Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
File: 1FbufkhK4u8JINCVvK4mj6_Wlhk.mft (raw, json)
Hash identifier: t/tJZeRf29mLc5G612WlDzCrWCUCl+pSbXG7N8/WpJ0=
Subject key identifier: DC:78:A3:D1:B9:CC:7C:61:39:B2:2C:D5:5B:A1:EF:EB:79:3E:7B:8B
Authority key identifier: D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
Certificate issuer: /CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Certificate serial: 0197B7EA5DD78E3190FA4EB9FBEB324E3E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 19:01:19 +0000
Manifest this update: Sat 28 Jun 2025 19:01:19 +0000
Manifest next update: Sun 29 Jun 2025 19:01:19 +0000
Files and hashes: 1: 1FbufkhK4u8JINCVvK4mj6_Wlhk.crl (hash: +KroNMirLUhHeXtlhOEjYuhowtyOq9thN8Upj3dXxac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:5d:d7:8e:31:90:fa:4e:b9:fb:eb:32:4e:3e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Validity
Not Before: Jun 28 19:01:19 2025 GMT
Not After : Jun 29 19:01:19 2025 GMT
Subject: CN=dc78a3d1b9cc7c6139b22cd55ba1efeb793e7b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:b4:53:5f:2d:eb:f3:c6:97:9c:0f:b9:d8:
63:cf:a8:df:6d:e1:db:4c:54:43:e3:60:84:6b:30:
18:44:e6:83:fc:2f:7a:e7:be:0e:23:be:47:66:e9:
12:a4:e4:fa:5a:22:db:ea:ba:a5:33:ab:75:c7:7f:
83:9a:a3:db:a8:6c:46:e7:26:d4:2d:a8:88:57:79:
68:fb:59:22:e6:3c:7e:60:f5:15:56:19:8f:45:96:
0b:ba:12:9e:f1:9e:d2:5b:1b:8d:03:fa:1a:25:d4:
ca:4a:c4:51:83:52:3c:6c:e8:81:9a:d2:fd:b7:e9:
f4:44:5a:ed:f9:4f:0d:8e:6b:e0:77:22:45:60:08:
71:22:66:9a:97:80:a3:d5:2c:99:67:f3:0e:ba:41:
04:f9:e0:48:96:e5:da:bd:ec:b0:19:d8:ba:0b:6f:
37:21:ef:7c:ec:28:4a:f9:7b:5f:35:f9:a6:13:f4:
a9:f2:f3:ad:bb:d3:19:4b:e8:f9:95:17:2d:ab:5f:
b2:ad:d9:39:28:a5:31:ba:40:c3:4f:98:1e:5a:80:
f9:4b:60:86:6b:4f:ba:6b:af:9e:f8:a1:f4:1f:da:
13:a2:b8:bc:fb:b1:62:1c:5b:33:27:a7:be:98:60:
e4:e5:57:fc:29:6b:5a:2c:ca:bf:e7:0d:6c:3b:56:
79:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:78:A3:D1:B9:CC:7C:61:39:B2:2C:D5:5B:A1:EF:EB:79:3E:7B:8B
X509v3 Authority Key Identifier:
keyid:D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:87:2e:3b:22:fc:1b:f6:20:8e:c6:bb:b1:23:a0:59:26:2a:
cb:36:d0:6b:6a:9d:f3:54:1b:0b:ed:bf:4f:cd:24:1e:42:d5:
cc:4c:d2:84:4d:aa:1c:e6:8c:50:cf:4e:9a:25:aa:08:df:0f:
52:31:b5:12:26:b7:fd:a0:77:96:09:75:5a:dc:24:7a:15:5e:
90:de:47:7e:ad:11:f6:51:db:6f:91:b4:28:44:65:21:e6:7f:
d8:0d:6d:21:32:dd:f3:53:21:21:cf:48:89:1e:67:f2:fa:e7:
aa:e6:ed:db:dd:12:41:11:5b:68:39:d2:f8:35:6f:a8:08:0b:
c0:92:d0:a8:95:e0:33:09:f6:c8:15:1b:6d:ed:e9:e9:28:1d:
86:5a:dd:c9:56:05:ab:81:e8:ff:1a:0e:65:3d:fd:d3:5f:ab:
ee:b8:a3:29:b3:1a:87:4a:4f:20:75:2b:b7:98:6c:16:85:eb:
4b:d1:22:93:cc:4a:46:9a:e9:60:e1:0a:0c:d8:86:a8:06:f8:
28:a0:ba:73:4f:02:0f:bc:20:00:20:72:c8:3f:98:b7:51:66:
b6:43:de:75:87:07:42:06:39:64:62:0a:f3:eb:e0:ad:ea:b3:
c4:ff:a3:6e:6a:79:f9:5f:cd:e9:26:d1:5b:92:9b:d6:34:51:
53:b1:96:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:23 2025 by rpki-client