Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
File: 1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft (raw, json)
Hash identifier: VK9HlcAd0Txt0febb3HSggH41uPQFZctq2n0TXqCrWU=
Subject key identifier: DF:1D:B1:5D:83:8B:5A:89:0B:BC:76:34:C1:8B:21:C7:77:C3:FA:D2
Authority key identifier: F9:A0:3D:24:50:DC:E5:87:D5:37:55:A9:F6:B4:A4:65:6A:28:0B:4B
Certificate issuer: /CN=f9a03d2450dce587d53755a9f6b4a4656a280b4b
Certificate serial: 01974AE84558BF11DB1A735FB54FECDFE214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 15:00:25 +0000
Manifest this update: Sat 07 Jun 2025 15:00:25 +0000
Manifest next update: Sun 08 Jun 2025 15:00:25 +0000
Files and hashes: 1: 1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl (hash: s10nymHWSw213vq1Mc9KMpGJztm1jwsSy1j4BDPbCwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:45:58:bf:11:db:1a:73:5f:b5:4f:ec:df:e2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a03d2450dce587d53755a9f6b4a4656a280b4b
Validity
Not Before: Jun 7 15:00:25 2025 GMT
Not After : Jun 8 15:00:25 2025 GMT
Subject: CN=df1db15d838b5a890bbc7634c18b21c777c3fad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:f6:18:75:01:cb:b9:cb:84:ba:7e:d1:00:
c2:45:58:b3:97:31:98:f4:09:5a:0e:aa:66:4a:a9:
10:d5:dc:a6:0a:12:ed:c9:cd:12:6f:a9:e4:66:49:
84:78:cb:e9:79:b8:29:05:4f:a4:c6:50:b2:34:3f:
c3:ee:b1:67:6e:45:70:4a:6c:98:5f:d2:03:26:b5:
ff:51:5e:a3:7e:fc:05:a3:38:51:5d:30:86:7c:50:
8a:39:26:56:4a:67:0c:ca:87:c8:b1:d3:80:58:7a:
ee:d4:02:16:d4:ff:c8:10:3b:7f:4a:2f:43:b1:ec:
2c:8a:17:f3:d6:62:9f:16:9b:f4:c5:ff:9e:87:ae:
a7:be:69:f9:f6:4e:53:f9:46:03:d4:21:d1:d0:2c:
7a:d4:32:34:ff:be:be:97:44:96:00:e8:bf:75:5e:
e4:c5:5e:bb:95:08:98:e2:3f:3f:80:2d:2a:48:eb:
50:46:de:c0:b3:dc:6f:0e:d4:9e:80:ff:72:fc:c5:
cd:d3:09:9c:4b:1e:9e:8a:47:56:04:69:15:64:5a:
a8:fd:d9:d3:27:74:8a:b5:4b:d6:db:7a:90:e4:2e:
f4:5d:85:20:e7:84:ea:9f:37:8d:8a:73:44:41:98:
12:33:d1:5d:eb:0d:0c:64:19:40:6a:a7:f8:fd:f4:
53:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1D:B1:5D:83:8B:5A:89:0B:BC:76:34:C1:8B:21:C7:77:C3:FA:D2
X509v3 Authority Key Identifier:
keyid:F9:A0:3D:24:50:DC:E5:87:D5:37:55:A9:F6:B4:A4:65:6A:28:0B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:87:d5:c8:90:35:a7:24:48:b9:e5:d3:f1:22:69:f7:34:cf:
7f:32:d4:9f:df:4f:ed:0c:16:a9:aa:a2:88:a8:74:07:44:11:
32:9b:dc:fa:dd:fd:42:3d:be:25:18:6a:fd:91:b9:44:f2:c1:
97:76:38:dc:ea:53:ea:d1:92:c1:e1:87:3f:e8:e3:c2:cb:67:
19:4c:cd:a2:44:a6:75:b1:73:eb:f4:17:d2:38:c6:f9:43:5d:
69:ff:f3:56:96:4c:c8:4e:ea:72:a9:57:55:51:f7:b9:96:fd:
16:f8:1c:a0:b6:58:26:81:61:6e:de:b7:97:f3:87:21:3d:e0:
ec:82:19:43:eb:1d:bd:6b:67:a7:bb:ab:2c:88:76:8e:1b:e0:
94:1a:c4:7d:91:69:38:94:76:d8:3f:c2:31:80:f4:3c:90:65:
a9:0a:20:7b:74:55:3e:8b:1a:10:06:58:3a:a8:b4:d8:45:d9:
00:ae:76:cd:f0:dd:5e:ec:0d:1b:90:95:bf:1c:11:6c:8e:8a:
b0:79:f6:ed:91:f5:74:52:a3:e9:61:ee:7f:7c:68:f4:42:c8:
a8:c3:00:14:c5:ba:ea:1b:8b:97:38:b9:e1:b9:41:ee:55:ff:
35:d1:c7:71:97:44:4c:9d:17:ac:28:26:79:6d:86:21:f4:7f:
d3:2a:bc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:20:59 2025 by rpki-client