Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: ruQ9t5W+VhYySCG9s/jp7eeZ0Rsf+SjDXe9h6u50iDA=
Subject key identifier: CF:09:38:87:96:72:BA:D5:E4:DB:F3:48:97:34:CD:26:52:3B:03:6D
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 019873E3F8E6E14125DE08BCCE79918AB84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 0F70
Signing time: Mon 04 Aug 2025 07:02:56 +0000
Manifest this update: Mon 04 Aug 2025 07:02:56 +0000
Manifest next update: Tue 05 Aug 2025 07:02:56 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: ABo6t0QKQXrzpLmztQY0mAaJkDYERiE+XochuZ86IQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:f8:e6:e1:41:25:de:08:bc:ce:79:91:8a:b8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: Aug 4 07:02:56 2025 GMT
Not After : Aug 5 07:02:56 2025 GMT
Subject: CN=cf0938879672bad5e4dbf3489734cd26523b036d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:4c:0a:4b:b0:14:67:bf:9e:9c:7a:78:c4:
90:53:ff:99:bd:c4:8e:6c:de:11:e2:8a:14:3f:3a:
a6:22:75:17:3d:77:6e:d7:27:a6:36:5a:48:f9:a2:
1b:82:22:2b:8f:fe:73:3e:49:62:3c:4c:0c:eb:89:
e9:55:b7:41:fe:02:ec:28:ff:01:30:72:c5:ec:68:
5a:6a:f4:e5:66:db:bd:4a:76:ff:9f:ef:8e:4f:d5:
d9:73:81:d2:9e:3c:d7:3a:2d:93:df:ff:f5:69:63:
6e:87:e8:ed:6a:a9:15:93:fd:77:71:0c:91:73:c9:
5e:83:0a:8a:d9:aa:4d:8c:f2:2a:ea:d5:dc:13:67:
00:08:6b:17:2d:d6:9a:c6:58:02:eb:f9:f0:8c:c5:
2a:73:8c:80:8f:bd:d2:7e:ec:3f:80:7a:fd:90:18:
19:21:07:d0:f2:d7:17:c5:0f:a7:bd:8b:a6:10:9c:
88:3a:67:8d:90:34:0f:81:6c:c8:00:84:20:6c:cf:
16:f2:b8:65:bc:77:c8:09:1b:f9:27:6c:c3:38:5a:
48:18:7d:5d:bb:b9:1d:68:d4:1a:07:64:8b:8d:89:
73:2c:70:04:52:3d:1d:19:c3:a9:d3:be:57:53:a4:
ab:44:9d:a6:b1:3d:b3:6a:65:82:51:6a:d3:74:8b:
fe:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:09:38:87:96:72:BA:D5:E4:DB:F3:48:97:34:CD:26:52:3B:03:6D
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fc:5a:65:45:3a:8e:31:72:50:7c:30:38:e4:88:e1:e5:54:
45:8c:93:b0:cf:c3:5f:bc:a4:26:93:f2:6f:c1:84:42:1a:3b:
ac:f0:0f:28:19:d0:0a:b0:40:91:b5:77:a2:cd:c1:99:0b:20:
80:f3:16:92:bd:24:51:67:84:b6:de:b8:f2:d6:af:ab:7b:ee:
ad:a9:e7:66:1d:ae:0a:8c:3e:50:56:d4:c0:39:5b:1f:bd:a4:
bf:00:02:51:7c:a6:df:9d:dd:f6:22:3a:34:7c:4a:5d:07:ca:
2d:8a:02:ea:44:b6:9e:63:de:af:66:b6:65:04:5f:ba:e3:7a:
11:94:ca:d3:42:16:bf:24:6f:f7:90:ec:c0:b9:45:24:f3:96:
c5:45:62:46:58:cc:d2:c1:c1:6e:eb:c4:a4:04:78:1c:96:42:
2e:f0:d4:49:ac:38:7d:bc:99:a1:cc:a8:e6:b2:4e:66:d1:30:
08:bf:29:fe:9f:44:1a:89:91:7b:7d:ea:12:f6:1b:5d:36:9c:
99:1d:b4:24:ff:ef:d1:c1:c0:6d:c4:02:66:5e:fc:91:d5:a9:
e3:5c:83:ba:1c:82:a5:eb:24:d1:cb:c0:cd:95:c8:d5:81:94:
44:2c:4e:be:3b:eb:55:82:4f:c7:29:48:a9:d8:e8:a0:48:32:
79:bc:a1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:33:39 2025 by rpki-client