Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
File: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft (raw, json)
Hash identifier: yif7h+N+2UIvLsG46cFhapN+WfaEUbuBtuMX3xTqwhs=
Subject key identifier: 01:A8:1E:3B:5E:81:CA:BB:05:30:B7:3C:AF:70:48:A2:3C:4D:BE:8E
Authority key identifier: B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
Certificate issuer: /CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Certificate serial: 019769619FCAB863B9A1A3CFC4DB85DF671C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
Manifest number: 0C9C
Signing time: Fri 13 Jun 2025 13:01:34 +0000
Manifest this update: Fri 13 Jun 2025 13:01:34 +0000
Manifest next update: Sat 14 Jun 2025 13:01:34 +0000
Files and hashes: 1: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl (hash: ubt9r2IfL7HgU3YXBm6PagSs8eXsecMOYa+jDxadjJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:9f:ca:b8:63:b9:a1:a3:cf:c4:db:85:df:67:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Validity
Not Before: Jun 13 13:01:34 2025 GMT
Not After : Jun 14 13:01:34 2025 GMT
Subject: CN=01a81e3b5e81cabb0530b73caf7048a23c4dbe8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f5:bb:a0:61:41:ae:35:e5:11:fb:d9:00:bb:
a7:fd:51:44:13:b1:ab:66:b5:2a:4f:38:86:5a:b8:
16:8d:90:80:76:db:e8:20:51:ad:5a:83:1a:92:8a:
6c:90:74:81:c1:f7:ac:e9:d5:18:36:4c:b1:bb:70:
44:fa:73:89:5c:e9:0a:fe:09:dd:cc:4a:69:ec:ed:
4c:1c:47:dc:13:2e:12:fd:32:5b:43:5c:d8:ae:3f:
da:d1:e3:3f:bb:a5:3d:72:bb:b1:50:bb:07:b9:87:
a3:f9:fb:43:1a:82:7f:fc:c1:c6:05:0b:5b:40:f6:
18:7a:bc:27:25:a0:3f:9a:ea:35:07:bf:81:f0:19:
a8:5a:aa:ab:55:1f:ea:2b:b9:45:aa:d8:9b:7a:a1:
56:b2:46:a2:cf:a6:98:08:d4:f8:54:7e:70:75:9c:
5b:70:6b:88:7c:c7:97:ca:71:6c:79:9a:1a:2f:92:
2d:c7:93:8b:b3:bb:13:c1:b0:2e:7a:0c:eb:6c:43:
7f:fc:ed:05:b1:b5:99:4c:5c:1e:e2:ae:2b:2a:15:
fb:5b:05:27:7d:5c:3e:09:8f:99:7c:26:93:f8:0f:
e6:db:01:ac:8d:0d:33:d9:ef:f0:1f:70:57:34:c8:
33:83:09:98:5d:fb:9d:0a:06:ed:14:a8:b6:dc:d9:
c8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A8:1E:3B:5E:81:CA:BB:05:30:B7:3C:AF:70:48:A2:3C:4D:BE:8E
X509v3 Authority Key Identifier:
keyid:B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9d:70:d1:e8:0b:5c:e3:bf:29:5b:7f:03:39:02:74:e4:bc:
d2:a9:6a:0d:37:e7:f0:94:6f:6e:37:e4:fa:b9:00:f0:e2:07:
08:55:fa:1d:53:0b:19:89:59:8d:c1:f5:68:09:54:66:99:f1:
cf:67:e1:f5:e7:bc:96:d4:ab:25:d6:c3:00:94:ec:0a:6c:e3:
13:77:9f:d2:24:23:d0:43:32:9b:a7:38:5d:2b:2f:df:fe:fe:
93:62:8f:a6:1d:c5:65:3d:0f:c3:71:61:50:e7:b4:04:f2:7a:
38:bc:df:03:f8:34:1a:e2:f9:ef:11:86:2c:97:49:89:5b:d7:
09:9b:3c:e5:d5:44:7e:f2:62:c8:a3:af:a1:c6:aa:00:f0:53:
23:ae:07:1f:49:b5:77:1a:0e:7e:4d:46:5c:62:9a:87:76:5a:
ab:f9:bd:86:cb:94:65:4c:9f:d9:24:45:a9:5f:d3:8a:24:a6:
47:41:3d:03:02:ab:17:48:5b:c9:35:99:0a:19:fe:87:a3:a1:
48:cb:05:ee:fd:d8:0f:87:6a:f3:b8:e3:ee:96:d4:13:7f:52:
c2:6b:59:9d:ff:0c:f3:1c:9a:92:53:10:82:23:9f:ef:01:e5:
94:9e:60:42:18:83:45:ec:2c:e9:6c:14:a5:9e:1a:00:ae:12:
fb:3d:b8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:19 2025 by rpki-client