Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
File: 1-hqD-7PhubY4MaaB9rciomUBbJw.mft (raw, json)
Hash identifier: 3RzAkMWiuOmxILJVcPWBMybtKlVAbfLeuwAjclFjyhU=
Subject key identifier: 6B:A7:8B:FA:54:36:95:A3:2D:C5:C2:00:F9:C8:EA:51:F6:EE:1F:E6
Authority key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
Certificate issuer: /CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Certificate serial: 0197B6A21018983D0C12A35627EAFB760EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
Manifest number: 0CEA
Signing time: Sat 28 Jun 2025 13:02:43 +0000
Manifest this update: Sat 28 Jun 2025 13:02:43 +0000
Manifest next update: Sun 29 Jun 2025 13:02:43 +0000
Files and hashes: 1: 1-hqD-7PhubY4MaaB9rciomUBbJw.crl (hash: 2VWId96v0csqkw4mpYBp238Opk1MJSZ8kYoU6Pyuemg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:10:18:98:3d:0c:12:a3:56:27:ea:fb:76:0e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Validity
Not Before: Jun 28 13:02:43 2025 GMT
Not After : Jun 29 13:02:43 2025 GMT
Subject: CN=6ba78bfa543695a32dc5c200f9c8ea51f6ee1fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:fb:21:28:ce:d0:e5:e3:e7:31:c8:ca:f0:
76:34:ca:4f:3c:c8:ed:c3:c0:8d:b5:5d:8a:6b:cf:
03:28:f8:ea:e2:5e:3d:47:2c:0b:32:d8:9e:bf:63:
a3:8b:be:85:7a:2a:e9:ae:a0:d9:97:5d:ec:74:e2:
73:54:da:15:45:5c:46:56:77:db:3d:c2:fc:cd:3f:
a4:a0:99:54:a0:5f:97:5c:c2:93:30:c2:57:1b:ae:
14:00:89:45:c7:f3:f6:cb:4e:fa:42:35:10:5e:03:
e3:73:8e:ab:cc:30:d9:46:fb:22:13:ae:59:68:45:
40:d0:39:f0:72:eb:f1:e5:72:e9:fa:12:46:f7:97:
a2:80:87:17:93:83:2d:99:e3:84:57:a5:bc:21:51:
11:c3:60:2a:02:91:29:14:58:16:a5:36:f4:b5:e1:
10:b0:8b:d2:89:48:46:93:0b:c3:0d:ae:6a:4a:1a:
07:01:8e:6c:bc:12:57:a5:9f:b1:e3:4b:c0:9d:6b:
e2:68:fe:b0:02:5a:79:ed:90:d5:e7:84:18:1a:f0:
03:aa:af:dc:71:2b:27:96:d3:e8:98:c1:7b:03:34:
c6:1b:22:01:a0:a5:36:44:8f:ba:71:69:66:f4:3d:
05:a5:12:e3:71:e4:66:d1:c4:41:65:27:32:73:ee:
31:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A7:8B:FA:54:36:95:A3:2D:C5:C2:00:F9:C8:EA:51:F6:EE:1F:E6
X509v3 Authority Key Identifier:
keyid:FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:11:c5:fe:df:4b:da:bf:4a:ee:be:83:7a:c3:69:7c:77:ba:
d7:8d:78:5f:df:a9:4c:dd:ab:dd:16:b0:61:61:3d:c9:5d:a2:
b8:3f:ee:3a:a4:3e:92:1a:0f:61:8d:e6:73:bb:ec:9f:6d:5c:
a8:b0:4d:b4:6c:ba:8d:12:df:e3:bd:0e:44:22:6f:02:9a:51:
18:e4:0c:5c:ed:47:c4:37:be:37:a6:85:d1:bb:a7:d5:39:9e:
7f:24:e1:ef:26:1d:f2:4d:0f:e0:18:91:80:88:73:6d:e0:21:
44:e7:03:bc:f6:94:79:3e:2b:0e:16:95:be:01:2a:de:15:11:
d8:3a:28:c7:17:08:62:75:f0:3d:38:76:81:8e:64:91:df:48:
2d:ea:bf:bc:f1:d8:1b:96:fe:32:5a:a5:c6:ea:3d:6d:a5:e8:
92:65:2e:55:96:8f:34:00:0d:0c:0f:d0:0e:9b:95:34:2e:60:
4e:00:db:b4:b5:a3:bb:0b:54:89:4b:f9:97:de:c8:f4:7f:e6:
64:6a:e2:e5:62:dc:ee:e5:d6:ea:6b:36:b7:02:65:fc:ca:95:
0e:78:f8:7e:c6:30:88:11:c6:2d:65:c5:f9:fe:dc:d5:f5:ad:
ae:c5:dc:4e:50:22:c2:ed:6d:23:d3:c3:95:37:eb:8d:c6:40:
a4:44:e3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:19 2025 by rpki-client