
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier: FjlZTEcs9GrKu5niMMH/eCeTGNT4rP852HLiLbTL5Gg=
Subject key identifier: BE:76:14:8C:00:BA:66:54:E1:E2:D6:5D:E3:ED:72:D5:B8:BF:FE:7A
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial: 01988B7C519CBA240AC907427AAA93E04759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number: 0571
Signing time: Fri 08 Aug 2025 21:00:37 +0000
Manifest this update: Fri 08 Aug 2025 21:00:37 +0000
Manifest next update: Sat 09 Aug 2025 21:00:37 +0000
Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: AbnYg8ThOxLccvTMBSfU5egg3/Hb+qSB+EgYlQUWR7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:51:9c:ba:24:0a:c9:07:42:7a:aa:93:e0:47:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Validity
Not Before: Aug 8 21:00:37 2025 GMT
Not After : Aug 9 21:00:37 2025 GMT
Subject: CN=be76148c00ba6654e1e2d65de3ed72d5b8bffe7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:9f:31:de:e1:12:40:fc:2b:55:a4:a8:a3:
b1:ac:35:85:9e:b8:f8:37:36:be:43:02:f0:f4:f8:
ac:85:8d:41:99:ff:5c:0b:b5:f0:72:1f:18:55:47:
c6:3f:72:d7:00:34:dd:cb:74:2c:bf:05:eb:e3:c0:
1d:27:6d:df:17:6b:be:4f:1a:2a:79:5a:2e:6d:3c:
1c:bb:e6:68:a2:0a:d0:3e:a4:e9:3e:ab:2c:e3:3b:
e7:ce:f6:d9:e1:6d:3f:59:c2:bc:d2:97:21:6c:e0:
a4:e8:b3:f0:4e:60:eb:94:e0:1e:f0:d2:b6:ab:4e:
ca:35:af:c8:75:05:8e:72:82:26:b0:ca:7a:48:b3:
0e:a8:39:bf:6b:73:be:49:b9:5e:8c:17:dc:db:3d:
61:57:ac:9d:fd:e0:d4:77:f6:68:28:03:10:87:95:
de:57:99:92:e4:14:7a:3a:b0:2d:6b:91:fb:62:c8:
7d:7e:9a:9c:11:9a:17:62:0d:8b:01:3d:fd:31:7b:
eb:ce:4f:00:3c:a5:62:de:16:26:d3:aa:e8:2e:8a:
6b:bd:c4:84:57:38:3b:e9:12:af:88:3f:21:80:45:
6c:7d:ba:b6:b9:1b:b7:d7:70:1e:bf:80:fa:fb:a4:
1d:c9:8e:9a:9b:fb:2c:fd:2e:ed:0a:7c:92:6e:ac:
59:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:76:14:8C:00:BA:66:54:E1:E2:D6:5D:E3:ED:72:D5:B8:BF:FE:7A
X509v3 Authority Key Identifier:
keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b9:13:3e:f2:85:18:94:19:3a:f9:ef:6f:79:19:13:9f:31:
18:d3:65:6b:16:f3:16:4c:47:db:6f:87:b3:a4:2c:f6:6e:2b:
16:41:eb:8c:9d:73:46:2b:c7:5b:0b:a8:7d:c4:a9:26:95:06:
1d:59:78:16:a2:6a:d8:a4:22:45:72:27:cb:fd:b5:3e:52:ae:
72:0b:13:c4:88:d0:17:65:68:a9:de:51:d6:3c:22:6b:aa:04:
51:ee:07:4b:2e:22:91:12:6d:26:6c:5e:0e:b0:23:d5:80:bd:
cb:06:1c:6c:3f:d8:05:b9:b1:23:82:88:aa:7d:bc:7a:09:2f:
db:31:ca:35:44:a9:d7:f2:a0:ff:a3:aa:5e:3d:15:d7:57:9b:
e7:05:d9:bc:3a:9b:e2:19:36:8f:d5:71:6e:fa:b4:be:3e:e8:
3a:5f:1a:e9:66:8e:f6:41:22:ce:d9:2b:4a:0e:30:45:0c:72:
66:c5:4c:0e:47:da:cf:76:7c:ec:61:dc:1e:8c:6a:72:54:d8:
e0:d7:1b:8d:bb:d3:e2:0d:d9:98:fa:c2:d3:59:50:c4:41:00:
00:23:b7:15:77:d9:37:98:98:2c:ef:e0:06:c5:39:be:57:33:
02:84:fa:1c:5e:b6:cc:fe:b4:6d:36:07:61:2b:81:50:6b:56:
0a:71:ac:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:52:37 2025 by rpki-client