Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
File: 1-uafCinvjYwi2dbs3jowfYlNXBk.mft (raw, json)
Hash identifier: OFfANEjM4Hp+DDpIGSus/Qim/rNhjbCcu+qP6KQtfZo=
Subject key identifier: 56:55:1B:A4:46:23:65:C3:BE:8E:FF:9D:7A:02:2D:F7:0A:72:7D:FC
Authority key identifier: FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
Certificate issuer: /CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Certificate serial: 0197B5C49DCA0C986E25D9825C22962B92F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
Manifest number: 0663
Signing time: Sat 28 Jun 2025 09:00:50 +0000
Manifest this update: Sat 28 Jun 2025 09:00:50 +0000
Manifest next update: Sun 29 Jun 2025 09:00:50 +0000
Files and hashes: 1: 1-uafCinvjYwi2dbs3jowfYlNXBk.crl (hash: IpNfZK3hx/OZiL0+YRB9DTbpq4BEQQmFyuwPbnLHpK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:9d:ca:0c:98:6e:25:d9:82:5c:22:96:2b:92:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Validity
Not Before: Jun 28 09:00:50 2025 GMT
Not After : Jun 29 09:00:50 2025 GMT
Subject: CN=56551ba4462365c3be8eff9d7a022df70a727dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bf:7a:99:81:d8:06:62:7f:be:70:11:0b:cb:
66:f4:6f:db:4c:b8:fe:00:dd:5f:d8:e2:0d:5d:ff:
82:0e:b3:98:34:bd:46:fc:8d:5d:45:7f:74:64:f9:
f3:f8:41:cc:17:ed:2c:12:d9:63:9e:25:3f:d2:09:
2c:36:38:aa:b6:f6:d1:30:9c:ea:49:f9:e5:a4:aa:
a1:77:53:0d:58:a9:15:15:61:e9:e2:3f:c1:24:e8:
88:6a:80:4c:fd:39:f2:23:81:ac:47:2a:b9:e3:e9:
8e:47:ba:ff:db:2f:44:10:c2:69:90:10:e9:95:b1:
be:dd:e1:0e:f4:37:37:9d:b4:c1:da:13:4c:c4:18:
ed:2d:46:17:7f:69:14:a9:8e:69:f0:fe:39:71:b5:
1a:65:a1:28:68:fa:d1:26:00:d4:54:65:52:ce:e3:
ed:c0:b3:5b:70:3c:0a:52:6d:a6:a9:c1:b4:2e:be:
db:13:41:a9:7d:57:96:ef:05:8b:c5:67:fb:2d:55:
fe:a6:1b:ba:a0:e2:bb:fa:1e:81:48:a8:fc:52:f0:
0e:86:16:65:fa:2d:af:cc:d1:68:55:ee:92:22:95:
bd:dc:27:3c:91:fe:85:08:aa:96:a0:ba:ce:c6:6a:
66:c7:d4:a7:3e:a2:bb:ae:ad:bc:d9:fc:7d:2b:d3:
c1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:55:1B:A4:46:23:65:C3:BE:8E:FF:9D:7A:02:2D:F7:0A:72:7D:FC
X509v3 Authority Key Identifier:
keyid:FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c0:cb:96:7d:c8:bc:37:1c:c7:26:4b:ee:46:52:ac:fd:6a:
11:16:45:7a:1b:3e:4e:42:6d:aa:e3:ca:be:ba:d6:25:d6:f3:
64:bb:5a:f4:35:4d:2a:b5:b4:10:26:09:09:bd:e9:5a:85:ac:
70:ab:d6:c8:fb:36:b1:59:2e:c2:5e:e6:87:03:65:81:68:35:
95:2f:c5:40:d6:60:f0:64:68:44:7f:1c:62:68:91:b9:fb:36:
0e:ee:ae:0d:02:93:d5:70:c0:6d:c1:6a:51:5c:3b:1a:da:f8:
70:9c:4b:33:67:0f:29:99:a2:d1:60:df:0b:94:d5:97:13:1c:
11:df:7b:5f:7d:3d:ed:e7:3c:e8:1f:43:55:68:7f:d6:26:bc:
26:24:75:cf:2b:5c:f8:be:52:7d:ce:48:e2:30:e1:e4:08:7a:
4d:05:a4:ae:18:cb:2b:e4:d2:14:e4:54:b0:4a:12:d3:4e:01:
9c:5c:01:b4:61:ca:dc:a1:2c:9e:f9:d6:66:98:21:19:d3:38:
37:0f:20:cd:1a:e5:b1:61:7d:26:36:e1:94:ff:5a:91:f8:75:
2a:5e:a0:13:d0:22:de:b3:ca:8a:b6:14:43:40:7c:38:97:68:
4b:92:6a:05:d2:5a:66:1b:d1:06:31:3e:35:b7:cc:ed:ff:e3:
ad:76:f8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:16 2025 by rpki-client