Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
File: 1-2fE4ThzE8A0RTje_SzPoDTnwww.mft (raw, json)
Hash identifier: QxYMuG5jYVAe+yybKYqiC+ZvtHr2SxXY7goGHM8ye2g=
Subject key identifier: 8B:33:A9:5F:B5:11:43:BE:27:E2:DD:95:20:A0:11:A3:77:93:9E:57
Authority key identifier: FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C
Certificate issuer: /CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
Certificate serial: 0198D65F2A5B6DD4DEDF04E6CCA72656A0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
Manifest number: 0C0D
Signing time: Sat 23 Aug 2025 10:00:17 +0000
Manifest this update: Sat 23 Aug 2025 10:00:17 +0000
Manifest next update: Sun 24 Aug 2025 10:00:17 +0000
Files and hashes: 1: 1-2fE4ThzE8A0RTje_SzPoDTnwww.crl (hash: XTLVaTuaW3Ns1kJZxSgRNcU/i4Vq6t4L8nIauifrX50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:2a:5b:6d:d4:de:df:04:e6:cc:a7:26:56:a0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
Validity
Not Before: Aug 23 10:00:17 2025 GMT
Not After : Aug 24 10:00:17 2025 GMT
Subject: CN=8b33a95fb51143be27e2dd9520a011a377939e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:72:f3:3b:35:37:0f:d4:30:81:6b:14:64:
69:04:4d:ec:bd:bf:5c:34:83:c2:88:0a:d4:c6:af:
a7:ac:10:90:d9:8e:42:d6:5e:60:33:ba:90:81:72:
70:84:82:88:9f:31:ff:aa:af:97:f7:2f:1b:12:97:
c0:7a:a8:eb:55:27:c9:af:38:7e:58:cc:b7:6b:2d:
7d:ab:2b:40:02:ea:7e:05:d4:36:d8:48:f8:55:a0:
3d:92:6b:88:54:f1:d6:d5:39:0d:82:2c:e1:8e:22:
af:40:b6:53:18:d5:06:97:cd:4e:1c:79:fd:7e:66:
d8:c2:01:17:66:b9:e8:bf:02:ac:e4:1f:4b:df:d2:
72:29:87:27:f3:63:2c:c7:7c:52:70:59:35:6a:54:
3f:ed:cf:72:b7:a7:e2:07:fc:21:f4:76:6c:6a:1f:
d1:1d:a9:29:5e:24:6a:8e:a0:29:51:f3:12:a1:6b:
40:3e:5b:bd:5f:bb:45:1e:0d:b9:63:8b:17:fc:68:
90:53:8f:e2:73:a9:5a:54:9c:4d:61:ce:b3:c6:33:
5d:9f:ac:f7:cc:83:8d:a6:16:03:31:40:a2:6e:59:
95:d2:b0:b7:1a:cf:ad:2d:95:db:ba:e5:05:33:fd:
13:1d:07:dc:32:33:0e:5b:bb:02:da:33:8e:20:1f:
3e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:33:A9:5F:B5:11:43:BE:27:E2:DD:95:20:A0:11:A3:77:93:9E:57
X509v3 Authority Key Identifier:
keyid:FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:92:87:66:c2:d6:52:35:1f:f3:87:32:1f:2f:5d:63:b7:a0:
c0:07:68:03:24:d9:06:6d:64:10:36:20:57:3a:6d:0c:83:e5:
5e:5f:9e:f0:b8:a7:39:08:b9:94:9c:5a:f6:03:62:51:0e:cb:
9d:50:98:d0:f2:ae:a5:c8:df:4d:60:88:a1:cf:6e:4d:2f:02:
2f:47:ce:7d:94:cc:11:08:6e:c0:59:50:bb:24:a8:f2:85:75:
97:99:94:70:1c:73:65:ae:4b:08:63:0e:11:8c:9c:b9:d0:3b:
95:3b:9e:18:5f:09:80:d5:95:de:3a:5a:1b:ea:ca:dc:bd:4a:
72:6a:a3:77:dd:71:42:24:e3:a2:0c:ea:a8:80:2d:63:41:d3:
04:61:53:ad:c4:04:f7:80:07:0f:66:8f:98:9a:6a:07:9d:4f:
a2:ef:7c:16:4d:d2:a5:c2:4e:b0:ae:2e:9d:fa:20:b1:6c:3d:
f4:38:c1:25:7d:99:1d:e3:bf:2a:4a:91:c1:d8:79:9b:27:0d:
2e:fb:19:e0:91:85:67:bf:57:65:4f:21:d5:87:60:c0:c2:01:
00:2e:f2:0e:59:3e:47:8d:8d:aa:de:27:41:16:54:14:f2:8b:
3f:1a:44:53:0b:09:7a:5e:8c:73:5a:6d:0b:57:c4:52:19:27:
cf:3d:45:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:42 2025 by rpki-client