Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
File: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft (raw, json)
Hash identifier: pUIsBg6Bnpb59i3CPmDX/h9Ei3Le467aBl+6fp2Wi3s=
Subject key identifier: 74:12:E3:3D:87:C5:75:39:D4:68:AA:6F:89:5E:04:F5:19:97:31:5A
Authority key identifier: FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
Certificate issuer: /CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Certificate serial: 0197B70EE5BC8EFD23737F09EC5FFF3C6E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 15:01:36 +0000
Manifest this update: Sat 28 Jun 2025 15:01:36 +0000
Manifest next update: Sun 29 Jun 2025 15:01:36 +0000
Files and hashes: 1: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl (hash: zRGcdf+RFHKn4tslFDjDwPa4H9t3bXMzRf03EocwWMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e5:bc:8e:fd:23:73:7f:09:ec:5f:ff:3c:6e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Validity
Not Before: Jun 28 15:01:36 2025 GMT
Not After : Jun 29 15:01:36 2025 GMT
Subject: CN=7412e33d87c57539d468aa6f895e04f51997315a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:d9:9d:7c:45:e5:ff:42:7f:ef:b6:6a:15:
76:ca:2e:33:d9:6b:1c:f5:f7:9f:47:53:c7:70:e2:
48:39:9a:7e:34:7f:4a:15:d1:e1:ae:91:72:66:be:
7c:d0:87:0a:b1:9c:8e:26:f8:c4:ea:1c:13:68:31:
cf:03:90:8e:b8:ac:6a:e9:96:0d:93:d3:d9:c4:8a:
ed:69:4d:3c:32:4a:fe:f3:8d:e3:e2:d6:d7:d4:6d:
c8:eb:9d:cf:24:4c:8f:55:3f:d2:57:0e:95:20:9f:
21:45:f2:34:ee:3f:dc:1a:b7:7a:a9:97:40:4b:ab:
ef:a1:df:72:78:ef:c7:97:7e:2a:70:90:60:ef:31:
d1:db:39:0d:66:99:1e:d4:a1:8f:1a:8b:4a:92:da:
c3:fe:d6:d0:97:d2:3a:eb:2d:2a:d1:b1:b6:48:78:
7a:75:bd:d5:ea:5a:54:43:18:1f:01:6a:e2:7a:a4:
e8:f8:ef:a5:d4:71:c5:04:ce:8c:91:44:4d:28:d7:
ac:94:9f:7f:86:88:58:ab:f3:13:3e:96:b4:ca:37:
04:c3:ea:4f:55:55:f1:d0:5c:98:f1:af:77:ca:65:
48:f1:cc:96:32:cc:af:06:4b:ed:68:41:82:bd:d8:
bb:41:17:fd:7d:03:c6:ff:09:7a:a0:b5:0f:4e:ac:
cb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:12:E3:3D:87:C5:75:39:D4:68:AA:6F:89:5E:04:F5:19:97:31:5A
X509v3 Authority Key Identifier:
keyid:FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:78:07:11:2f:79:56:c8:dc:c2:f6:67:11:a8:e8:52:6a:9b:
81:e1:60:c0:13:af:cf:d6:ba:4b:96:5f:c3:7a:b4:b3:bd:fb:
8f:7a:9c:cf:70:b2:56:f1:12:cd:2c:d8:7e:67:dc:a9:f6:bb:
3d:64:12:9a:95:8f:22:7e:74:98:87:99:0f:b1:d3:50:29:b4:
cf:5b:09:47:bf:46:4b:48:db:83:ba:2e:25:de:c3:45:ec:78:
71:24:51:83:79:d5:9b:f3:9f:59:b8:0a:f5:01:90:77:46:b8:
e5:dc:a0:01:38:5e:fc:32:09:4e:c5:dd:c0:44:24:92:18:9b:
a6:2f:a6:7f:0f:ad:06:70:61:af:ea:18:45:79:b9:fe:7f:41:
83:86:fb:bf:c1:12:9c:56:e6:d3:7c:f1:07:33:10:ad:25:05:
58:68:ae:01:01:b4:dc:fc:15:72:a9:7e:80:51:9c:bc:9d:32:
01:91:7c:45:c5:64:4a:1c:3c:30:6a:f0:c3:4c:f1:9c:3d:90:
3b:3e:29:19:45:fa:8c:1f:10:f4:8d:bd:b6:9c:58:74:06:c2:
f5:c8:0c:c1:ae:90:24:d4:3f:f2:18:e1:86:20:61:d5:c1:57:
67:90:ac:05:90:a2:39:83:b0:8f:c3:b7:f4:0b:c0:84:30:17:
4e:59:c0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:38 2025 by rpki-client