Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
File: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft (raw, json)
Hash identifier: k65VgDvG4Uj6Ks1CtfNymHhl0LhY9A8tv7siZP4dIfk=
Subject key identifier: 8C:AE:AD:EA:D9:E3:B5:51:66:F2:59:4E:39:10:CD:3B:C3:D8:85:3A
Authority key identifier: FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5
Certificate issuer: /CN=fa14af16e589f9848fc695d057f81c167e8f63d5
Certificate serial: 019749D5B6653813D13CF33A2893DC0291DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
Manifest number: 0681
Signing time: Sat 07 Jun 2025 10:00:32 +0000
Manifest this update: Sat 07 Jun 2025 10:00:32 +0000
Manifest next update: Sun 08 Jun 2025 10:00:32 +0000
Files and hashes: 1: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl (hash: 4EmBIRuNhfRFx/UJL/0JK4+TuNBuSgiLRor9ZEcIwmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:b6:65:38:13:d1:3c:f3:3a:28:93:dc:02:91:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14af16e589f9848fc695d057f81c167e8f63d5
Validity
Not Before: Jun 7 10:00:32 2025 GMT
Not After : Jun 8 10:00:32 2025 GMT
Subject: CN=8caeadead9e3b55166f2594e3910cd3bc3d8853a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:2b:aa:cf:07:61:9d:98:1f:f5:a3:2f:a6:
08:8f:37:00:fb:82:86:18:3e:1e:45:76:df:b9:70:
c8:3b:42:d7:67:1a:ab:df:43:33:15:82:fa:38:04:
63:00:de:fd:90:d9:14:80:40:f3:8c:d5:96:ee:97:
ba:58:35:f0:c7:83:d7:75:54:33:11:7d:26:c2:94:
0c:e7:2a:d4:ba:88:46:a5:a4:f7:4c:e0:49:06:68:
61:0e:b0:e1:2f:27:92:60:85:40:11:d2:fd:eb:39:
b8:34:87:a5:78:61:1e:7c:0a:1c:42:b0:30:69:6a:
f8:79:47:9b:2a:4f:02:74:6e:9f:74:9f:ad:33:0a:
a4:03:46:2e:45:f2:0f:53:d8:79:d7:8c:43:07:84:
a6:e3:dc:23:c6:37:1c:16:ec:38:31:35:6f:63:e6:
1f:5f:0a:dc:dd:99:c0:49:2c:9d:b9:82:ef:3d:2d:
d5:18:aa:f9:47:1f:48:34:93:85:8e:a8:79:85:e9:
bd:c8:01:d0:f4:d0:97:17:c0:5e:62:aa:22:9e:2d:
52:89:96:76:63:20:8a:56:78:ee:77:52:7c:37:ca:
56:5f:b5:3e:d2:08:0d:06:86:5d:68:cf:69:1e:b6:
05:bc:1d:ab:20:f8:ad:23:6a:3b:73:60:25:7b:3f:
9a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AE:AD:EA:D9:E3:B5:51:66:F2:59:4E:39:10:CD:3B:C3:D8:85:3A
X509v3 Authority Key Identifier:
keyid:FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ab:e4:ce:11:9f:b2:5e:55:78:e3:bc:91:c4:04:86:5a:7a:
7b:39:d9:ac:06:bc:1a:1d:4d:00:8a:a9:c7:c0:29:83:bd:f3:
a0:00:60:e5:ed:7b:52:11:9a:b3:7a:c8:a3:85:c9:b0:29:62:
e4:13:db:4b:2f:4f:b6:59:39:c1:93:5a:9f:79:c4:43:c0:7d:
9c:d4:cf:30:04:42:f9:e6:ef:1d:0e:c2:cf:04:17:76:ec:14:
b7:ae:cb:70:d1:e6:aa:0d:1d:e3:c5:03:8f:65:78:b7:5d:26:
a3:79:b6:37:e6:ea:f6:84:be:75:85:ba:84:54:c8:54:b4:7a:
0a:21:83:dc:de:bb:87:94:90:03:dc:8f:ba:a9:0d:82:5a:20:
19:df:16:16:04:f6:65:a2:c1:20:af:c1:4f:7e:d0:29:e2:df:
99:df:8a:22:9d:68:c1:73:87:fb:81:35:6b:9e:6d:d5:19:4d:
51:4d:c2:da:1f:c6:bc:a9:f2:14:81:40:04:9c:1a:76:e8:46:
4e:d0:24:72:22:25:35:a0:b8:15:dc:93:b7:15:e2:17:87:8d:
5a:65:8e:da:f0:4e:f7:1e:de:bd:df:c8:46:b6:ff:da:13:c9:
7a:7f:49:62:10:11:ea:cc:77:1f:b9:af:54:38:45:ae:10:47:
25:47:ab:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:14:17 2025 by rpki-client