Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
File: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft (raw, json)
Hash identifier: MuXeXjWEvhQK8PNsvZYauim99PBmT3JuGLPARD66gKM=
Subject key identifier: F2:E9:7B:EE:FA:E3:51:B0:57:CA:4A:CD:0E:E2:4D:C9:1C:40:47:78
Authority key identifier: 32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
Certificate issuer: /CN=322d6d4be163123242185dd451f14777974f7c62
Certificate serial: 0197B6A17500DBA245A821A046D5B0DEB7C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
Manifest number: 05F3
Signing time: Sat 28 Jun 2025 13:02:03 +0000
Manifest this update: Sat 28 Jun 2025 13:02:03 +0000
Manifest next update: Sun 29 Jun 2025 13:02:03 +0000
Files and hashes: 1: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl (hash: hfqM39AiTfIpArV4Y4Oy1TOEB7gaxMvRupAIdhtHl2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:75:00:db:a2:45:a8:21:a0:46:d5:b0:de:b7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d6d4be163123242185dd451f14777974f7c62
Validity
Not Before: Jun 28 13:02:03 2025 GMT
Not After : Jun 29 13:02:03 2025 GMT
Subject: CN=f2e97beefae351b057ca4acd0ee24dc91c404778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:16:45:63:c9:18:a7:b8:1f:da:82:f8:da:
65:60:0d:50:d5:83:a7:8f:e7:fd:9d:3e:73:fd:03:
96:e8:ff:b1:07:c3:77:26:d5:21:0b:2c:ae:7a:da:
da:19:1a:e8:33:f6:c5:78:76:60:a2:cb:7b:9e:b2:
11:f5:c1:2c:9c:81:ae:78:82:50:77:ed:7c:42:2d:
1d:32:19:1a:b7:81:21:bc:b8:a1:45:29:15:3f:25:
1e:84:73:8b:f4:e7:d1:72:e6:9d:e6:7b:5c:8a:27:
9b:99:48:44:71:ba:37:82:af:67:44:da:04:0f:72:
ff:ea:ac:3e:7b:5c:dc:56:89:d5:5e:bd:3f:58:66:
8b:4d:27:04:66:c8:a0:65:b4:3d:76:0b:3c:86:9a:
50:80:41:3c:01:55:d1:e2:67:f3:2b:76:fb:04:ab:
af:f4:28:bf:3f:0c:c8:72:0b:13:82:d8:45:6b:eb:
86:a3:18:0c:d8:88:77:76:7a:dd:27:b6:22:d6:05:
68:b6:93:4a:78:bd:3e:a8:6b:d9:be:dc:7c:6c:db:
79:46:68:b7:80:15:e5:cf:b4:07:ef:d1:a0:5a:d3:
84:fc:34:ca:0d:2f:b3:37:38:78:14:6d:4a:e6:bf:
fa:9d:8c:29:c3:ac:6f:74:56:6c:ff:f1:0e:51:9a:
76:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E9:7B:EE:FA:E3:51:B0:57:CA:4A:CD:0E:E2:4D:C9:1C:40:47:78
X509v3 Authority Key Identifier:
keyid:32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:90:39:dd:25:87:9b:8c:ec:19:27:82:70:92:a0:10:74:be:
1f:56:db:d0:28:d1:c1:74:f9:ac:6d:2d:6e:a2:e8:4f:6c:53:
52:0b:41:43:b6:8f:5c:e6:8f:5b:98:5a:93:04:ca:23:61:e5:
fe:73:8b:94:c1:19:47:90:11:64:b7:ce:7c:e8:0f:fc:00:c3:
40:34:08:11:17:49:c5:a0:d9:58:d4:bf:bb:b4:c4:4c:b1:b8:
1b:40:e0:ee:2b:1d:f3:82:de:46:6c:91:a9:c8:5c:fd:8b:94:
01:be:4f:10:3e:1b:32:b5:a4:e9:a8:00:8e:89:3c:c7:e3:ec:
cc:66:13:ae:d5:14:79:19:5f:6a:71:3c:f3:91:8e:e8:26:4e:
08:fa:9b:c3:fe:0f:06:94:50:5d:af:78:0f:cf:3c:4c:92:8c:
a0:c0:40:af:68:59:7a:6f:a2:fa:99:39:0d:c9:e9:2a:91:ce:
3e:44:90:68:4c:07:7a:44:0e:07:c5:0b:98:69:0d:12:03:91:
82:8b:09:09:8d:a3:c1:f7:51:ac:26:a2:c6:7d:d9:a3:33:95:
c5:f3:bc:7b:76:09:47:50:cd:e1:cd:34:02:dc:56:d5:3c:c0:
a0:30:7c:e6:3f:6d:bd:77:2d:01:dd:b8:c8:0a:3f:92:fd:e0:
81:37:d1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:09 2025 by rpki-client