Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier: ijJh3ucgvzJdFj8ClQSPVuFIQ+fjqQ5mJW1huOPMRF0=
Subject key identifier: D6:E2:B8:FB:84:D8:BE:62:6E:C5:4F:47:8D:E8:9C:5B:78:BB:E3:E7
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial: 0196BA11DBD37F84EC3F86A229BAC8F4FDF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number: 0480
Signing time: Sat 10 May 2025 12:00:54 +0000
Manifest this update: Sat 10 May 2025 12:00:54 +0000
Manifest next update: Sun 11 May 2025 12:00:54 +0000
Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: Iu8CIxtq+niXAJSZpEPQfXC5kenFVtuiY3UYfJoEXFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:db:d3:7f:84:ec:3f:86:a2:29:ba:c8:f4:fd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Validity
Not Before: May 10 12:00:54 2025 GMT
Not After : May 11 12:00:54 2025 GMT
Subject: CN=d6e2b8fb84d8be626ec54f478de89c5b78bbe3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:78:68:e4:f5:7c:86:df:75:77:54:a1:9a:63:
f6:c0:3b:8c:8c:d0:2c:cd:b4:d9:84:e3:ad:0f:22:
ce:0a:f0:d7:f0:48:ab:6f:38:f9:6d:fd:0d:38:d1:
bf:e6:81:77:05:36:ca:da:6f:0a:33:5d:b5:d1:7f:
00:2b:63:95:bc:0e:55:93:d0:7d:fe:23:d3:0c:68:
ad:91:a6:6f:5c:14:66:a5:b3:04:88:9a:8b:a9:72:
12:bd:81:3c:cd:c5:c1:47:89:cd:d4:9c:db:b0:75:
56:1b:74:a6:0b:48:7a:61:e1:f1:be:85:cf:81:9d:
3f:79:20:fc:c8:91:b6:a1:37:24:eb:51:bd:ec:c2:
e5:69:09:54:58:d4:4e:3f:8f:15:ac:1b:49:79:37:
09:18:72:45:15:ae:49:59:36:6c:64:ed:d0:01:62:
53:eb:64:f4:01:9c:d8:a0:77:52:36:1a:55:58:7b:
dc:f5:8a:54:b7:48:0d:d4:4c:64:44:94:52:bd:a2:
b7:80:3a:e0:b4:43:01:29:08:c7:98:dd:42:6f:fc:
e4:1a:7c:c3:e0:36:ba:5a:f9:07:a9:77:06:79:c3:
77:ed:55:81:c0:de:89:90:b8:b7:0c:a9:ec:e4:42:
56:17:7d:54:18:e3:1e:1e:66:38:48:f3:db:8c:e8:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E2:B8:FB:84:D8:BE:62:6E:C5:4F:47:8D:E8:9C:5B:78:BB:E3:E7
X509v3 Authority Key Identifier:
keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:86:dd:0f:7b:5e:80:ee:86:e9:d7:1a:ad:6b:49:cf:89:b3:
a1:d3:9e:c6:b3:e7:ba:5b:fb:69:3d:84:6c:35:0e:74:39:87:
5d:f0:49:b4:94:52:6a:17:f3:fe:b7:9f:9d:f2:06:88:78:63:
49:57:57:24:3d:88:8f:5e:ad:43:f6:80:f1:4c:2f:b1:89:ac:
cf:17:84:d2:0c:fc:db:5d:07:de:1d:85:98:b5:2c:4d:15:1b:
79:7e:21:d1:db:65:9b:1e:34:06:7b:3f:22:6e:12:a3:b8:7c:
a9:79:b0:7b:cb:45:be:23:03:10:96:93:03:5a:1e:57:31:38:
d6:1e:9d:25:fd:94:36:8e:09:25:f4:d1:58:d1:d9:6b:cc:3d:
fe:64:2a:c4:93:30:34:a4:1d:d7:54:f6:bd:28:08:3f:99:bf:
63:fd:f0:06:42:d3:76:00:79:20:48:a2:f0:fe:66:9f:aa:37:
49:f5:6d:97:b7:0c:4c:3a:9c:9e:f3:3d:dc:dd:3a:7e:f2:3c:
8f:f5:6a:50:bc:2a:d6:04:c9:fe:52:bd:f7:19:6a:7f:ba:5e:
15:b4:b8:c0:15:e1:4a:9f:ce:20:78:eb:6d:ed:a4:5f:b5:cb:
98:9c:08:ee:30:0e:46:7f:e0:5c:0a:61:cb:56:51:b0:45:d0:
13:6a:cd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:56:11 2025 by rpki-client