Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
File: 1-9F4zWAolpi3zZXd17FpF0kLRAc.mft (raw, json)
Hash identifier: 8Z/F28KVJFxNGYKTltSmleY/nlzzMnfyAjyUtyAAZJs=
Subject key identifier: 83:D8:5E:C5:38:EB:32:A6:24:FC:F4:EB:AB:2C:AC:AD:0F:10:0F:5B
Authority key identifier: FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
Certificate issuer: /CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Certificate serial: 0197B6A1B235C609E7ECC11421E1E6860BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
Manifest number: 0A83
Signing time: Sat 28 Jun 2025 13:02:19 +0000
Manifest this update: Sat 28 Jun 2025 13:02:19 +0000
Manifest next update: Sun 29 Jun 2025 13:02:19 +0000
Files and hashes: 1: 1-9F4zWAolpi3zZXd17FpF0kLRAc.crl (hash: hQnjSajIDILufrXzm19KWQ/8I2/X7KkuR4hb28IIp8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b2:35:c6:09:e7:ec:c1:14:21:e1:e6:86:0b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Validity
Not Before: Jun 28 13:02:19 2025 GMT
Not After : Jun 29 13:02:19 2025 GMT
Subject: CN=83d85ec538eb32a624fcf4ebab2cacad0f100f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6b:9d:96:8a:4d:42:03:da:d3:78:0f:75:4e:
d0:91:9b:71:41:85:77:64:1a:77:d1:c6:7d:86:05:
20:58:f1:41:5d:ed:fa:06:8f:a0:29:01:7a:77:b2:
f3:07:4b:5d:d9:85:5a:60:d2:3b:8f:40:c3:db:e5:
b6:6f:de:03:6a:f5:4d:b1:8f:79:4b:cf:ab:d2:2f:
80:1b:91:82:2d:05:74:b0:93:ce:2d:c9:82:36:25:
96:bc:2b:8c:26:b4:2d:ce:39:d2:04:c1:5b:82:90:
e1:e5:c2:ed:14:78:6c:f3:56:a4:23:bc:8a:96:09:
91:32:7a:a3:83:c9:ea:e0:b0:c4:43:ff:48:49:77:
6d:53:e2:69:a8:ba:b1:72:b8:96:a1:82:bf:77:4e:
1a:41:23:cc:db:26:08:95:ac:a7:57:9d:53:0f:d6:
86:46:94:16:3e:91:0a:b9:bd:9f:20:2b:d6:30:67:
c7:42:b3:0d:e8:47:cf:16:3c:6a:56:ad:2a:00:c3:
e0:53:8b:10:90:37:46:51:b4:cc:6e:f4:48:9e:a8:
e3:4b:08:0f:9d:6b:e2:76:c7:46:07:75:33:92:95:
10:00:fe:ca:f0:71:87:61:86:bc:3d:27:99:ee:32:
5d:c4:14:c7:48:d3:3a:aa:fd:09:5f:c2:04:ff:aa:
4f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D8:5E:C5:38:EB:32:A6:24:FC:F4:EB:AB:2C:AC:AD:0F:10:0F:5B
X509v3 Authority Key Identifier:
keyid:FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a9:e2:c7:24:5b:5f:ab:83:9c:b0:58:e9:70:2c:da:5b:0d:
c5:ca:8e:7f:cc:60:6f:ef:a4:03:8a:70:e1:98:ae:47:ec:bf:
11:0d:ff:3d:6e:1e:4b:38:9b:27:91:af:0f:c1:5e:66:63:a1:
62:33:ee:84:68:ff:f8:47:24:e2:5a:c2:87:52:aa:f4:d5:94:
4d:e5:52:1f:2d:d5:2f:14:d4:7b:c4:ad:73:be:6a:7c:df:f7:
31:cd:d6:c7:54:45:df:24:8e:a8:a8:e8:3a:05:9e:c2:7c:a6:
51:e2:c6:c1:04:9b:38:9d:4d:7e:19:6a:80:b0:89:66:87:2b:
75:6c:ad:96:bd:98:78:6a:4f:09:f6:e3:b1:fe:ff:43:54:8d:
7a:67:23:c3:d5:a1:dc:7a:82:26:e6:57:fb:ef:8b:18:55:ec:
79:6c:92:2d:b1:0f:a0:eb:df:54:ee:4a:24:27:a1:a2:b7:23:
6c:04:1f:73:98:72:c5:8e:f0:3e:2d:46:45:fa:27:89:95:ac:
38:4d:fe:90:15:db:75:53:e9:65:7e:8a:2b:05:c4:13:64:c2:
d1:c1:33:56:b4:10:bd:3d:99:3f:87:27:74:0a:1d:b7:7b:28:
93:4c:4d:44:4d:58:21:35:6f:7d:71:84:6b:37:fb:36:5c:e4:
74:25:0b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:03 2025 by rpki-client