Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
File: 1e-BdSPHDnJw0q7lorbXJWojQiM.mft (raw, json)
Hash identifier: cQVUbw8UbagxWIPxoiPG+vs5On4KgRL9lZbltxLs9xo=
Subject key identifier: 84:55:9A:08:F0:A6:72:8D:74:C2:88:54:A8:44:D3:14:14:D3:C9:1A
Authority key identifier: D5:EF:81:75:23:C7:0E:72:70:D2:AE:E5:A2:B6:D7:25:6A:23:42:23
Certificate issuer: /CN=d5ef817523c70e7270d2aee5a2b6d7256a234223
Certificate serial: 0197B890555349110850933F8AA011E73DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
Manifest number: 0227
Signing time: Sat 28 Jun 2025 22:02:36 +0000
Manifest this update: Sat 28 Jun 2025 22:02:36 +0000
Manifest next update: Sun 29 Jun 2025 22:02:36 +0000
Files and hashes: 1: 1e-BdSPHDnJw0q7lorbXJWojQiM.crl (hash: PojGWknuK4mC8sxt5KP21YjfGoUAry3EhQo0LUMb6xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:55:53:49:11:08:50:93:3f:8a:a0:11:e7:3d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ef817523c70e7270d2aee5a2b6d7256a234223
Validity
Not Before: Jun 28 22:02:36 2025 GMT
Not After : Jun 29 22:02:36 2025 GMT
Subject: CN=84559a08f0a6728d74c28854a844d31414d3c91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:30:f0:b6:56:bf:92:4e:74:ea:4f:2b:74:
e9:86:0a:78:bd:3f:88:31:1e:e7:1c:28:38:5c:89:
9f:75:4f:48:db:c3:e5:23:17:2b:d4:40:be:ed:7f:
d7:e7:01:ca:47:14:1f:e0:36:d8:46:05:f9:52:44:
bc:6a:48:9b:e4:a9:33:d2:e6:d6:c2:35:a3:17:d7:
54:c6:64:76:85:2c:8d:ff:19:1a:dd:95:3a:2e:8b:
b5:fa:5c:02:21:16:93:d3:d4:8b:95:cf:38:f7:fe:
6d:98:fc:c2:44:f4:c1:7c:80:72:71:ef:b6:f7:ed:
03:ca:2f:0e:e8:e6:9b:0f:2d:e7:05:81:8c:29:55:
35:af:14:cb:01:ba:00:cd:2b:4b:33:9a:83:ce:71:
4d:c9:c5:55:86:13:86:81:0a:b3:fa:da:90:a2:41:
2f:c9:cd:40:8a:0f:78:c2:24:49:f8:66:10:2c:a9:
6f:7f:af:e1:f7:0a:f1:4f:32:bf:49:0e:d3:68:ac:
99:50:b9:db:fd:4e:9b:6e:28:7f:10:91:0f:a6:fa:
a5:e4:4a:b1:c5:c3:e1:68:d2:20:91:38:ad:3c:0e:
5a:f3:f8:70:6e:53:46:f5:2e:8e:9d:b7:79:e3:7d:
a9:4b:59:99:e4:e1:20:7d:8e:5e:62:8b:ef:65:f0:
4d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:55:9A:08:F0:A6:72:8D:74:C2:88:54:A8:44:D3:14:14:D3:C9:1A
X509v3 Authority Key Identifier:
keyid:D5:EF:81:75:23:C7:0E:72:70:D2:AE:E5:A2:B6:D7:25:6A:23:42:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e0:25:57:e6:a0:7d:8f:27:fc:ec:eb:f4:bf:0b:1d:77:fa:
9c:38:c5:82:d7:51:42:76:cf:e9:fc:13:d6:34:da:68:24:91:
f7:47:19:1c:21:3a:c6:02:ce:9b:20:c0:7c:ec:8b:b6:f0:d2:
0b:d5:54:ce:9b:03:9e:95:93:ea:d7:12:90:3e:ac:32:98:06:
ab:76:0a:56:df:26:dc:e2:12:c8:42:90:36:7f:89:a2:45:b4:
23:b9:e8:d6:70:5d:d9:12:57:01:55:00:87:00:d4:f5:83:b1:
a3:8e:ea:c6:7b:e9:2e:e8:4b:c9:56:4f:6c:73:a1:ad:de:d8:
bc:32:e1:8d:da:2e:83:af:1f:4a:71:7e:8c:4f:25:18:78:76:
fa:4e:19:55:90:ad:b9:24:06:22:12:a6:97:73:85:60:83:19:
20:03:cc:95:60:af:dd:b2:a3:8a:b0:1f:cb:b2:9d:6d:34:d4:
34:07:d8:6f:db:7a:b1:1e:65:73:15:37:70:10:32:37:e4:a1:
06:19:88:4f:4e:0f:35:4f:57:f3:bb:0b:52:10:3a:9e:a6:6a:
fd:89:34:9e:a9:25:7f:de:60:b0:f0:02:3f:84:0f:e4:4f:9e:
f1:d6:c8:b4:ed:69:c3:a5:86:a9:df:23:e8:bd:32:5e:55:13:
44:d2:6d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:18:54 2025 by rpki-client