Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
File: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft (raw, json)
Hash identifier: JV27ZCsydga59S5GPgSyfhdJ9/judFkwmM8EkHJ1Ejw=
Subject key identifier: 21:B8:95:B0:BC:36:BC:EF:70:CE:9A:E6:80:FE:D7:E9:B0:CA:05:F3
Authority key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Certificate issuer: /CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Certificate serial: 019873E2D9B154F42DB66B4F5CCEB93FE43E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 07:01:43 +0000
Manifest this update: Mon 04 Aug 2025 07:01:43 +0000
Manifest next update: Tue 05 Aug 2025 07:01:43 +0000
Files and hashes: 1: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl (hash: hCmh77O8xERNFKlaSqk18zyMb4hSpeICKzPHY9dq8P0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:d9:b1:54:f4:2d:b6:6b:4f:5c:ce:b9:3f:e4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Validity
Not Before: Aug 4 07:01:43 2025 GMT
Not After : Aug 5 07:01:43 2025 GMT
Subject: CN=21b895b0bc36bcef70ce9ae680fed7e9b0ca05f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:1f:cf:ec:00:ec:45:83:56:f8:04:30:92:
55:66:ca:84:f3:6f:d0:1d:8d:3a:d8:74:60:ae:6a:
6c:9f:e9:10:95:f5:49:fd:7b:97:fd:f7:09:ff:db:
9b:3d:74:72:87:89:1a:a3:e6:5a:1f:35:1a:d8:d6:
3d:76:e5:98:29:44:e9:35:05:80:57:42:b7:5e:4f:
c2:6b:d9:03:5e:15:1f:1d:76:5f:9a:c8:5a:9f:28:
45:1f:09:78:9f:27:31:be:cd:e6:06:26:3b:7a:45:
b0:60:a4:65:c0:df:bf:18:a4:fb:11:fe:1b:33:d6:
1c:04:55:a0:8f:8f:d8:b4:de:c0:0a:ea:eb:4f:8b:
05:04:0b:39:e9:59:b2:86:4d:e2:c2:0c:79:a6:8a:
43:a5:d9:bf:22:f6:55:ca:da:51:21:63:36:ca:eb:
7b:ac:bc:b2:eb:5f:42:36:e4:de:d2:e2:9b:e4:44:
81:1b:e9:71:b2:17:61:31:74:6c:3b:78:2d:e1:c9:
65:4f:e1:5e:3f:9c:37:5d:1b:0a:75:06:37:a8:64:
74:58:32:e2:24:1b:17:93:c2:4e:9a:96:d6:d6:14:
27:d0:98:56:b1:dd:f4:94:0f:ed:2f:1c:cd:27:e1:
a4:69:e8:77:58:45:21:65:b8:ea:34:49:a3:e5:20:
b5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B8:95:B0:BC:36:BC:EF:70:CE:9A:E6:80:FE:D7:E9:B0:CA:05:F3
X509v3 Authority Key Identifier:
keyid:FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c2:b7:71:32:32:57:51:aa:62:4c:c8:e6:d8:7e:73:fb:6e:
18:fe:74:0a:72:69:9e:bf:fa:da:07:9e:74:da:bc:2f:a0:ca:
4d:90:54:cf:ad:59:42:bf:ab:e7:0e:b8:b9:60:81:75:69:16:
30:df:1b:3c:95:57:2e:80:41:57:af:14:cd:a6:c5:33:ce:e0:
ae:91:4c:4e:3e:c7:ea:cd:de:84:0b:85:60:78:02:91:33:2e:
21:64:46:8c:da:51:88:01:55:bc:19:2d:db:92:fe:38:9c:81:
76:03:c5:0f:15:a5:d2:e8:ba:8c:ad:9a:36:53:d9:f0:dc:49:
49:68:e5:e3:70:ab:f3:80:21:85:be:cf:02:18:b5:c7:23:1a:
0d:cd:21:61:16:de:b2:a7:0f:3d:fc:8a:c1:c6:74:ef:80:db:
d3:47:47:e6:7c:ea:0d:26:e9:99:1b:0c:ec:78:c3:b0:77:f6:
91:50:af:3f:fe:c7:8c:1f:2b:95:db:3f:93:4d:a4:bf:9f:6e:
16:66:c7:11:26:35:a8:45:ba:f7:e1:d1:f9:b7:92:f2:0a:07:
18:8a:a6:01:fb:74:10:c5:34:50:a9:ae:dd:1a:51:72:4c:6e:
c5:2f:19:0b:a2:80:37:a9:fd:6b:e5:fd:c5:da:f1:30:cd:b8:
7c:bb:af:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:56 2025 by rpki-client