Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
File: 1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json)
Hash identifier: pffEJuuFuBE22VdXoTZKWtrjZd1zZMj3dGWhQxR8/uk=
Subject key identifier: B3:1D:22:E8:55:54:5A:21:26:A3:53:71:4C:22:02:08:E7:AC:00:DC
Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
Certificate issuer: /CN=fbbe52d834e268dc698830292fde4b63c7da392e
Certificate serial: 0197488D4931BF7F74ACE2923CA61D465DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
Manifest number: 0AFD
Signing time: Sat 07 Jun 2025 04:01:48 +0000
Manifest this update: Sat 07 Jun 2025 04:01:48 +0000
Manifest next update: Sun 08 Jun 2025 04:01:48 +0000
Files and hashes: 1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: 5A1UiGi8RDW1cFlFPGUHq6LalsQy5qn7GNA2kxWhDjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:49:31:bf:7f:74:ac:e2:92:3c:a6:1d:46:5d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e
Validity
Not Before: Jun 7 04:01:48 2025 GMT
Not After : Jun 8 04:01:48 2025 GMT
Subject: CN=b31d22e855545a2126a353714c220208e7ac00dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ae:c0:d1:20:b4:bb:c2:19:e1:88:ea:37:23:
58:01:5c:75:23:c7:4c:07:01:4d:e2:d9:f7:50:9d:
ce:14:fa:48:5e:fe:55:ed:ec:65:e5:65:04:9a:a0:
6a:7d:f4:e9:69:8c:27:11:1a:60:bf:5f:55:e3:51:
15:06:54:64:2a:21:b7:13:8a:76:27:11:ba:08:6f:
0d:d9:38:cc:80:52:58:e4:2a:2d:f6:b9:c8:5f:1f:
6e:8d:c4:00:dd:e8:24:e8:2e:51:6c:f5:1e:67:22:
ee:d9:7e:70:f8:94:f7:94:45:39:4f:dc:9a:cc:17:
4d:46:62:62:3c:1b:49:02:0c:eb:4a:0d:5d:07:b2:
55:10:16:f5:d7:f3:70:b6:d6:64:69:5c:91:3b:7d:
c1:9b:c9:bf:20:8f:61:07:35:3c:87:38:8b:e6:03:
b3:dd:59:24:57:3e:2a:60:2f:0a:1b:6b:9e:09:de:
86:02:51:b8:f4:0c:c8:1d:48:05:ac:4f:41:10:45:
18:60:fa:12:ef:b2:e4:fc:cc:9d:1e:be:82:17:8b:
09:0d:99:34:f1:ab:5c:6c:fd:2a:21:14:68:a3:c8:
4d:bc:6f:69:56:7f:84:25:af:9d:7c:9f:4e:4e:7c:
bd:54:69:e0:25:fc:59:93:57:18:7a:a4:07:d7:21:
87:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1D:22:E8:55:54:5A:21:26:A3:53:71:4C:22:02:08:E7:AC:00:DC
X509v3 Authority Key Identifier:
keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5c:de:fd:f9:d0:30:4b:ae:25:af:7e:04:a1:a9:fa:b2:46:
69:99:8b:4c:cb:57:df:e2:5a:13:b1:99:da:f8:95:ca:71:76:
fe:62:ab:ef:66:23:d7:73:42:97:48:f0:d0:e9:cf:c0:3a:6b:
40:85:9a:b7:a2:33:a9:76:d4:75:8c:9b:a5:15:3c:c1:d0:b4:
92:84:3b:1b:27:69:1f:37:a9:45:f1:c9:66:11:8e:80:a3:10:
55:9d:1b:bd:20:28:82:a0:34:bf:55:bf:89:ec:f6:59:63:32:
8e:3c:69:86:ad:fb:c6:3b:0d:86:a9:45:b5:cc:24:ff:38:92:
2e:2b:9a:9e:13:b8:ec:fe:92:2f:20:70:62:b1:9e:24:ae:99:
f1:05:79:b0:b6:04:82:c2:8d:d4:52:3f:0b:02:64:2a:12:e9:
84:0b:db:4e:4c:8a:07:26:02:62:6f:fb:f7:05:1f:66:7a:e1:
fe:0a:ce:e9:e4:6f:7d:32:69:e3:9e:ad:8f:e5:69:ea:1b:29:
51:12:6c:03:cf:8b:03:77:dd:98:e2:d9:5c:2b:01:04:2b:6e:
bd:5e:8c:b7:7c:b7:44:79:80:bb:4a:f0:f2:6d:a3:7e:5c:30:
46:ee:a5:d7:7a:ca:9e:5c:01:68:ba:49:2f:c7:81:0a:48:02:
52:ce:aa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:57:06 2025 by rpki-client