Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
File: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft (raw, json)
Hash identifier: Pa8ZCnSPPGrRiwtuRMGfDnhMte9FXRXTTJkBRebrUxI=
Subject key identifier: 28:A6:EC:7B:22:03:CD:6A:9A:60:E7:25:BF:D0:9B:53:0E:C3:AA:2E
Authority key identifier: F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
Certificate issuer: /CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Certificate serial: 019754229C6616D02BF46C78A7634585C832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
Manifest number: 08B1
Signing time: Mon 09 Jun 2025 10:00:43 +0000
Manifest this update: Mon 09 Jun 2025 10:00:43 +0000
Manifest next update: Tue 10 Jun 2025 10:00:43 +0000
Files and hashes: 1: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl (hash: ItGEPiJI7KQyvCXUG8rhFA7E+qJgteHcXfW0Qbivzes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:9c:66:16:d0:2b:f4:6c:78:a7:63:45:85:c8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Validity
Not Before: Jun 9 10:00:43 2025 GMT
Not After : Jun 10 10:00:43 2025 GMT
Subject: CN=28a6ec7b2203cd6a9a60e725bfd09b530ec3aa2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bf:db:f6:ea:7a:6e:a5:f7:f5:f4:bf:ed:d9:
57:2f:7e:52:1f:89:0c:d9:2b:0b:e3:de:8b:3c:17:
e9:4b:a2:95:7e:8c:82:9d:32:82:cf:51:42:56:f2:
d1:c9:91:05:04:41:4c:ee:69:e9:68:44:55:f5:a4:
10:06:e3:85:5f:66:63:3e:21:36:93:86:59:5d:f4:
70:dc:35:da:1a:34:87:77:dd:7b:c5:f6:c5:83:45:
57:2c:39:38:4c:64:e4:16:45:af:37:e3:ab:98:f2:
dc:6c:de:f0:03:ef:be:c7:63:05:67:15:ff:b0:74:
4a:66:8c:6f:5e:12:e3:84:53:11:40:84:4c:1d:3c:
d8:64:cb:50:3c:a1:45:63:19:8a:2c:ef:aa:ea:0f:
ce:38:23:10:62:f8:98:2a:24:dd:b0:3e:6d:df:41:
26:ac:22:c0:a5:c3:3a:eb:32:39:a6:43:ee:a1:4a:
ae:36:cf:5f:28:cc:78:39:e0:cc:39:50:88:24:6c:
bc:32:e6:1a:75:0b:25:ee:9f:b2:8c:bf:35:ca:0a:
9d:8f:7d:3d:64:95:29:12:28:3b:8b:92:04:b7:63:
39:4b:62:18:32:0a:08:b3:21:7b:86:c3:8c:ef:c5:
fb:13:79:7b:6b:95:c1:d8:92:5d:19:09:8d:c8:6b:
db:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A6:EC:7B:22:03:CD:6A:9A:60:E7:25:BF:D0:9B:53:0E:C3:AA:2E
X509v3 Authority Key Identifier:
keyid:F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:61:76:0b:53:c5:a9:41:12:73:1f:e2:1f:df:82:73:86:9e:
29:ba:c5:b2:a4:5e:34:75:3b:b1:20:e9:18:f3:de:24:f8:a9:
3a:fc:a9:82:24:b5:ac:e5:da:9f:24:e5:f2:0a:c0:51:02:f0:
76:97:4a:c4:1f:d9:ec:90:6e:7c:0f:df:62:99:7a:67:73:c3:
06:7d:41:2f:5b:0c:80:12:af:cc:f1:24:19:69:41:c7:38:f8:
07:61:31:79:16:18:2f:b9:0a:61:b1:c8:90:e5:39:03:41:88:
17:06:c1:f0:3d:fb:48:f4:02:6b:3d:7d:52:c5:dc:ab:0b:06:
7d:68:ac:08:9c:af:95:e0:5b:44:69:f8:31:51:28:51:7c:4c:
d0:0f:ac:aa:4a:af:4f:9e:97:2c:5e:cf:31:98:e8:2e:72:a8:
ed:91:1b:52:68:84:05:80:fc:d0:9a:a8:ef:b2:ac:45:3c:d8:
34:ed:61:be:87:73:78:b3:aa:12:8b:9a:1d:a3:b0:54:d3:44:
1c:31:3a:eb:2c:3b:9d:93:df:8a:09:a4:e0:7b:51:d3:16:d2:
48:ec:a4:80:b7:f9:63:3a:b0:26:42:b8:a8:3d:43:01:8f:48:
4a:f3:a4:ff:f7:cb:43:a1:a2:f2:ba:e2:c7:01:d9:17:6c:01:
9a:95:86:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:59:27 2025 by rpki-client