Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
File: 1-2fE4ThzE8A0RTje_SzPoDTnwww.mft (raw, json)
Hash identifier: /8DSPnlB7z3/4DltHLyEpi9qzxbLw4vjmaNFMAulAS0=
Subject key identifier: 91:DF:E9:12:C0:77:A8:77:6E:3D:8E:FD:41:43:8D:BB:78:2C:45:19
Authority key identifier: FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C
Certificate issuer: /CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
Certificate serial: 01988B0F057BB9848789C59F484BAFE87051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
Manifest number: 0BE6
Signing time: Fri 08 Aug 2025 19:01:14 +0000
Manifest this update: Fri 08 Aug 2025 19:01:14 +0000
Manifest next update: Sat 09 Aug 2025 19:01:14 +0000
Files and hashes: 1: 1-2fE4ThzE8A0RTje_SzPoDTnwww.crl (hash: dh9hWiv9yKufHDgVlwGkqZf38hYRtGWEOXHA8AaBL58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:05:7b:b9:84:87:89:c5:9f:48:4b:af:e8:70:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
Validity
Not Before: Aug 8 19:01:14 2025 GMT
Not After : Aug 9 19:01:14 2025 GMT
Subject: CN=91dfe912c077a8776e3d8efd41438dbb782c4519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f8:6d:fb:a8:75:05:d2:30:07:2f:b0:4e:5b:
6a:d1:ff:7a:3f:91:26:bb:b2:3a:f1:12:54:a5:a2:
c3:3b:d4:96:87:71:c2:8f:06:67:7d:49:e8:e1:ad:
ee:51:30:6a:9c:aa:e9:5d:cf:8d:89:7b:b5:94:f1:
61:a1:0d:be:eb:62:9d:01:2a:7f:fc:fa:ba:e6:47:
6d:6a:36:84:1f:c5:a3:38:0a:d6:95:63:74:0b:28:
bc:e5:e7:c6:cc:8b:28:cf:7b:8a:ff:82:e2:0e:be:
78:14:2f:fe:45:41:71:e1:9a:b9:0d:c6:76:99:0b:
fc:b6:5d:dd:bf:14:1f:b6:34:5a:6b:90:d7:61:0a:
f6:de:98:d8:d3:2a:da:40:b2:27:66:3c:ee:8b:51:
6a:09:60:f7:8a:47:c7:15:c9:35:67:e8:47:70:24:
e5:53:27:16:66:68:30:b1:9e:b4:ca:4f:0c:39:85:
61:40:e5:3c:72:d1:e2:7a:af:ac:c0:be:61:1d:75:
76:8a:57:0f:33:6a:ff:7d:90:7b:9d:91:5f:d2:ea:
7b:93:3e:af:a9:0b:ab:c0:db:89:aa:bb:3a:5f:9c:
32:f5:6d:5b:43:6e:c2:c9:1d:79:1a:b6:f2:a6:e1:
f6:5d:b3:a7:ab:6b:0b:10:0f:58:a7:bc:73:1a:00:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DF:E9:12:C0:77:A8:77:6E:3D:8E:FD:41:43:8D:BB:78:2C:45:19
X509v3 Authority Key Identifier:
keyid:FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:57:ce:4d:d4:77:8e:16:20:df:eb:60:fa:b1:a1:ba:40:98:
44:ce:3b:94:cd:e1:c3:bc:7a:07:cf:a8:3e:8a:aa:7b:54:a2:
00:f4:2d:4c:5c:33:e8:b0:d2:c1:aa:6e:c2:34:0c:49:29:4b:
48:ef:65:5e:23:db:63:6d:58:c3:b2:61:d4:f2:f3:e3:ff:53:
c1:5a:70:57:fa:6d:6e:06:2c:ac:09:aa:61:5b:7c:23:68:9d:
2b:c4:29:20:a5:b5:4c:f4:3d:a5:0a:c2:26:7c:50:bb:64:ad:
e2:6b:41:1f:66:2b:02:df:90:ad:0a:2f:6d:2b:8a:54:9f:9f:
a7:a3:c3:61:04:f0:71:97:03:49:31:8f:a9:35:88:bd:43:a9:
05:56:76:02:0d:29:6c:f5:0d:87:79:63:5f:d9:7e:49:35:d8:
67:1f:ca:82:61:82:44:fd:db:93:c6:09:d2:83:66:18:3a:38:
40:83:5c:9a:06:1a:0d:1e:6f:6c:8e:86:57:ed:e1:ae:21:82:
e1:89:6c:29:d5:aa:81:29:20:61:73:68:b2:39:5b:c9:12:52:
3b:20:f3:f2:e9:6c:ea:f2:0b:06:cd:e2:f4:63:0d:fd:45:0e:
54:fb:96:7a:12:eb:9d:dd:b0:36:0a:b7:93:f3:9b:52:3f:2a:
9b:da:1f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:53 2025 by rpki-client