Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier: XfXOQ4vE28Bi9ctoAo5fAX9xuV81nK8Fdc+whhZIO1I=
Subject key identifier: BA:66:DC:83:1A:17:56:48:30:0C:0A:0B:41:F3:97:F2:D7:DE:87:24
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer: /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial: 01976C2A990D5F8672E8E6AB472ED0A0F7AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 02:00:20 +0000
Manifest this update: Sat 14 Jun 2025 02:00:20 +0000
Manifest next update: Sun 15 Jun 2025 02:00:20 +0000
Files and hashes: 1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: tzCuBgUEK/4Gh1z+6cjXpSgPdphOSXq/+UwyqFEHLx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:99:0d:5f:86:72:e8:e6:ab:47:2e:d0:a0:f7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Validity
Not Before: Jun 14 02:00:20 2025 GMT
Not After : Jun 15 02:00:20 2025 GMT
Subject: CN=ba66dc831a175648300c0a0b41f397f2d7de8724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:cb:fa:96:b9:1d:f4:cd:5d:57:08:6b:e8:
c1:14:e8:a2:21:a1:ee:c2:38:06:e0:e8:05:21:67:
cb:be:f1:9a:57:be:3c:07:8b:f5:1f:e4:3e:55:52:
3c:61:fa:7b:f5:4e:b2:c3:fd:a6:93:9a:51:bd:02:
2c:a3:08:26:b4:dd:4d:64:6d:83:7e:81:bd:f8:c5:
14:c7:dd:87:87:03:c6:9b:9f:a4:08:1d:4e:09:35:
e2:dd:34:2e:3c:bb:5e:72:08:48:ac:1b:56:97:51:
0c:53:cf:0a:3f:8d:85:e3:fb:93:7f:78:a1:ce:b5:
90:dc:4e:37:13:5a:f4:6f:f4:07:cc:0e:72:8a:fe:
98:ab:74:9e:f6:17:ce:23:48:45:68:4b:bc:21:13:
76:6f:81:b1:74:17:11:89:50:7a:f6:60:1c:bb:fc:
83:b0:42:bd:3d:be:37:cf:2d:0d:34:b1:68:78:e4:
a5:52:24:ec:64:98:1c:98:30:7e:49:38:8c:7e:b8:
92:16:64:fe:f4:f0:b7:4c:71:d7:e0:0d:86:fc:81:
8e:90:ec:c4:66:3e:56:7d:af:ed:93:71:07:ba:15:
6b:f1:41:b7:22:17:a6:c4:a9:11:ec:87:22:d4:19:
a8:f7:81:b9:14:55:cf:8a:1a:5e:7e:a7:63:c2:2e:
7d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:66:DC:83:1A:17:56:48:30:0C:0A:0B:41:F3:97:F2:D7:DE:87:24
X509v3 Authority Key Identifier:
keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:3b:14:c2:8d:a0:f6:92:f2:84:66:5a:91:ac:03:89:5d:ad:
9c:eb:d8:27:cb:8f:5b:a2:bb:40:0a:a0:0a:3a:89:7b:a6:82:
63:20:c0:21:7c:9b:8a:38:08:ae:cb:b8:11:fe:ff:f6:69:2d:
33:7c:77:8d:9e:f6:b6:a6:03:d9:98:a9:02:99:03:d2:0d:7e:
c2:ff:ac:b4:5a:74:9b:c2:57:e8:42:a8:77:8d:95:40:2a:29:
d7:b9:0a:48:3b:20:98:af:34:38:b7:0c:58:8a:34:7b:2f:21:
a6:3f:fa:1e:37:ba:4c:79:68:94:97:a5:c4:d4:d0:dc:3d:9b:
1a:38:49:a0:71:0f:f4:b5:21:07:b5:d8:bb:e2:9d:54:9d:f8:
65:69:80:c9:e4:8b:19:df:1a:eb:f8:1a:27:bd:b3:a4:2a:2b:
7f:53:f7:af:64:fa:52:91:3d:9b:36:64:dc:af:cd:c4:37:00:
96:8f:6f:92:cc:b6:d9:4d:ad:30:5c:b3:73:ab:94:2d:c2:07:
2d:0c:8b:4d:c0:22:56:b2:99:bb:f4:25:f5:03:3a:81:ee:45:
72:bf:90:0f:f0:e4:cd:f1:75:c5:0c:6f:aa:20:59:25:14:23:
dc:ca:f2:3a:62:d7:fc:d9:2b:28:e4:69:4c:e1:70:9e:f9:ef:
e7:53:94:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:17:21 2025 by rpki-client