Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
File: 1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft (raw, json)
Hash identifier: dzcBn7YiRIW1OPxH/jjVDgeCPtRGrzr6CLRJcrxIDGA=
Subject key identifier: 41:6E:C4:5A:1A:D0:D2:24:95:C6:41:8C:43:DD:CB:EA:CB:3A:78:49
Authority key identifier: F8:A6:1C:2D:49:73:89:70:00:E5:6A:CB:3C:84:3F:20:34:AA:56:A0
Certificate issuer: /CN=f8a61c2d4973897000e56acb3c843f2034aa56a0
Certificate serial: 0197B6A0A125055FBCB0E237AD6378FC54DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
Manifest number: 03AE
Signing time: Sat 28 Jun 2025 13:01:09 +0000
Manifest this update: Sat 28 Jun 2025 13:01:09 +0000
Manifest next update: Sun 29 Jun 2025 13:01:09 +0000
Files and hashes: 1: 1-KYcLUlziXAA5WrLPIQ_IDSqVqA.crl (hash: vQmhLIvbHaM4jHZtzeZU7QidVHbbHr2ZbMU6dyBgVjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a1:25:05:5f:bc:b0:e2:37:ad:63:78:fc:54:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a61c2d4973897000e56acb3c843f2034aa56a0
Validity
Not Before: Jun 28 13:01:09 2025 GMT
Not After : Jun 29 13:01:09 2025 GMT
Subject: CN=416ec45a1ad0d22495c6418c43ddcbeacb3a7849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:6e:93:e6:4f:0c:e0:fd:3a:26:ef:06:c3:
1f:79:3c:6a:43:1e:bc:89:07:f2:bd:f3:af:4e:9a:
ec:53:c6:4c:d5:28:49:79:f6:ac:60:43:a5:e9:70:
f1:18:af:ec:b6:bb:c4:eb:a7:fc:01:9b:82:c3:99:
8b:36:94:90:32:46:d8:d9:46:a1:34:99:c0:ec:c0:
a6:6b:6e:d1:9c:19:0a:52:47:8e:06:cd:ab:26:e4:
29:d4:41:8b:32:ac:6a:74:06:b5:00:84:79:33:b7:
c7:30:04:0a:8c:a5:b6:d6:93:6f:17:0b:17:9b:d8:
73:82:34:7f:87:cf:8b:7d:dd:82:14:4c:a5:37:9e:
3e:72:ab:05:10:d4:b0:e9:66:d2:a7:81:dc:25:47:
c6:ad:a3:0a:06:56:38:d7:d2:1c:fa:58:23:ca:ff:
25:d4:83:84:b3:14:11:8e:70:36:46:da:22:0e:60:
59:2e:66:77:ba:f7:49:ec:33:38:51:e0:0f:b2:0c:
f4:c0:20:93:f6:f3:39:3b:eb:ca:89:de:d4:e3:17:
93:31:93:37:00:3d:8f:b4:2e:c2:0b:66:23:a6:3e:
d5:da:62:b7:7d:9a:56:77:8b:21:74:36:cf:83:59:
ad:59:c8:fa:97:bc:b2:90:7c:63:1c:43:4e:32:fc:
f7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6E:C4:5A:1A:D0:D2:24:95:C6:41:8C:43:DD:CB:EA:CB:3A:78:49
X509v3 Authority Key Identifier:
keyid:F8:A6:1C:2D:49:73:89:70:00:E5:6A:CB:3C:84:3F:20:34:AA:56:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c3:85:87:31:e2:19:0a:8c:4d:04:c4:63:a6:b0:2f:bd:12:
82:46:55:da:e4:66:c6:2c:38:e3:9e:35:58:96:ad:47:3d:f6:
28:f9:46:e1:05:98:86:79:fd:15:8e:cb:a8:68:23:91:ff:b7:
13:5b:4d:9f:4d:d3:b3:b6:3a:63:93:46:01:0c:31:52:5a:d2:
08:68:a7:71:c4:0e:22:15:71:83:12:20:6e:c0:2f:b5:c3:0e:
e0:36:ca:06:e2:a7:f0:fe:f4:63:b6:a8:be:57:ce:a0:6c:21:
d6:24:e4:d4:43:c5:2f:e5:35:12:4d:c5:6d:38:20:0a:d9:66:
0f:2f:96:59:74:7e:6c:e5:55:5f:c5:4d:1a:45:2c:ff:bf:0f:
92:a8:21:2f:6e:07:93:b7:34:e8:4d:4e:14:dd:bc:28:b6:e5:
ab:24:aa:46:68:0d:73:9d:77:68:a4:54:19:ec:99:be:8e:7b:
d4:ad:8c:85:e7:a3:d2:49:5b:c7:66:90:bc:4f:71:54:fb:a2:
00:aa:e8:31:ac:09:40:bd:c0:0b:9b:03:72:48:f6:95:8d:8f:
9e:af:fa:6f:91:b9:24:9c:2d:06:a2:e7:ad:ae:4a:06:85:65:
82:95:cf:e2:23:88:01:51:dd:d5:e8:a3:a8:65:e4:1d:c9:00:
4b:f8:b0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:23 2025 by rpki-client