Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: rGUTbwDOeL1O04KkxhW3cxjHFE7er1oFaarKJj4PD20=
Subject key identifier: E1:BD:08:0C:15:DC:E6:01:A7:08:E5:AD:73:F0:84:50:9E:D1:3E:B9
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 0197B58DB95623F510A6692B2D8062511970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 07C7
Signing time: Sat 28 Jun 2025 08:00:53 +0000
Manifest this update: Sat 28 Jun 2025 08:00:53 +0000
Manifest next update: Sun 29 Jun 2025 08:00:53 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: HTkBWtee+8so4AgvYkpy281YU6Jbk9GSyXetcpT4VtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:8d:b9:56:23:f5:10:a6:69:2b:2d:80:62:51:19:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: Jun 28 08:00:53 2025 GMT
Not After : Jun 29 08:00:53 2025 GMT
Subject: CN=e1bd080c15dce601a708e5ad73f084509ed13eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7f:0e:da:f2:9a:3e:ce:83:a5:d1:2b:e1:0d:
a8:bf:cf:3a:a7:d1:1a:59:c9:75:1a:52:5b:30:05:
ac:50:59:66:6e:da:5d:23:b2:75:d5:86:6d:86:42:
d8:4f:e6:f4:bd:0a:ba:d3:a6:f4:b4:93:17:12:7c:
24:5b:32:59:cb:50:cd:bb:26:ae:d7:f5:5b:36:1d:
7e:02:ff:9a:42:fa:54:ae:f8:d9:0f:d4:41:d5:9c:
4e:da:ec:df:6a:30:5a:44:7a:71:d0:96:43:f9:25:
c6:30:c4:97:3b:83:0e:9e:3e:62:af:8c:03:e4:59:
94:71:7e:a1:9c:01:3d:74:b0:81:16:86:9d:d4:60:
99:d1:f0:b6:b1:79:a1:99:60:2e:30:e9:07:d4:ea:
12:13:75:af:05:e7:04:3d:60:a8:91:01:d7:05:b4:
d3:af:36:dd:7e:f8:c0:3b:c4:30:7b:18:b3:11:c3:
c0:e1:76:44:48:e1:f7:95:69:cb:c8:2a:1b:94:f5:
fa:3b:5f:af:da:6b:35:6e:74:46:0f:82:2a:80:d8:
e4:40:32:b9:f9:14:a1:e7:e2:4e:96:9f:d3:39:bd:
3a:a8:29:f3:c2:6a:8d:94:24:95:af:e4:55:75:50:
f3:1e:3b:4c:c3:97:fb:cf:4b:a6:ed:1b:af:ee:ae:
e8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BD:08:0C:15:DC:E6:01:A7:08:E5:AD:73:F0:84:50:9E:D1:3E:B9
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3b:b7:10:ee:c5:2b:e1:81:1e:32:b3:ee:90:b6:54:8b:8c:
55:dd:41:15:a9:08:ad:92:c7:1d:38:74:13:e2:48:75:cc:cb:
13:52:fd:e3:26:21:b5:70:79:f9:b3:b6:2e:d5:4c:b3:33:32:
8d:62:45:20:62:a7:c0:e6:f5:bf:6a:af:cb:54:25:4c:48:24:
3b:a3:31:98:62:10:2e:0d:ae:17:0b:16:28:14:dd:8f:04:0d:
b3:2e:01:4c:1b:b9:94:26:8d:61:26:94:e6:05:84:f9:d6:53:
1a:90:fc:0c:3c:41:99:fb:73:9b:fc:5c:d3:c1:d1:81:70:a1:
1e:6e:14:8b:a3:8a:19:eb:29:16:ea:11:b5:23:a6:ea:cb:01:
ea:b0:4f:1d:0e:f1:b3:a7:7c:cf:ec:1d:8b:e0:93:a3:c8:26:
ee:f2:45:5b:ac:89:db:21:a5:8e:ab:e9:f7:3f:58:9d:bf:21:
5b:1a:e4:81:fd:ef:42:6c:2d:06:9e:b6:89:22:a1:11:6b:2f:
57:0e:6b:6c:0e:17:30:c6:1f:5f:e1:51:78:d9:ec:b5:74:6e:
ad:35:7f:72:51:8f:cf:47:5e:c3:10:8a:c6:4e:3c:3b:e3:8a:
ed:27:6f:76:bb:66:f9:0d:78:68:4e:18:57:dc:d9:0b:4a:55:
e7:d9:1c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:57:19 2025 by rpki-client