Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.mft
File: 1-75t-tXrSOmB5A0KS8VatHGuXdk.mft (raw, json)
Hash identifier: nVaUJh+q47eJmqyRmse+Zng3xPPXTx6wq17zVL30/qY=
Subject key identifier: 4C:B7:CA:A8:B4:63:7D:B2:8E:11:E1:C8:2F:BC:D5:F0:37:0D:06:FC
Authority key identifier: FB:BE:6D:FA:D5:EB:48:E9:81:E4:0D:0A:4B:C5:5A:B4:71:AE:5D:D9
Certificate issuer: /CN=fbbe6dfad5eb48e981e40d0a4bc55ab471ae5dd9
Certificate serial: 0197B5FC48B80188063132C930F6560D3D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75t-tXrSOmB5A0KS8VatHGuXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.mft
Manifest number: 083C
Signing time: Sat 28 Jun 2025 10:01:39 +0000
Manifest this update: Sat 28 Jun 2025 10:01:39 +0000
Manifest next update: Sun 29 Jun 2025 10:01:39 +0000
Files and hashes: 1: 1-75t-tXrSOmB5A0KS8VatHGuXdk.crl (hash: ttzUDj3rjj34plCsmIBJw5A6sALs8O6fbB6q+fZPA/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75t-tXrSOmB5A0KS8VatHGuXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:48:b8:01:88:06:31:32:c9:30:f6:56:0d:3d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe6dfad5eb48e981e40d0a4bc55ab471ae5dd9
Validity
Not Before: Jun 28 10:01:39 2025 GMT
Not After : Jun 29 10:01:39 2025 GMT
Subject: CN=4cb7caa8b4637db28e11e1c82fbcd5f0370d06fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:31:7a:f5:0c:90:85:72:0a:e7:af:a3:44:3d:
a9:f1:6a:94:e2:12:51:83:47:00:4b:9d:39:82:66:
aa:44:16:06:4f:ab:a4:22:c2:c2:1a:fc:d1:8e:6d:
26:62:29:79:7e:36:a8:d2:36:b5:51:88:e4:a8:9c:
a1:03:78:e7:57:57:c3:2b:05:e7:5a:ab:4f:db:14:
5b:dc:01:df:18:f4:ec:6b:bd:f0:98:93:56:3e:45:
7c:9b:a5:0f:75:d5:93:14:21:99:83:ab:6b:f8:cf:
e8:6a:0b:8a:b7:4c:31:3a:92:24:0d:5f:e9:90:d2:
de:36:bb:5a:f0:f0:07:d8:9d:05:e7:c6:f7:31:3c:
a0:ea:f7:e7:75:3e:c6:cb:5f:06:46:2e:3d:ba:a4:
6b:43:17:fa:3e:e9:cb:83:7e:44:e3:6a:08:d9:31:
0d:6f:f0:2f:52:57:90:cc:6a:c1:61:28:61:f5:b9:
a6:30:99:56:05:ce:ff:71:68:12:aa:49:a0:bb:3b:
71:42:4e:c7:72:04:0c:27:97:73:10:c0:d3:dd:d3:
cb:79:3b:0b:d0:a8:7b:ab:26:a2:b7:ec:d5:8d:bf:
36:b9:43:d9:17:f6:6a:c5:a6:07:3a:b8:7e:15:6c:
ec:a4:7b:d6:2f:78:ac:45:eb:55:6b:f4:34:a9:59:
da:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B7:CA:A8:B4:63:7D:B2:8E:11:E1:C8:2F:BC:D5:F0:37:0D:06:FC
X509v3 Authority Key Identifier:
keyid:FB:BE:6D:FA:D5:EB:48:E9:81:E4:0D:0A:4B:C5:5A:B4:71:AE:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75t-tXrSOmB5A0KS8VatHGuXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2d:38:43:ff:72:7a:a8:94:30:7c:ee:be:7c:c0:78:e9:da:
b0:47:4c:f3:d6:7f:0a:64:21:fc:d0:b0:2a:18:0d:95:54:e9:
e1:e7:c4:68:ee:f6:87:ad:ba:40:5c:2f:e7:eb:a9:4c:74:ed:
d2:5f:6b:3e:ce:f2:fb:79:3c:e5:a9:d4:ef:d9:cb:55:4f:04:
84:69:63:0b:38:cf:54:c3:e3:58:ae:83:68:1e:c0:79:bf:ec:
a0:4f:0d:fd:97:71:2c:e0:fb:fe:97:02:d1:03:e7:fc:9a:f4:
b0:6d:3e:4c:ec:13:ed:35:60:0d:50:39:6d:24:21:14:02:d6:
87:7f:04:1b:d2:01:80:b2:4f:fa:a1:59:41:cd:59:68:18:4a:
85:61:21:84:f1:94:72:36:39:17:db:5c:4d:dd:e1:e9:27:7c:
69:e2:3b:2a:f4:06:1a:2d:22:c7:26:3d:12:63:b3:37:c1:3c:
c4:cb:4c:a2:94:db:62:69:16:9d:85:f6:71:50:ca:51:29:c1:
ab:78:b4:8a:e3:8b:f9:a0:03:13:7a:c9:63:34:8d:28:b4:b6:
93:67:11:69:da:3f:4a:ed:5c:03:ff:f8:f3:17:93:54:59:7d:
77:be:0e:d8:b6:71:67:26:6b:56:58:62:7d:9a:bd:d8:9d:1d:
53:8e:b2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:07 2025 by rpki-client