Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
File: 1-2fE4ThzE8A0RTje_SzPoDTnwww.mft (raw, json)
Hash identifier: m4Z7PPSbFiLOUQ9tuJ0HNhN7IIG4GEp13llRdcIV8a8=
Subject key identifier: 8A:5E:D7:AE:BE:FD:6C:06:F1:70:82:7F:A4:3F:56:F0:C3:CA:FB:12
Authority key identifier: FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C
Certificate issuer: /CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
Certificate serial: 0197B6A1D46A3D69CD16B69E8DB2FE820B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
Manifest number: 0B78
Signing time: Sat 28 Jun 2025 13:02:28 +0000
Manifest this update: Sat 28 Jun 2025 13:02:28 +0000
Manifest next update: Sun 29 Jun 2025 13:02:28 +0000
Files and hashes: 1: 1-2fE4ThzE8A0RTje_SzPoDTnwww.crl (hash: hC3YWgGMIMIuEH6kGYbE7fp58y4u5XxIIso+vkCrCWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:d4:6a:3d:69:cd:16:b6:9e:8d:b2:fe:82:0b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
Validity
Not Before: Jun 28 13:02:28 2025 GMT
Not After : Jun 29 13:02:28 2025 GMT
Subject: CN=8a5ed7aebefd6c06f170827fa43f56f0c3cafb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7b:77:4a:38:6e:41:23:60:24:58:f2:50:3e:
d0:44:41:9d:b3:6d:7d:2f:55:eb:38:3f:3f:9f:63:
ae:58:57:97:0a:24:5f:d5:e6:42:24:f4:4d:19:e8:
73:0e:a9:e0:7b:30:49:ac:ff:23:2c:05:8c:87:fc:
e8:7f:79:b8:e1:a7:01:f9:17:9e:77:b3:9f:2d:05:
55:1b:8e:e6:84:b5:4e:6f:54:79:5c:8c:ab:82:66:
55:1c:c7:a9:b0:bd:b2:ec:bb:e8:83:dc:54:58:70:
5e:2e:03:5f:db:79:97:28:f7:41:c4:ab:2a:8e:69:
22:8f:b7:b3:59:a3:c7:29:f7:9d:04:8b:86:20:b7:
f2:82:68:a4:72:29:9a:58:2a:4d:9b:1e:69:38:64:
c8:33:42:6e:b9:40:40:ca:ce:b0:15:e0:07:81:0d:
3f:bf:7d:06:7e:c0:59:02:12:7b:92:4a:49:20:2d:
8b:0d:15:68:1c:2e:c1:ba:27:0e:2d:ec:49:5f:77:
4d:6e:4f:54:38:9d:d6:4d:d0:b3:96:75:70:fb:bb:
73:72:53:a4:00:a4:9a:ff:88:a4:e6:6a:17:57:52:
21:5c:3d:ef:21:aa:56:74:b0:43:a4:d0:4c:5b:e0:
bf:6c:ec:e2:12:83:e2:9f:d2:92:2a:df:38:0f:0d:
19:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5E:D7:AE:BE:FD:6C:06:F1:70:82:7F:A4:3F:56:F0:C3:CA:FB:12
X509v3 Authority Key Identifier:
keyid:FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ae:91:d7:f5:a9:de:72:d4:ff:58:16:ae:eb:93:e0:2d:f4:
d0:0b:54:87:fb:ad:d5:68:b4:80:6d:30:c2:46:c6:d6:a9:2d:
c7:4d:04:21:31:f3:1e:c8:c2:f9:b0:df:07:b4:69:99:18:86:
05:e6:05:b7:98:78:8c:64:cd:ee:4c:f5:06:cf:45:f5:a4:b3:
2f:a3:08:9c:78:9d:69:b9:ae:e6:c4:37:d0:0c:c8:6e:0c:28:
61:63:ea:cb:b4:a7:a3:a4:06:c9:73:53:fd:62:74:85:1f:78:
01:e3:e3:7d:78:64:5e:03:b3:52:d4:4c:da:e6:b0:07:d0:82:
bc:3f:ec:b2:ba:4c:70:20:28:b0:7a:83:09:55:dc:d5:f9:ca:
9f:10:f1:f3:74:0a:16:89:c2:00:b6:8e:ba:ae:8c:b4:cb:d3:
cb:a5:9c:a1:5b:24:c8:89:49:75:72:7a:73:dc:f7:4b:82:b6:
c9:b7:d6:0b:3a:66:06:90:5b:03:4f:04:42:5a:f7:d2:86:1b:
81:73:25:bd:98:10:f2:4f:bc:1a:ce:6b:4f:c1:3b:48:b6:88:
d9:1a:d5:7c:9f:4f:7f:4d:1b:86:05:30:a4:0d:80:cd:ad:ee:
36:ed:b4:f5:2d:29:0d:78:c7:c0:99:5d:44:d4:13:7b:ee:df:
3c:0d:4e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:22 2025 by rpki-client