Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
File: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft (raw, json)
Hash identifier: nRBKWmNxTSFSX9BW7jJdiIZM3aEtWFGiPjFgS9RZzzw=
Subject key identifier: 54:40:A0:1A:6F:47:F1:97:B6:3A:95:AB:FA:AA:88:78:BC:C4:96:41
Authority key identifier: FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
Certificate issuer: /CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Certificate serial: 0197B77C5F1C60D9CA93EC6FDE90B42B8899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
Manifest number: 02CA
Signing time: Sat 28 Jun 2025 17:01:10 +0000
Manifest this update: Sat 28 Jun 2025 17:01:10 +0000
Manifest next update: Sun 29 Jun 2025 17:01:10 +0000
Files and hashes: 1: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl (hash: rmZbjYj6ISZ5gI9GHt8UjNeIQPMDAD5A4sRWTwI0QVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5f:1c:60:d9:ca:93:ec:6f:de:90:b4:2b:88:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Validity
Not Before: Jun 28 17:01:10 2025 GMT
Not After : Jun 29 17:01:10 2025 GMT
Subject: CN=5440a01a6f47f197b63a95abfaaa8878bcc49641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:63:15:2d:fe:a0:7c:c4:21:48:e0:6a:d8:
0d:b1:5f:6f:12:49:af:c9:8b:22:64:e2:a1:dc:ce:
d1:40:dd:71:1f:7d:f3:9b:c0:2e:82:e3:2a:2d:07:
30:44:66:9f:09:d0:ac:1c:2e:55:4c:bb:1e:96:c8:
5f:2f:58:5b:f6:06:fa:6a:f6:8b:5f:e3:94:ca:01:
9a:e9:3b:f0:95:76:6e:64:40:6b:b5:40:69:b9:0b:
50:03:82:c9:cd:01:4a:0f:fc:81:75:29:99:a2:56:
d1:e4:fc:41:71:5a:d8:43:a3:52:ad:8b:5b:74:23:
16:b0:b3:92:70:d6:37:8d:a9:cd:66:a9:1c:ad:6a:
9f:9c:f0:83:4d:dc:1f:da:39:15:9d:79:a9:76:f9:
b8:ea:25:35:ad:f2:f8:4f:08:53:01:13:c2:31:d9:
d5:f8:0d:65:35:b6:1c:86:02:c9:60:74:d1:83:ed:
19:11:80:3c:ea:f8:3b:ac:27:88:20:a2:58:d4:82:
7b:9f:c5:4e:83:66:a7:9d:d7:65:64:61:29:cd:c8:
28:f5:69:77:ae:03:34:ab:8a:e0:ac:cb:1a:22:a5:
c5:03:a3:2d:26:3d:a4:a9:80:68:9c:14:a1:cf:e2:
ce:4c:75:ea:34:6a:ba:b3:7b:5f:f6:7b:56:74:6c:
cd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:40:A0:1A:6F:47:F1:97:B6:3A:95:AB:FA:AA:88:78:BC:C4:96:41
X509v3 Authority Key Identifier:
keyid:FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:59:b2:dc:b4:42:c1:dc:5a:63:f8:70:c2:ec:69:b2:73:36:
19:fb:9b:99:90:b4:db:68:0f:a1:a8:24:3c:1b:69:95:a4:fb:
2a:6c:7e:84:d1:b7:ef:26:c0:3d:83:20:c6:b0:08:da:70:4d:
44:ae:2f:b6:95:a2:76:91:53:41:09:f5:4c:52:e5:d4:a8:91:
98:bb:8a:68:d5:59:93:b4:93:86:6a:53:d2:72:1f:58:0d:54:
2b:31:21:21:e1:d1:1a:98:63:bf:b1:62:98:ed:65:d6:07:6b:
05:db:89:64:99:3f:81:60:db:b9:e6:5f:71:66:22:61:15:81:
ae:e2:8c:f4:3e:db:f6:7f:00:35:6b:64:b6:7a:83:8d:01:66:
74:d5:03:61:8f:ad:45:d9:c5:e8:59:32:9d:5e:65:8f:2f:42:
60:2f:38:ef:6d:ee:e7:f7:6d:e9:1c:49:b1:82:04:18:b0:32:
ce:e1:81:77:ad:1a:3b:84:73:b6:cc:d0:9f:5e:c4:5e:3e:f4:
ff:64:f7:3f:af:03:09:f8:0c:5c:d7:d7:9c:f1:47:71:e1:27:
e1:f6:8c:33:5b:e3:ad:19:40:c2:95:17:2f:ce:c9:20:d4:4f:
61:8f:7b:56:a9:d4:f1:5d:57:2d:be:ea:b5:27:cb:80:b3:51:
91:e5:00:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:09:46 2025 by rpki-client