5:
7e:a3:58:19:8f:ef:92:5b:4f:80:0a:8e:b9:46:f0:
e3:92:77:4a:28:24:a7:d3:74:b2:79:65:42:dc:58:
20:33:1e:c7:f2:48:d9:9f:2a:57:4f:d2:07:ec:d3:
c4:f4:95:29:f7:09:d4:50:6a:40:66:0a:b5:5f:87:
35:ec:b6:6c:f2:89:88:24:d9:91:e6:ca:19:e6:45:
a7:bc:f9:bd:94:09:92:6f:64:40:fb:3b:e2:f2:72:
b9:bd:f5:bc:88:96:db:72:11:0d:15:ae:d3:16:15:
99:14:c5:74:18:48:d2:77:68:04:8a:9d:29:51:f0:
9d:5d:b6:fa:d0:b9:7f:ca:f6:88:36:c8:9c:a1:d6:
1e:b6:23:05:a0:ae:09:43:e9:22:94:6d:fe:c6:c0:
9e:6b:e0:b1:36:34:9b:f8:da:dc:11:e4:b7:72:56:
1f:3c:73:45:e7:2e:dc:62:48:94:27:63:22:0d:bf:
8a:d6:df:e6:41:dd:3f:75:cd:14:f5:a5:a9:ad:47:
2a:75:07:9a:20:f7:2c:00:57:b7:ce:23:7c:c8:86:
22:e4:be:1e:ed:e3:6b:96:8f:86:07:d4:10:fd:72:
46:4b:5e:ec:e5:10:56:78:25:0b:9c:19:b5:b1:46:
a1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:18:B6:35:13:3F:EC:25:61:24:57:D8:93:D1:37:F3:D5:48:96:EE
X509v3 Authority Key Identifier:
keyid:FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ef:a7:b3:a2:14:be:fe:5c:77:84:3c:60:d5:7f:9f:99:21:
a8:e1:32:dc:43:38:60:ea:e6:ab:15:18:a8:78:98:54:b6:b0:
d4:7d:eb:89:a1:29:06:ef:54:73:e1:7a:bb:6f:9c:8c:bb:28:
fe:02:22:3e:e4:12:44:97:db:33:14:f2:7e:eb:fb:88:a3:ed:
3b:81:61:b4:e2:93:6b:d5:af:ab:33:c2:35:73:f9:21:a9:96:
fe:82:57:e7:e9:b1:f2:4f:fe:29:d5:b7:ca:80:51:60:33:25:
e3:31:9d:8b:0e:92:2b:d5:0c:25:2a:1e:75:66:a0:21:34:c0:
6b:04:59:02:92:63:9e:65:92:85:d6:4d:bf:16:31:3e:df:84:
52:60:a5:b4:98:d2:7b:a2:21:64:03:01:06:79:7e:28:60:9d:
e2:c6:3b:45:5e:00:2e:68:0d:f1:8a:1a:d6:49:fd:6d:ee:c4:
83:a7:3a:9d:81:e0:89:d9:ea:ee:d6:5b:fe:8a:09:b2:46:5e:
10:e5:7e:be:0e:65:de:75:16:69:93:43:1d:2b:bc:83:c5:67:
08:f5:11:c9:c1:57:40:5a:66:c7:8b:b6:a2:e1:75:f2:f1:96:
04:de:ab:d6:c7:6f:05:32:f8:c3:0b:b9:2e:e1:b8:08:a9:3e:
da:2c:cb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:52:14 2025 by rpki-client