Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
File: 1bFX6mgu908PHvZ_oekWDRfNLpM.mft (raw, json)
Hash identifier: G9Eq7B3tUyecY76PWYwOnVXNU/jG2KWTZTgTeJyUYmQ=
Subject key identifier: 1D:76:96:31:B5:A7:5E:19:94:AB:D8:3B:87:E8:06:70:C0:0A:BC:8A
Authority key identifier: D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
Certificate issuer: /CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Certificate serial: 0197B6A1ED9E5E517052A406AAB55A4799BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:02:34 +0000
Manifest this update: Sat 28 Jun 2025 13:02:34 +0000
Manifest next update: Sun 29 Jun 2025 13:02:34 +0000
Files and hashes: 1: 1bFX6mgu908PHvZ_oekWDRfNLpM.crl (hash: yuPOIAl8wj9QYluxd8IGQPiJUJ49490p3QJx42Tbq7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ed:9e:5e:51:70:52:a4:06:aa:b5:5a:47:99:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Validity
Not Before: Jun 28 13:02:34 2025 GMT
Not After : Jun 29 13:02:34 2025 GMT
Subject: CN=1d769631b5a75e1994abd83b87e80670c00abc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:cc:37:86:af:0f:5e:74:0f:e3:20:88:4d:
8b:9c:3d:80:2c:dd:14:80:e4:af:d8:3a:35:bf:ed:
e9:52:1c:40:e2:68:54:e5:6b:e6:fb:e2:01:07:9f:
93:61:78:99:b1:cd:2e:30:02:34:4e:81:97:89:27:
eb:fe:c8:9a:c2:98:9e:10:0d:79:27:31:aa:75:d4:
ca:9e:30:c5:cc:89:30:37:10:44:d4:fb:a9:f7:f2:
90:f6:b0:68:62:93:dd:28:5f:8d:2d:bb:47:63:aa:
5c:cc:c5:02:07:f9:93:0b:74:ad:c3:6e:4e:c6:08:
d2:84:29:2e:28:79:fd:b5:83:f0:e0:f4:44:08:c0:
38:27:04:50:dc:88:97:b2:78:27:f2:9b:bd:43:63:
01:a7:7d:04:5f:f8:df:40:11:c0:97:6d:82:d4:00:
d0:62:54:52:e2:89:d0:67:f9:b8:79:ef:6c:68:ed:
e2:ae:d6:29:57:3a:0e:43:82:75:23:63:75:e5:d8:
a3:3a:db:8a:16:c1:80:66:8d:b8:f5:74:fa:1c:d7:
0c:f2:70:f0:c7:4f:91:2c:cb:27:ed:dd:a9:55:57:
fb:51:96:92:fa:95:12:90:80:80:c2:77:be:2a:35:
66:26:9a:5c:60:5b:28:10:45:f2:b4:3f:d7:09:5c:
0c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:76:96:31:B5:A7:5E:19:94:AB:D8:3B:87:E8:06:70:C0:0A:BC:8A
X509v3 Authority Key Identifier:
keyid:D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b0:98:43:2a:9a:42:ed:6e:71:9b:a6:ba:1a:68:7b:d1:8b:
5e:6d:84:3d:30:00:0e:34:99:ec:b5:9c:70:2a:3c:27:a3:9d:
de:54:63:0e:bf:a8:72:a6:88:67:75:02:5b:bd:19:20:14:eb:
fd:1f:f8:6f:a4:7e:43:f2:02:2e:5d:c0:c4:c3:c1:4d:19:f8:
80:25:cc:af:37:0f:15:5b:43:15:7f:c2:fd:c7:e1:38:92:1f:
49:f5:03:73:99:bc:44:51:4b:b0:8e:cb:11:8b:21:c2:82:73:
09:e9:03:75:6b:ed:40:95:99:29:26:89:c5:59:1a:fb:1c:1e:
b3:16:f2:d9:78:cc:9e:b1:4e:2b:1e:a2:b6:f9:71:96:28:c1:
9f:f3:42:10:1b:51:ac:15:59:2a:1d:a5:79:e1:db:7b:88:d8:
20:ba:e3:64:f7:9d:d7:bb:ed:c8:11:85:e6:35:a4:f8:c6:8b:
39:8e:b6:67:f1:86:a7:aa:c5:25:13:54:2c:7a:02:89:05:40:
37:91:f8:b5:45:8b:5d:58:95:3c:0e:ae:90:0b:8b:1a:1b:73:
a5:e9:05:2d:10:a7:9f:b6:08:b8:2b:23:92:c0:e8:f4:7b:e1:
4f:20:f2:9d:b8:89:a0:5f:28:74:0d:e7:a7:c5:e4:43:d5:b2:
74:70:90:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:57 2025 by rpki-client