Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
File: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft (raw, json)
Hash identifier: bLaOLMIaWpvBQoELyqJOhG6mSIR4Du09TPLS4UYBsGg=
Subject key identifier: 14:8F:13:FD:82:63:93:F4:A4:51:70:CD:E0:F0:F5:80:8F:DB:2F:74
Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Certificate serial: 019750464038DA7287FE6399C14960036721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
Manifest number: 1005
Signing time: Sun 08 Jun 2025 16:01:10 +0000
Manifest this update: Sun 08 Jun 2025 16:01:10 +0000
Manifest next update: Mon 09 Jun 2025 16:01:10 +0000
Files and hashes: 1: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl (hash: uQDgusziyPGmrW2ZIb1mlrTnmvxovpeES8w8Z/rC1KQ=)
2: sdcv864WQrJBi5xKuVwuLH2j6Tk.roa (hash: eFYC5loUXzRtmrgy7poaf0InOUtNFCrHQGg1kdVt86Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:40:38:da:72:87:fe:63:99:c1:49:60:03:67:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Validity
Not Before: Jun 8 16:01:10 2025 GMT
Not After : Jun 9 16:01:10 2025 GMT
Subject: CN=148f13fd826393f4a45170cde0f0f5808fdb2f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:83:bc:9b:09:a2:e1:77:4a:75:6a:0a:41:
51:f6:ce:9b:ed:6f:bf:2b:61:42:7d:05:eb:cb:c3:
d8:92:f8:64:2b:b8:bd:c6:11:6a:6f:a3:97:37:46:
11:f7:79:9d:f6:0a:39:a5:1f:f4:21:31:6d:4d:7d:
d8:28:90:c7:25:1c:d3:eb:cd:15:fc:9c:5c:7c:98:
98:05:d2:f6:00:51:35:df:6b:bc:db:e7:88:4c:c2:
b4:8c:e1:93:e4:2e:3f:56:ee:36:9d:07:1b:52:13:
3c:7c:3a:7e:a3:0d:38:26:bb:fa:85:0c:c7:31:93:
53:1f:30:5b:bd:c6:4b:d8:bf:3f:d7:1d:c0:79:df:
17:3b:0d:62:d7:78:7a:38:15:24:75:5b:58:ae:e5:
17:3f:e9:35:c8:48:87:a6:38:a5:41:4e:1b:84:ff:
31:84:4a:38:3c:31:5d:85:c2:d6:42:c4:83:6e:82:
c3:48:ce:09:dc:ca:3b:b1:bf:2d:d1:d4:6f:74:cd:
28:e7:44:62:73:05:83:77:c9:36:6e:5f:57:8d:78:
ec:39:03:16:f7:ce:ca:eb:47:29:b8:35:04:e8:e4:
a4:76:bc:b6:4a:70:fb:32:1d:73:aa:51:32:64:52:
42:74:17:41:60:7a:17:a0:fb:2d:44:dd:9d:d1:61:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8F:13:FD:82:63:93:F4:A4:51:70:CD:E0:F0:F5:80:8F:DB:2F:74
X509v3 Authority Key Identifier:
keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3d:1c:ed:34:e8:d9:41:7e:aa:77:1e:42:99:a4:9e:ea:c5:
82:03:1a:a9:d5:ff:ed:e7:44:be:fc:9a:01:ec:97:6f:c8:e7:
8e:85:14:d1:01:6e:2d:08:29:64:e9:c3:aa:92:8b:a1:3d:75:
20:72:e8:ab:d4:19:10:0a:db:b7:1f:ad:f6:44:62:17:e5:34:
6c:39:80:bc:95:5b:ce:1a:8b:de:a8:2e:87:83:61:3a:58:df:
10:53:e7:9d:6d:7b:66:99:43:73:18:8d:1a:fa:e3:b3:1b:48:
77:d2:ba:f3:e2:3c:df:1a:b8:8a:f2:87:29:51:bc:2c:7f:03:
f4:45:eb:e6:28:51:8c:19:11:df:64:1a:31:10:5d:45:b2:c5:
f0:0f:35:e1:e7:66:76:dc:73:64:5f:6e:99:50:45:d1:91:3f:
a8:43:1b:da:e8:2f:5c:be:c4:76:01:bd:d0:42:4e:e7:4a:c5:
eb:54:9a:f1:8f:0c:c8:fc:11:e0:dd:56:ed:fd:99:96:92:39:
cb:56:0d:c2:07:ce:41:ef:3d:32:03:13:06:2a:a2:4f:73:ef:
50:de:4c:5a:f0:2e:d4:a0:e5:6c:53:dc:dc:c8:21:19:f5:bd:
3e:7f:f2:7c:e4:4d:00:c1:01:0a:37:b6:72:80:f6:19:34:f2:
b7:5b:c2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:51:17 2025 by rpki-client