Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier: hisVicnQYM9TJ/9+bGyyofdb4TzbGpjz3LvZj/nhuUM=
Subject key identifier: 9F:01:52:38:2B:8E:9C:75:75:44:21:17:1C:09:D5:AD:39:17:8D:1E
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer: /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial: 0197B77C75257FC274E87BEE7E038BD6166E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 17:01:16 +0000
Manifest this update: Sat 28 Jun 2025 17:01:16 +0000
Manifest next update: Sun 29 Jun 2025 17:01:16 +0000
Files and hashes: 1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: 9iPyloyb7tgXgpNKRsW/SEypH7Un7HofVoOLmZ7fjJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:75:25:7f:c2:74:e8:7b:ee:7e:03:8b:d6:16:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Validity
Not Before: Jun 28 17:01:16 2025 GMT
Not After : Jun 29 17:01:16 2025 GMT
Subject: CN=9f0152382b8e9c75754421171c09d5ad39178d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:cb:b2:0c:2d:6c:f6:bf:a3:a2:10:04:04:
6a:ec:d7:c9:97:c7:24:8e:6f:36:ac:59:3c:ef:4b:
36:c3:80:95:0e:8a:28:9d:de:53:13:cb:38:39:7e:
fc:47:42:e6:23:0c:6e:e6:f3:82:57:43:21:65:a8:
fe:36:39:a4:d5:ec:fe:dc:e6:e2:b4:dc:de:e5:ea:
1b:b2:25:a2:e4:ac:9f:d0:86:bc:20:77:e3:96:27:
b8:ef:0b:0a:1c:24:04:99:08:28:ba:8f:c2:ea:67:
2f:ac:55:9e:6a:5d:05:bb:48:16:ec:20:44:78:91:
52:79:27:84:6b:52:a3:8f:35:4e:1d:05:82:40:3e:
7a:fe:63:be:94:f0:35:0d:90:c1:0f:44:5d:7a:2f:
b7:e4:51:cd:b5:18:f8:8a:0b:c1:ad:ea:4a:fa:b0:
d1:79:90:83:a9:97:f3:f7:28:52:9d:ab:c6:6d:75:
c6:c2:b4:98:cd:b6:f3:d8:42:ee:20:d6:fd:b7:9c:
04:b0:48:25:8a:fd:4b:d2:82:5f:72:91:8e:94:9f:
6e:e9:63:60:98:35:73:4e:e9:4a:86:8d:c8:e4:39:
52:c9:7d:18:5d:52:66:86:3c:68:8f:69:83:94:14:
c5:f2:e9:d4:73:c2:1e:63:37:bc:bb:5a:cd:ba:d6:
45:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:01:52:38:2B:8E:9C:75:75:44:21:17:1C:09:D5:AD:39:17:8D:1E
X509v3 Authority Key Identifier:
keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:43:a9:ed:5a:18:98:40:e4:85:39:54:a3:6f:c3:5e:b3:29:
5b:2d:38:78:b4:91:6c:d8:b3:79:d7:c6:d7:5f:d2:bf:e0:a1:
b0:8a:67:57:60:24:25:e4:b6:b5:69:75:20:33:da:4a:cd:8f:
2a:ec:b2:47:2d:3a:e3:f6:17:13:34:04:76:6d:98:5f:fe:d8:
aa:f4:a7:f4:2e:1f:3b:ee:34:c6:47:bf:23:14:00:78:9f:e8:
a1:d0:1c:a4:f2:39:3d:09:af:d4:66:9c:62:df:ba:e9:0b:fe:
a3:6f:64:b0:4d:ad:d8:07:53:3b:f2:7f:a0:24:33:9a:4b:71:
23:5e:f3:1c:f3:c2:6c:b1:7b:31:ad:42:b0:3d:3f:c6:4e:be:
c8:53:71:cf:e5:6b:16:f5:d3:ac:04:eb:90:e6:6d:54:9c:17:
5e:dc:78:d8:c6:2c:0b:8a:68:f6:06:2f:76:f0:79:0e:f5:c9:
56:56:c7:2a:2d:66:c6:33:90:10:b3:e1:49:9b:fa:f8:92:e4:
10:e0:b6:9b:2f:92:da:a9:85:42:3f:8f:d9:52:67:c9:6b:40:
94:56:e6:6c:ab:94:23:ee:e3:fe:78:5e:a2:3b:e4:38:ab:fa:
3d:2a:e2:66:fe:4e:6b:a5:2c:38:4e:6c:e9:2a:ad:67:10:f6:
77:ec:dd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:22 2025 by rpki-client