Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
File: 1-9F4zWAolpi3zZXd17FpF0kLRAc.mft (raw, json)
Hash identifier: 0+0s/Cy0/xAbS/UAIHUdUsxRk8zgz9YsKM3PWwTNhx4=
Subject key identifier: F1:24:56:62:93:8E:36:33:46:56:DD:73:E3:F0:95:E7:C8:80:FC:C3
Authority key identifier: FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
Certificate issuer: /CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Certificate serial: 0197469E2B6EAEFF253252B72DF8E7195016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
Manifest number: 0A49
Signing time: Fri 06 Jun 2025 19:01:00 +0000
Manifest this update: Fri 06 Jun 2025 19:01:00 +0000
Manifest next update: Sat 07 Jun 2025 19:01:00 +0000
Files and hashes: 1: 1-9F4zWAolpi3zZXd17FpF0kLRAc.crl (hash: bIXc7PKTdbwaG9Fuq3UqDosoxm5WdWgO4DsFYo9OfI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:2b:6e:ae:ff:25:32:52:b7:2d:f8:e7:19:50:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Validity
Not Before: Jun 6 19:01:00 2025 GMT
Not After : Jun 7 19:01:00 2025 GMT
Subject: CN=f1245662938e36334656dd73e3f095e7c880fcc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e2:57:c3:a3:20:b2:d0:19:6e:e8:72:e1:b9:
f7:b8:21:c7:3b:c4:f6:c6:2c:96:0d:ba:20:fe:4a:
6f:17:c4:47:d0:a6:8b:cd:97:8b:05:ac:7f:aa:0f:
00:c3:97:1e:88:26:da:00:f6:d3:9c:38:36:d2:a0:
42:a0:7b:e9:f5:bb:c4:47:fb:fb:b8:6b:12:82:77:
43:9a:f2:f4:8e:64:c1:0b:86:42:bd:98:46:3c:a9:
85:13:a8:9a:24:d9:33:12:03:ff:ef:6f:dd:71:c2:
6b:f7:26:bd:50:14:ff:27:57:20:c7:8f:c2:d6:df:
c3:a8:8f:2f:97:40:4d:1c:15:58:af:ff:02:7d:64:
41:32:59:b6:69:b8:a0:b0:25:97:90:a5:62:5b:e2:
6f:9b:74:4b:be:20:b4:53:1d:a5:66:80:28:cb:ab:
e7:c9:39:a0:3d:2e:76:38:2e:57:2e:ba:b3:47:4c:
57:0a:d0:4a:90:82:68:d9:73:c4:6e:ab:ac:37:eb:
2b:59:2b:0a:90:96:26:fb:e9:6f:d8:9d:80:ec:4c:
01:fc:ef:79:9d:70:7f:90:b7:d4:99:c1:0e:78:c5:
99:48:49:b8:b1:7d:47:db:b3:34:a5:22:83:4f:29:
82:df:6f:c2:54:3f:f2:72:8d:6c:9e:b1:1e:5f:48:
39:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:24:56:62:93:8E:36:33:46:56:DD:73:E3:F0:95:E7:C8:80:FC:C3
X509v3 Authority Key Identifier:
keyid:FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:65:d2:69:e9:26:8c:29:51:64:f1:1a:15:f8:02:7e:89:ac:
58:60:68:e8:24:62:d0:10:5e:8b:a3:3a:33:f8:52:e2:4e:fa:
53:5e:66:d4:65:08:53:25:5d:bd:ba:28:41:86:75:59:3d:69:
d7:80:f4:9b:bf:bf:64:0c:ca:15:8e:4d:9e:24:03:0e:49:39:
e2:d9:6b:de:03:32:16:1e:c6:4f:d4:dd:03:21:df:49:ee:55:
75:00:89:4b:b4:b0:79:d2:8a:a3:54:1b:a7:c0:1a:6b:4f:36:
31:5e:1e:d2:ad:52:be:cf:33:8c:76:d9:9d:5c:33:62:ab:2f:
97:31:73:82:c3:11:e2:1a:63:4e:0c:77:dd:bf:90:58:c8:d6:
ae:31:23:39:2d:25:34:74:79:38:ee:a9:3a:9c:f1:2b:00:15:
aa:1d:71:26:e1:1d:13:41:dc:c7:30:c9:36:0f:fa:9b:56:b3:
69:d1:2a:5b:bb:f1:a4:83:31:ff:05:11:e1:aa:1d:a3:10:b6:
4a:c7:eb:c2:62:55:8b:11:5e:ef:08:98:cf:d9:d0:e3:ea:5e:
d7:a1:16:c5:37:52:dd:72:70:65:fb:c2:f2:f4:b8:0b:ed:26:
87:3e:2b:a4:99:d1:0e:c9:9b:7b:6e:29:11:6e:8d:f8:60:c7:
0f:b6:2f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:21 2025 by rpki-client