Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: PsOcxpIgfPkGb0XdjulUxr45zl0Qiin6Gn81q8lN+ug=
Subject key identifier: CF:DA:A8:EA:98:AC:67:C8:15:5D:E1:8E:1E:CA:41:F7:DD:88:8D:95
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 019770755D0EA11D951D1C8292DBFD999DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 22:00:29 +0000
Manifest this update: Sat 14 Jun 2025 22:00:29 +0000
Manifest next update: Sun 15 Jun 2025 22:00:29 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: fB8ks1GFo0yLObRNYdelMOqAo1ssShe1O4N+buPSVYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:5d:0e:a1:1d:95:1d:1c:82:92:db:fd:99:9d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: Jun 14 22:00:29 2025 GMT
Not After : Jun 15 22:00:29 2025 GMT
Subject: CN=cfdaa8ea98ac67c8155de18e1eca41f7dd888d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:19:b1:a6:62:bc:72:6e:61:fe:ce:a2:28:
c7:dc:1a:8a:73:6a:da:d8:5e:bc:2d:54:9e:77:c1:
15:56:ce:ff:fb:c3:c0:c9:f0:4b:b3:27:84:33:c3:
3a:e1:8c:5f:89:2a:ea:c9:01:1c:60:5c:00:a4:87:
4f:d8:db:f1:29:2b:35:0c:a6:1b:6e:ce:63:01:68:
bf:19:a4:19:64:41:4d:54:62:51:05:73:8f:85:d4:
a8:94:12:99:75:6b:25:c5:a4:7d:4a:32:a7:05:5f:
33:41:3f:9a:e9:86:04:0f:08:19:16:b4:ae:2a:61:
ea:e1:a1:fb:10:3b:20:1b:bd:ea:16:fe:5f:03:c2:
f0:a1:cd:c2:75:cd:3e:3e:5c:0b:95:e7:ac:42:ff:
2c:5e:9e:8a:c8:5a:93:84:14:55:e3:c2:35:7b:73:
b7:91:45:2b:4c:2f:37:46:2b:35:52:9a:e4:01:6d:
5d:c1:64:43:13:9f:b0:13:2e:47:79:8c:d3:9f:08:
31:ad:2c:8f:97:f3:c6:15:77:94:a9:6d:6b:bd:83:
0d:3e:a6:b7:41:09:01:21:8c:ad:7b:6d:7f:bc:72:
bf:cd:6a:d7:36:6e:03:6a:21:67:9e:65:5d:a2:3f:
10:84:81:9a:0f:01:a5:52:e6:a9:71:f3:f2:a1:bc:
fa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DA:A8:EA:98:AC:67:C8:15:5D:E1:8E:1E:CA:41:F7:DD:88:8D:95
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e8:67:e6:48:1b:4d:eb:1a:a2:f2:65:20:d0:17:67:31:25:
7e:28:c6:8a:23:44:8e:1e:f5:27:fe:3d:1c:b5:f5:2a:0f:17:
8d:ed:df:6a:cb:a5:31:00:06:44:2e:77:e4:24:23:8e:bf:6f:
32:94:50:cd:a0:e7:b9:f4:78:86:51:a1:bf:36:29:d0:b0:5e:
8c:87:e8:c1:90:49:1e:87:74:ec:09:14:5d:5a:ad:3e:bb:6a:
37:8a:ad:38:fc:c1:da:42:c7:71:a4:b2:23:92:ea:d9:9d:74:
45:1f:81:6f:5f:d7:1d:6d:24:d1:71:5c:a8:65:a8:cf:0f:96:
c1:a8:ec:45:97:d9:a6:7b:44:f7:2b:98:28:87:b3:35:8f:bc:
40:1b:44:47:05:6b:0f:8e:0e:55:0a:88:64:3b:73:61:e3:1e:
9b:4c:7b:b2:6c:4e:f7:21:75:ae:ec:d1:11:47:ae:0b:ae:ce:
b3:70:8e:4a:31:63:7b:4f:93:77:ec:7a:70:a7:0e:4a:c3:69:
e3:08:dc:a4:b3:01:0d:d7:c8:ed:65:9b:5a:de:cb:34:a9:81:
65:9f:6d:55:d5:10:89:c6:1a:50:a3:9e:b6:4c:33:fd:01:c4:
bd:38:bc:8f:3e:5e:4d:74:f8:ce:89:c8:ab:ba:15:7a:8c:61:
2b:ed:19:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:09:08 2025 by rpki-client