Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: tzzIT/ypSKRrVnZsynTdR8Z7PrX3if56NrcETbKrITY=
Subject key identifier: 4B:BB:A7:D3:7A:D7:90:DE:95:A3:C3:22:ED:8D:82:34:CF:E4:11:9B
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 0197B6A1F35F7D4AFA4DB91DE17AABABE439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 0F0E
Signing time: Sat 28 Jun 2025 13:02:36 +0000
Manifest this update: Sat 28 Jun 2025 13:02:36 +0000
Manifest next update: Sun 29 Jun 2025 13:02:36 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: FEjlyMDmWgL28exGiyq/TjASVsQ+rQoWUADRTRHkOzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f3:5f:7d:4a:fa:4d:b9:1d:e1:7a:ab:ab:e4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: Jun 28 13:02:36 2025 GMT
Not After : Jun 29 13:02:36 2025 GMT
Subject: CN=4bbba7d37ad790de95a3c322ed8d8234cfe4119b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:28:bd:62:12:8c:22:8f:ad:f4:d1:d4:21:
51:7b:cf:01:6c:28:59:36:ab:7e:e3:94:b0:a7:14:
45:22:1e:8a:91:87:72:06:a9:66:e4:1e:df:e6:fd:
d9:0a:7a:02:62:34:52:19:75:cc:98:79:5c:82:3d:
78:fd:6b:89:e1:fc:28:c3:48:3f:35:3b:6e:5f:46:
22:65:e4:b9:d7:80:7c:ca:5b:5b:16:4b:82:89:74:
85:8d:37:c0:22:a5:f4:87:18:e7:4b:53:36:dc:b5:
ca:62:f8:67:18:35:d3:5d:fb:8e:7d:bb:0b:8f:85:
b2:be:67:61:3c:a0:53:ed:cc:1a:60:1a:31:bb:aa:
77:b1:38:29:75:ea:44:80:09:48:3c:dc:5d:6b:67:
91:da:47:79:18:4e:fc:4f:08:ed:c2:a8:f9:df:cd:
a5:88:08:5b:18:e1:98:a5:11:c7:3d:0d:1a:10:dd:
60:f3:f0:15:c0:a7:c5:fe:a6:e3:5b:93:96:95:57:
2b:cb:16:19:14:0d:70:74:71:07:58:9f:b8:f5:86:
06:7f:be:f0:17:11:02:95:75:dc:57:d3:c5:1a:85:
4a:c7:4a:e0:2a:e3:03:44:59:af:5f:56:a6:ff:f0:
0b:a3:29:8b:47:63:58:67:b9:73:48:27:b0:1a:5c:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BB:A7:D3:7A:D7:90:DE:95:A3:C3:22:ED:8D:82:34:CF:E4:11:9B
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:df:f9:85:05:8b:cd:f3:f9:05:14:f7:0f:88:e3:ec:cb:89:
bf:0e:b6:c6:d5:49:51:b0:c1:2d:77:e0:6d:46:17:17:6e:eb:
82:c4:b0:94:32:e7:01:56:47:0d:14:3e:64:25:b2:03:91:76:
6d:31:bf:8d:4e:b0:80:9f:b5:8b:58:b8:f6:b6:2c:de:20:f0:
70:d4:92:a3:76:f9:f6:ef:43:74:78:b6:58:e3:39:69:e3:02:
22:e6:9d:67:96:b7:35:f2:3e:1f:24:6c:99:9e:3e:0b:b1:5f:
2b:61:6a:53:bd:02:b3:9c:02:19:e8:b4:81:72:65:5e:c3:0d:
25:39:62:38:df:0c:51:01:45:02:bd:ff:ec:f4:6b:d9:41:a1:
8d:35:c2:f3:aa:7e:2e:cb:d4:90:df:a2:b1:d0:d6:39:7f:6e:
1b:0c:12:71:f4:3c:3a:ad:2b:42:2d:ba:15:7e:80:33:47:b7:
23:ac:2f:de:d1:d6:ce:b1:fe:be:be:06:c5:5b:38:e8:ab:cc:
47:e5:cf:63:6e:a9:97:08:d4:a7:a3:86:d7:83:65:eb:bd:25:
92:c4:3b:1a:09:f7:87:ac:e8:b6:1e:0d:87:50:1c:c7:59:cf:
ef:3f:e3:1f:f9:f6:fb:8e:ff:87:bf:70:8d:29:d3:e5:f0:09:
e9:fd:02:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:04:35 2025 by rpki-client