Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier: O/T5QJqq3BYuxpTggXN0C1f7VPQKZbUSNXqX+/V1zTk=
Subject key identifier: 4B:B7:F2:3D:73:BC:FA:F4:DF:5A:57:6B:56:09:7C:47:1B:AB:E9:37
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial: 01977B3076FC045A4B88B0D32C1B22309626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number: 04E4
Signing time: Tue 17 Jun 2025 00:01:03 +0000
Manifest this update: Tue 17 Jun 2025 00:01:03 +0000
Manifest next update: Wed 18 Jun 2025 00:01:03 +0000
Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: znYv2iTZpvWyT7rBmkJC6bBEfJAVO75kJO0trEgIrEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:30:76:fc:04:5a:4b:88:b0:d3:2c:1b:22:30:96:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Validity
Not Before: Jun 17 00:01:03 2025 GMT
Not After : Jun 18 00:01:03 2025 GMT
Subject: CN=4bb7f23d73bcfaf4df5a576b56097c471babe937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:91:cc:93:ef:34:1c:38:93:7f:9d:6e:de:
e4:fb:b4:8e:09:af:ab:3d:e0:da:ec:6e:43:64:37:
56:ae:f1:6c:ec:a3:f5:52:26:77:bd:a5:df:cf:eb:
b6:c5:97:76:0c:58:e9:be:40:e7:b3:d5:e6:03:45:
33:18:f1:0e:29:63:dc:ca:8f:be:f4:5a:a2:6a:f3:
af:15:ea:70:76:52:a3:fb:f8:04:60:f9:ce:02:c3:
fb:79:fe:8b:8b:84:32:1a:ed:98:d6:ed:e6:31:38:
ce:14:8d:8b:1a:c7:1e:e0:8d:61:2d:bb:2c:f4:a6:
6a:2f:91:2b:6d:07:61:ec:60:7f:de:84:05:04:d9:
ab:f8:00:7f:ee:a3:8a:32:e0:4a:d8:62:be:37:7f:
7b:5b:30:e0:8d:54:32:f4:96:94:2a:5d:08:53:53:
59:83:73:3c:c0:a4:e8:2e:98:16:ca:62:f2:32:92:
bb:0c:3d:1c:68:1a:04:38:ef:b8:dc:b4:a7:a4:bf:
79:85:5f:e2:27:f1:54:83:fb:80:54:b5:c4:f7:94:
c4:90:ab:c5:af:da:98:44:35:8f:9b:96:1c:94:3f:
af:01:99:d1:9b:e0:77:83:94:e1:db:27:3c:3d:ff:
71:7e:1d:44:a3:2e:98:fa:d5:e3:83:3f:e2:76:fb:
a2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B7:F2:3D:73:BC:FA:F4:DF:5A:57:6B:56:09:7C:47:1B:AB:E9:37
X509v3 Authority Key Identifier:
keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:08:6b:78:1c:87:e4:f4:00:4d:11:d3:52:12:3a:ae:fc:59:
c9:d5:03:1d:d7:73:e7:86:9b:cd:d9:1c:2e:31:d0:5e:0d:5e:
f4:4b:41:00:15:24:af:48:a4:09:c5:be:e6:af:91:fe:43:49:
54:5e:9c:82:8b:37:d2:ac:58:4b:87:e7:0b:e2:16:a4:6c:02:
c3:74:30:99:da:60:4e:1c:74:18:5f:16:6e:88:54:97:cf:62:
98:ea:5c:7e:6f:a4:80:0a:4c:42:7c:f4:5c:98:bc:ae:0d:2f:
bc:66:f7:4f:4e:b0:c5:f2:d0:b1:e9:33:12:33:7a:e8:4d:8d:
2e:9c:8d:54:71:b2:1c:2c:17:2c:e0:96:e7:05:20:6d:e0:ca:
99:9e:88:c3:95:f8:a4:42:d0:5a:78:97:ce:48:50:f2:03:9c:
50:04:9f:8a:35:23:e7:0f:78:e1:b7:d6:31:03:18:19:da:4f:
c2:c4:7a:08:18:69:e4:38:7e:b2:fa:b5:f3:dc:d3:de:a4:b2:
80:88:46:d6:45:cd:b9:cf:5c:6b:9a:ec:4d:dd:3c:67:66:5a:
76:4f:a0:58:72:c3:74:3c:f9:90:57:66:03:ad:80:ad:49:10:
0c:5f:8f:53:c4:22:0c:9d:04:92:0f:a6:aa:84:54:c8:81:1d:
be:f6:03:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:08:12 2025 by rpki-client