Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
File: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft (raw, json)
Hash identifier: AnpmwtEC4O0ZvQJAXUuVgEQflowECfgCB5456Gf9ZKg=
Subject key identifier: 5F:6C:46:FB:88:4B:44:F0:14:42:EB:85:92:2D:25:98:85:CE:EA:23
Authority key identifier: FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
Certificate issuer: /CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Certificate serial: 019748F9D2E8EA3072FDFD4B94025671744E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
Manifest number: 1578
Signing time: Sat 07 Jun 2025 06:00:21 +0000
Manifest this update: Sat 07 Jun 2025 06:00:21 +0000
Manifest next update: Sun 08 Jun 2025 06:00:21 +0000
Files and hashes: 1: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl (hash: bHvkKNhuu4yeRhG9SEA8a7iSTE7X6d/8eUQuBSrdDNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:d2:e8:ea:30:72:fd:fd:4b:94:02:56:71:74:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Validity
Not Before: Jun 7 06:00:21 2025 GMT
Not After : Jun 8 06:00:21 2025 GMT
Subject: CN=5f6c46fb884b44f01442eb85922d259885ceea23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:93:6d:28:a4:6b:6c:24:4d:af:6a:05:3a:0a:
cf:03:c3:4e:72:a8:b5:c6:f9:a2:4a:83:5e:d5:88:
74:ef:b0:cd:19:21:7f:be:40:9b:f2:04:7a:3f:c2:
54:e4:54:c6:81:8d:d4:bf:1b:71:33:7d:ef:d8:93:
6e:8f:37:07:de:a7:d9:2f:9a:97:c6:1e:97:d2:f7:
5f:0b:4c:51:0a:fc:95:ad:85:2e:e9:9a:65:4b:a2:
2a:4a:3e:0a:4f:d9:61:0e:4c:cc:91:0d:3b:6d:1a:
b3:15:62:48:5c:86:55:67:b4:ac:15:50:82:a9:99:
03:9d:02:41:14:2e:86:b2:23:ed:cd:02:fd:73:e2:
4c:2a:65:82:ab:aa:c1:1b:aa:7d:f9:c7:92:71:48:
dd:5a:de:b7:57:f6:92:29:6f:7f:ff:bd:a8:d4:e5:
49:38:a0:66:7d:6c:01:f6:13:22:e7:18:63:07:71:
17:87:37:b5:39:aa:3e:e4:52:38:88:b0:5d:4c:a3:
17:02:04:05:8e:4a:ce:65:69:dd:27:64:34:e8:65:
c3:21:9e:dc:4d:34:71:c5:98:62:e4:d2:7b:cf:06:
60:ef:8c:5d:be:18:7e:09:27:01:cb:b2:63:c2:c1:
d4:72:04:71:c0:31:c9:74:a0:76:17:b6:ce:eb:0c:
d4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6C:46:FB:88:4B:44:F0:14:42:EB:85:92:2D:25:98:85:CE:EA:23
X509v3 Authority Key Identifier:
keyid:FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:44:8b:a5:1b:2b:85:20:1f:62:aa:92:7d:77:77:22:a3:34:
a2:23:2a:a2:b0:94:31:29:03:20:94:0d:b8:47:ae:6a:40:c2:
8d:50:bf:8c:4b:d1:81:6f:cd:b1:a8:4a:9b:8a:41:d4:55:ad:
3c:36:22:3f:a4:e3:6f:38:fa:63:3a:0c:11:83:9c:14:79:23:
d5:e6:8f:dc:b5:66:74:1d:df:e9:0c:ec:cd:8c:bc:f7:f1:ff:
1b:d8:9b:bd:69:bf:57:e8:86:c5:c2:5e:ca:8c:27:29:b5:0b:
22:bd:c8:82:88:ff:1b:07:98:b5:7b:bd:1f:e7:9d:a1:04:7d:
b7:54:e6:14:25:cb:79:57:31:a7:ff:db:96:e5:cf:41:ea:cf:
8f:12:89:a7:fd:d2:92:6a:d4:1e:a0:00:74:8e:9f:b2:84:36:
3e:c1:1c:40:fe:88:9f:31:c8:87:86:d8:70:db:25:75:94:b5:
bd:de:d8:a4:40:1f:9c:0a:81:d4:8a:94:cf:6a:ae:4d:97:c0:
d7:88:1a:1d:50:01:d8:2e:00:e6:fc:e0:1e:97:39:7c:48:a8:
94:ef:74:37:2f:b0:51:ea:0e:eb:04:a2:7a:2d:06:de:e8:31:
06:12:25:1b:4d:5d:59:8d:dd:3f:44:1c:6a:ea:84:4d:37:9f:
e7:e7:ad:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:09:24 2025 by rpki-client