Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
File: H83UEOElAi3gfKWWP5L3jo-JSG4.mft (raw, json)
Hash identifier: DATUaVwlGamlU+3kEoMD7cfY3TUuYVB+XIl52AvF9iE=
Subject key identifier: 00:FB:CC:E5:DB:58:7C:87:FA:0A:EF:E9:C9:27:90:F6:CF:13:3C:13
Authority key identifier: 1F:CD:D4:10:E1:25:02:2D:E0:7C:A5:96:3F:92:F7:8E:8F:89:48:6E
Certificate issuer: /CN=1fcdd410e125022de07ca5963f92f78e8f89486e
Certificate serial: 0197B70EB050AF10219EA10741360EB022DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 15:01:22 +0000
Manifest this update: Sat 28 Jun 2025 15:01:22 +0000
Manifest next update: Sun 29 Jun 2025 15:01:22 +0000
Files and hashes: 1: H83UEOElAi3gfKWWP5L3jo-JSG4.crl (hash: DtCQQyPChqt3GdSojbw8fta5s3wQ08joUNlUa1qJ+8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b0:50:af:10:21:9e:a1:07:41:36:0e:b0:22:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fcdd410e125022de07ca5963f92f78e8f89486e
Validity
Not Before: Jun 28 15:01:22 2025 GMT
Not After : Jun 29 15:01:22 2025 GMT
Subject: CN=00fbcce5db587c87fa0aefe9c92790f6cf133c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:2b:6a:ae:30:35:9f:46:e6:ed:19:c7:d1:
7e:5c:56:33:44:73:d7:cc:56:d0:71:22:2e:3e:79:
9b:7a:e1:5b:4a:fd:25:9e:2c:ce:f7:4c:dd:4c:d6:
d1:a9:f0:b5:2d:d2:bc:b0:99:48:4f:64:e7:c3:78:
1f:ad:73:d9:fc:8c:49:87:c8:73:3c:23:83:00:da:
c7:09:b4:1d:7e:24:5f:b6:7b:12:73:25:7a:0f:f3:
a5:a3:84:01:cd:d4:4e:26:3e:1a:8f:ce:59:1a:11:
32:74:5b:6a:68:2a:fd:80:e9:d0:c4:54:4a:ec:4a:
73:30:69:f0:74:54:54:67:9f:03:3b:20:1a:a9:f5:
13:d9:f8:97:90:45:3b:d8:c2:b3:54:8a:51:cf:34:
7a:c5:44:3e:19:d1:2f:a3:f0:45:38:2b:75:18:ba:
80:86:20:d1:b5:38:86:8e:9b:f9:31:e0:cc:bd:b0:
47:02:c4:04:08:4b:3f:ad:90:45:7c:2a:90:73:c6:
bd:ab:1c:f3:bb:79:43:0f:5c:e3:e6:ed:b9:80:72:
ce:9b:0f:28:69:2a:58:36:b9:fb:f4:26:a5:11:a3:
fb:71:18:be:4d:ab:27:2c:05:58:eb:04:f6:7a:17:
a7:99:65:f8:e6:01:5a:39:35:78:a2:86:10:64:a7:
14:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FB:CC:E5:DB:58:7C:87:FA:0A:EF:E9:C9:27:90:F6:CF:13:3C:13
X509v3 Authority Key Identifier:
keyid:1F:CD:D4:10:E1:25:02:2D:E0:7C:A5:96:3F:92:F7:8E:8F:89:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:99:b9:d5:a7:9f:9f:d8:bb:2f:e2:e7:06:17:65:73:fe:e9:
51:86:d0:2f:3d:01:09:b7:52:96:ad:ef:85:4a:87:92:23:c9:
43:e4:6c:cc:ed:cb:d5:89:ee:cf:46:86:4c:20:fe:28:86:ca:
2b:d7:2f:f9:09:1c:24:a9:f3:2c:96:c5:a8:01:95:2d:84:01:
ac:56:86:19:92:31:8f:29:60:8a:d9:c6:54:c1:cf:13:e5:d1:
47:7e:fd:07:07:26:f6:5a:46:4d:99:83:fa:3f:47:92:30:c9:
32:fb:d9:67:fe:9d:6a:2b:c2:bb:5d:ca:cd:ed:d1:9a:8d:fb:
dc:51:d4:d1:7c:c2:30:a8:b1:7e:62:83:45:95:11:4c:be:6a:
33:7d:96:fe:1c:91:a8:33:8e:f6:62:91:78:78:db:dd:88:e8:
66:e7:a3:5b:75:96:4f:fd:d5:dd:a6:60:f1:51:42:6a:0d:12:
ca:c9:3d:0c:a3:83:8c:eb:95:d3:7d:cb:1b:5f:0c:70:72:67:
f6:2d:e1:40:f8:cc:1b:84:ce:1d:9e:93:57:37:f8:0e:1a:1b:
bd:d4:98:63:2f:8c:ca:80:f7:18:58:87:f3:d3:d4:c0:8c:a1:
fb:5c:32:e5:72:a2:07:e5:a9:87:90:e8:d3:42:66:52:e9:fe:
8c:2b:68:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:11 2025 by rpki-client