Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
File: 1nXJVO45yR5SX2izBxygV41qW64.mft (raw, json)
Hash identifier: TyoBDFua2P596uu+CqhX83xdjkwSr0fcmy0j3uZCR+A=
Subject key identifier: BB:65:29:25:5A:6A:AF:05:46:EA:24:ED:73:55:18:F1:21:B1:DF:7F
Authority key identifier: D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
Certificate issuer: /CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Certificate serial: 0197B8907C07AD71BC0ABC7EAF0BB480E1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 22:02:46 +0000
Manifest this update: Sat 28 Jun 2025 22:02:46 +0000
Manifest next update: Sun 29 Jun 2025 22:02:46 +0000
Files and hashes: 1: 1nXJVO45yR5SX2izBxygV41qW64.crl (hash: txBwX0Do6rjfBdT2drg9AibojhZPHtIciMMvSz5oVeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:7c:07:ad:71:bc:0a:bc:7e:af:0b:b4:80:e1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Validity
Not Before: Jun 28 22:02:46 2025 GMT
Not After : Jun 29 22:02:46 2025 GMT
Subject: CN=bb6529255a6aaf0546ea24ed735518f121b1df7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:da:f9:46:be:4a:cc:d2:a5:33:08:f9:81:
ed:8f:e1:fc:c0:02:86:a9:20:48:0c:3c:3d:db:73:
cc:ff:f0:1f:83:08:12:0c:c3:89:8e:cf:5e:8e:0f:
77:41:20:23:ce:ea:30:54:8f:d7:41:39:34:bd:d3:
bc:5a:39:8d:67:76:ec:5e:79:15:f2:47:ca:d4:12:
8a:b6:eb:4b:ac:2c:29:9b:e3:42:70:b1:be:88:ca:
12:f7:59:12:87:d1:60:38:17:1d:6b:19:f8:18:2a:
2d:ea:d6:e6:66:ef:e6:df:59:e7:ba:7a:81:f3:a4:
9f:6c:ef:98:3e:5c:cb:c3:99:3a:81:3c:8e:f9:d1:
6c:ad:02:66:c8:e7:f6:c7:ba:5a:f0:9b:5e:45:5f:
5a:b9:3c:31:e6:ed:26:bb:59:db:ab:58:2e:38:d2:
2b:c2:4c:ed:e3:92:6d:dd:a9:09:01:dd:5e:98:ab:
fc:13:9f:d8:5c:c1:db:cd:90:05:f5:64:d5:ee:af:
ec:d7:7e:ac:92:ae:54:8d:c0:8f:93:b1:14:69:46:
a9:9a:51:1f:a9:04:86:3d:f0:32:00:a7:32:77:28:
fb:de:fc:9a:7e:93:66:76:50:7f:30:4d:55:06:b2:
b8:86:87:3a:86:48:ee:90:8f:5b:49:8b:6e:e6:3c:
55:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:65:29:25:5A:6A:AF:05:46:EA:24:ED:73:55:18:F1:21:B1:DF:7F
X509v3 Authority Key Identifier:
keyid:D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:54:56:88:a8:44:46:7d:a7:b0:d9:59:a2:29:2a:db:6f:84:
07:5f:8e:46:63:be:be:8d:17:38:23:15:51:40:a5:d5:7a:4f:
15:8c:0f:2f:6d:94:c0:b6:c5:27:c2:c3:bb:11:f4:11:d2:58:
c7:0b:1f:b6:9c:1a:94:d5:58:4c:a2:51:22:e9:0c:2a:fc:6b:
bf:49:f3:1d:e3:b6:06:37:80:d9:a0:93:58:5c:6a:24:09:43:
4c:af:b7:cc:93:e9:54:3d:ad:80:a8:ba:22:07:0f:6d:92:4c:
42:a8:33:77:11:a5:76:20:04:19:fd:ba:e5:2d:48:63:cd:9b:
b8:73:45:64:c3:23:9c:c1:6f:4a:e0:c7:9a:9c:bb:ce:8a:c0:
b7:93:f7:04:5a:3a:41:f0:42:3f:b5:f2:6e:e6:15:4d:08:f6:
de:fc:12:46:7f:42:bc:da:de:d3:7d:ff:b5:0f:dd:75:68:d5:
f1:24:61:d6:6c:cf:d0:32:9d:c9:d8:ea:70:78:01:27:c5:24:
6d:43:4d:8a:48:f7:17:21:19:2d:ac:12:da:29:e9:eb:6f:13:
25:9c:c7:f0:2d:1c:81:37:58:a7:41:81:57:59:1c:09:03:be:
27:b0:77:c6:79:98:f5:2f:f1:67:af:82:c7:14:0f:4e:12:95:
31:01:3a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:55:35 2025 by rpki-client