Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier: d1uEHlxSgiex9bZ452J6u44CI4YxtJ2UpFI5hYrdSqA=
Subject key identifier: 15:40:CF:02:2E:13:2F:10:D0:FA:84:98:41:E2:58:1D:FC:3C:A1:C7
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial: 0197B70F3811FDB269DCB4E6C4B700DB2522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number: 0503
Signing time: Sat 28 Jun 2025 15:01:57 +0000
Manifest this update: Sat 28 Jun 2025 15:01:57 +0000
Manifest next update: Sun 29 Jun 2025 15:01:57 +0000
Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: VUFTQ+4ecNeLnZkulI3zKqIcxKAoLqb2TWznbz040pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:38:11:fd:b2:69:dc:b4:e6:c4:b7:00:db:25:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Validity
Not Before: Jun 28 15:01:57 2025 GMT
Not After : Jun 29 15:01:57 2025 GMT
Subject: CN=1540cf022e132f10d0fa849841e2581dfc3ca1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:77:95:5d:fc:32:15:56:64:52:31:12:03:
07:08:72:49:2e:67:41:ce:c1:ec:b4:37:3d:de:96:
72:06:c4:70:8a:ed:e2:cb:8c:90:f9:af:53:53:a0:
49:19:aa:1b:94:86:1b:dc:1d:0a:c4:ba:07:67:bd:
df:e3:60:24:bd:33:e7:ea:1f:af:5e:1f:ee:ab:86:
3c:cc:30:61:d0:88:65:cf:87:4f:13:6c:51:ef:cc:
ce:1d:aa:06:d3:d7:2e:ba:29:6e:4f:58:f4:01:b0:
ff:03:22:2f:07:6e:bc:44:20:8c:43:28:2b:89:33:
2e:e7:50:ed:8f:70:59:cb:26:fc:49:df:4e:4e:c6:
a8:99:dc:a7:d2:c6:1e:d9:be:64:6a:6a:20:b3:94:
f0:1e:2d:d4:a2:a3:d1:6d:c1:36:d0:cb:6d:1c:f4:
d2:f4:75:ac:8f:b5:55:67:0e:f4:00:64:1a:e7:c7:
4f:26:b3:2c:59:ca:72:4d:b4:6a:6f:d1:dd:81:71:
35:c7:c6:d8:c6:97:cb:68:b7:f5:55:d8:8c:cc:f5:
f4:e5:8f:85:40:a9:8c:7c:03:91:71:6f:bc:06:18:
be:f6:2b:50:86:b2:99:d8:66:50:3c:21:a2:00:b8:
94:48:23:27:6f:6b:bf:d9:9d:58:ee:40:47:61:29:
33:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:40:CF:02:2E:13:2F:10:D0:FA:84:98:41:E2:58:1D:FC:3C:A1:C7
X509v3 Authority Key Identifier:
keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:dd:1d:53:c7:e8:cd:e3:4a:48:1f:5a:b6:2d:73:f5:f2:7e:
5c:4d:32:8b:03:f1:59:24:d3:2c:ba:c7:53:c5:0d:0c:a6:de:
aa:91:bd:15:c3:b2:d4:f1:f6:6d:89:e1:37:cc:9f:8d:35:64:
6a:df:88:d6:0c:46:59:74:0e:ea:fa:40:7f:53:34:32:68:96:
5b:6a:9f:52:f8:b2:bd:0f:4b:c1:62:60:b4:22:05:6c:b3:1a:
ff:bb:27:64:85:5f:e7:66:5b:b8:a9:da:95:f6:69:7e:db:52:
7b:c2:3c:61:14:e3:b4:b8:57:dc:21:36:b5:27:83:c1:c9:13:
c7:a9:8b:b9:b0:d1:15:3d:05:82:d8:1d:83:e9:a2:65:ca:4d:
a4:be:b7:20:3d:a7:fa:73:b8:33:86:42:a4:0c:10:82:93:59:
52:8a:e3:d1:5b:90:78:05:29:09:d8:a4:97:63:88:39:aa:60:
4a:7d:c6:e1:67:78:22:e5:73:9d:c4:e3:50:a2:ad:91:53:08:
b0:ff:d2:0b:ea:64:45:9f:51:b4:ad:0a:26:b3:60:d3:69:4c:
a3:70:81:46:cb:ec:d3:5a:34:ac:96:0e:d0:0c:ba:26:4a:13:
35:6e:83:dd:7c:1f:8a:c2:6b:07:59:0e:c4:a8:b8:60:cb:fd:
b6:eb:c4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:49 2025 by rpki-client