Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
File: 1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json)
Hash identifier: 33C0AJ35t6ckf672e+G3lSdWXy4+HjbxSOcyMmFX2aA=
Subject key identifier: FB:43:7D:02:05:8F:E8:2D:C9:EE:10:16:31:CB:31:E4:43:B7:8E:9C
Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
Certificate issuer: /CN=fbbe52d834e268dc698830292fde4b63c7da392e
Certificate serial: 0197B6A24D653765E9FC4E1C132C25C9CEF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
Manifest number: 0B36
Signing time: Sat 28 Jun 2025 13:02:59 +0000
Manifest this update: Sat 28 Jun 2025 13:02:59 +0000
Manifest next update: Sun 29 Jun 2025 13:02:59 +0000
Files and hashes: 1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: ZnV7eNvuk1yZBCOenVOskv5upVlM2R2SuQPMMwCVYkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:4d:65:37:65:e9:fc:4e:1c:13:2c:25:c9:ce:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e
Validity
Not Before: Jun 28 13:02:59 2025 GMT
Not After : Jun 29 13:02:59 2025 GMT
Subject: CN=fb437d02058fe82dc9ee101631cb31e443b78e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:33:d6:b8:71:75:aa:59:2a:c3:16:6a:a3:
27:c7:f6:9a:8f:70:0d:2d:f7:25:a0:c8:f4:4b:85:
a5:a3:11:e3:66:65:c1:f9:52:3b:b0:41:b1:11:2d:
eb:4b:40:c3:c3:cf:64:9d:bb:ef:c4:d2:b6:da:52:
0d:49:21:e9:73:c8:49:ba:c8:e5:ff:2e:2e:7a:45:
ae:12:8f:ac:cc:bb:45:74:ff:8f:78:7e:0f:3d:4e:
57:66:09:c0:e8:b4:67:bc:db:e1:6b:85:66:e1:ef:
d1:ed:d1:f6:16:0e:94:0a:08:50:b4:83:52:10:53:
f3:fe:59:fa:45:a4:bc:6a:47:41:2a:2e:74:08:7f:
32:b4:98:d6:07:78:d6:5d:2b:59:f1:42:c1:db:c9:
f6:51:a4:9b:ee:bb:90:a0:6a:bf:c0:77:37:8e:b7:
95:b8:d2:71:4b:ad:c0:c6:73:c4:47:57:62:87:8a:
7e:68:bb:86:2f:3d:00:29:43:c4:56:23:66:ec:30:
e0:57:0f:6b:f4:4c:60:b1:1e:ed:de:da:45:02:4e:
d3:96:68:97:8c:0e:b6:8d:a9:60:14:31:bd:ec:fb:
7f:72:58:4a:7c:ba:ae:13:fc:de:40:ae:00:70:8d:
e2:fc:74:90:18:b3:fb:50:d6:fd:3b:ff:0b:2a:d2:
35:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:43:7D:02:05:8F:E8:2D:C9:EE:10:16:31:CB:31:E4:43:B7:8E:9C
X509v3 Authority Key Identifier:
keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:e1:33:56:2d:18:91:6c:7e:e0:7c:0d:98:b5:1b:82:a9:27:
a9:5c:a7:7d:14:11:06:9a:9f:51:fe:41:5b:5d:0a:db:cc:d1:
9d:fa:50:f2:e8:60:d3:8c:3b:da:1c:50:a1:0e:5b:76:21:06:
53:23:fe:9f:8b:bf:33:11:f4:c3:7b:3e:fd:eb:64:93:3e:11:
bd:4f:05:35:59:00:f5:ef:27:9d:57:ae:69:df:f2:83:fa:4c:
95:f3:a5:5d:61:a7:58:eb:18:39:7d:89:1e:03:5d:cd:e0:bd:
b4:8e:7b:e3:22:8a:d6:d6:18:87:8a:73:0e:c2:37:66:87:c0:
be:dd:a0:66:ac:dd:9d:84:75:ca:14:9f:79:f9:62:ed:7b:9c:
5a:de:b4:16:c0:aa:43:24:d7:4f:22:79:e7:3d:e6:80:fc:17:
3f:03:71:95:a6:e3:3f:a9:73:23:e7:7d:b1:f7:ed:2e:e4:46:
88:49:1d:0a:9e:65:a1:28:58:60:ce:59:de:40:b3:be:a4:88:
9c:53:87:12:19:82:0c:06:a9:36:48:73:9d:41:23:74:3b:a8:
9c:2e:e4:91:ed:2b:6b:db:79:f9:a9:e7:91:84:76:4f:56:86:
5e:f7:b7:2b:ae:e8:53:a8:3a:49:83:f3:f8:fc:19:ca:47:3c:
ab:1f:ad:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:11 2025 by rpki-client