Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
File: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft (raw, json)
Hash identifier: dpazqwk2oY1ELSAd0D0+j0A7jojpzfGBuYzZ9dc74BU=
Subject key identifier: 81:FD:E4:64:CC:33:49:ED:07:BC:7B:1E:5E:D3:F7:43:CD:8A:D2:20
Authority key identifier: F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
Certificate issuer: /CN=f8b770160553760c3567df51a847ed6c529c0789
Certificate serial: 0197B7EA4F85B95ABAFDBC66CC3966431EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
Manifest number: 0F31
Signing time: Sat 28 Jun 2025 19:01:15 +0000
Manifest this update: Sat 28 Jun 2025 19:01:15 +0000
Manifest next update: Sun 29 Jun 2025 19:01:15 +0000
Files and hashes: 1: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl (hash: +NFrfsmihW3+9dB2AUoS/ZJByz404XTLPqMmwI1dcYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:4f:85:b9:5a:ba:fd:bc:66:cc:39:66:43:1e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b770160553760c3567df51a847ed6c529c0789
Validity
Not Before: Jun 28 19:01:15 2025 GMT
Not After : Jun 29 19:01:15 2025 GMT
Subject: CN=81fde464cc3349ed07bc7b1e5ed3f743cd8ad220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bb:c6:92:15:a4:5e:c2:6c:22:f5:96:e5:63:
0f:69:bd:26:9c:be:00:f9:21:d6:92:ea:46:5b:b8:
8e:0e:a3:39:30:d7:a9:2e:5a:2a:6a:98:81:14:79:
76:79:6e:54:96:6e:a1:23:49:f6:71:06:a2:fc:cb:
2a:63:b5:29:3e:b6:42:a2:44:cc:be:de:8f:b7:09:
a6:6e:dd:2a:ea:d9:fb:16:25:54:b7:45:eb:b5:cb:
ba:c0:ae:2e:4f:f5:7f:20:6d:cb:de:90:d1:a0:f5:
69:30:2f:3c:5e:cc:e3:32:59:95:ac:15:05:de:ce:
a3:0e:ba:37:30:f8:37:2f:34:c0:1d:95:63:a2:fc:
50:36:04:23:c3:e9:34:73:2f:b9:03:a7:85:a8:49:
cd:b2:2e:f4:53:35:e5:21:44:96:16:e1:f0:f3:5e:
f3:ed:87:28:42:0f:91:99:4d:04:0b:57:73:57:7b:
5a:ba:4c:a6:ac:a1:0f:d1:23:d9:71:5b:e4:38:e5:
30:d8:bc:05:f5:75:d1:33:fe:11:93:7e:f1:d7:a8:
dc:78:4b:59:89:ba:13:ec:80:ad:1b:56:e5:bf:81:
89:0c:39:7e:48:04:5d:ec:b3:d0:e8:f5:df:a6:52:
16:f9:0f:d6:a4:61:47:87:c1:ca:a2:39:78:c1:b9:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FD:E4:64:CC:33:49:ED:07:BC:7B:1E:5E:D3:F7:43:CD:8A:D2:20
X509v3 Authority Key Identifier:
keyid:F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d8:48:3c:04:49:05:a6:4d:3d:26:3b:74:f2:04:29:22:54:
06:d6:a8:02:55:95:51:1b:52:55:de:a2:5b:4e:45:40:1e:f8:
d1:93:bb:be:c8:80:0b:91:fe:b8:5f:a7:b0:c4:c7:50:8c:9d:
3a:2d:88:72:f4:e8:72:9b:65:71:4d:51:dd:7b:8c:ca:3d:54:
12:cd:49:90:68:3a:c8:a9:42:07:58:66:af:76:48:5d:27:14:
4d:55:d7:8f:33:74:f9:78:38:ee:37:72:24:e7:86:91:11:f1:
73:0a:44:c6:d5:fc:84:3d:58:a4:ec:6c:55:2e:04:4a:ea:db:
8f:34:fc:6a:33:25:aa:98:c1:71:87:c3:e1:53:1c:55:f1:30:
5b:da:22:de:06:69:39:3c:74:ae:e1:09:49:fa:85:5d:ac:37:
52:4d:04:09:ed:0e:50:e5:89:ef:46:46:08:92:66:be:ae:91:
67:7a:a7:73:be:f7:28:a9:c3:1a:1b:18:46:67:25:10:94:84:
de:f8:f9:f8:5b:27:9d:65:3f:ef:d9:e9:8e:c3:88:8d:1c:0a:
9f:49:b9:c6:81:04:ce:0d:99:3f:3e:a6:89:e1:9b:91:91:45:
fa:c1:40:25:2c:aa:0b:bf:4c:d2:05:1c:3d:67:2a:cd:0e:c7:
12:84:f1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:32 2025 by rpki-client