Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
File: 1e-BdSPHDnJw0q7lorbXJWojQiM.mft (raw, json)
Hash identifier: DqsQbQPoaDMRDF+i4YFDDb9z/acAVsbULvXcemjGiQs=
Subject key identifier: B2:C2:A5:38:3C:26:5A:DC:88:42:62:58:86:D3:DF:D6:8A:AD:F8:EB
Authority key identifier: D5:EF:81:75:23:C7:0E:72:70:D2:AE:E5:A2:B6:D7:25:6A:23:42:23
Certificate issuer: /CN=d5ef817523c70e7270d2aee5a2b6d7256a234223
Certificate serial: 019873E31258C06D2513ED6B1F4CA72729F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
Manifest number: 0288
Signing time: Mon 04 Aug 2025 07:01:57 +0000
Manifest this update: Mon 04 Aug 2025 07:01:57 +0000
Manifest next update: Tue 05 Aug 2025 07:01:57 +0000
Files and hashes: 1: 1e-BdSPHDnJw0q7lorbXJWojQiM.crl (hash: g3Qch3OjPbiA+4rRBPOPzovI0IUpr4HdmT6a8mvZMZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:12:58:c0:6d:25:13:ed:6b:1f:4c:a7:27:29:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ef817523c70e7270d2aee5a2b6d7256a234223
Validity
Not Before: Aug 4 07:01:57 2025 GMT
Not After : Aug 5 07:01:57 2025 GMT
Subject: CN=b2c2a5383c265adc8842625886d3dfd68aadf8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:c6:0b:fe:03:22:79:e2:05:63:13:98:85:
2d:e6:5f:f7:68:bf:f8:1c:3a:05:1b:f3:8a:d4:88:
e0:c6:76:af:5d:f6:da:9e:6e:61:b2:2d:58:7f:35:
c4:33:11:f3:cb:78:00:a4:1d:58:28:c7:4a:ad:5f:
ef:b2:f7:27:b8:84:3c:81:9a:48:84:e3:63:7d:12:
0a:5e:ae:20:c1:51:21:b8:2e:d1:8c:8c:43:76:12:
71:dd:59:77:d8:d6:77:21:60:89:70:a6:23:f3:5a:
9a:91:da:8f:98:6e:93:2f:88:59:2a:30:00:67:bc:
d3:8c:c3:bb:72:c7:cf:de:c5:66:8f:60:99:c1:bd:
c7:c1:98:8b:ec:0f:11:d7:19:84:bb:1c:88:5b:c5:
0b:b7:4a:a0:46:6f:e1:cd:b0:dd:4f:ee:f3:5b:be:
a1:6f:96:fe:fa:8f:5e:f0:98:ba:3a:12:d4:52:94:
39:eb:b4:0e:83:6f:49:1d:35:68:01:3e:2c:ba:ea:
7b:c2:fe:c4:9d:1e:51:20:97:de:c6:50:3a:90:7d:
f3:a6:4f:d0:38:cb:82:f3:38:27:84:91:97:57:31:
7b:f6:90:3f:3d:e7:b4:a2:30:af:46:99:c3:57:a9:
e1:33:63:de:82:88:07:4a:db:26:03:cb:e6:6a:13:
14:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C2:A5:38:3C:26:5A:DC:88:42:62:58:86:D3:DF:D6:8A:AD:F8:EB
X509v3 Authority Key Identifier:
keyid:D5:EF:81:75:23:C7:0E:72:70:D2:AE:E5:A2:B6:D7:25:6A:23:42:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9e:54:7a:38:46:11:17:10:d7:61:20:98:8b:43:14:2e:5f:
f3:e9:61:c0:0b:d6:79:6f:8a:2d:dc:c7:45:0f:6b:a1:0e:86:
31:a8:a7:63:fd:33:41:9e:bc:59:e2:a8:cc:69:91:e1:91:65:
c9:c1:9f:2e:8e:00:e6:e8:a7:ed:a5:da:f2:22:29:a1:d1:4a:
01:35:c4:5b:c8:bc:42:44:7b:d0:91:7c:ec:10:44:f1:ae:13:
2e:98:c9:44:61:7e:79:7a:5d:c3:dd:4c:68:f1:49:6e:45:48:
03:01:08:8a:52:60:ce:08:5f:2b:48:8c:5c:25:f2:b1:8d:fc:
70:e1:3e:ca:7d:66:15:05:f7:b3:ff:07:cc:03:b4:b5:7d:7e:
de:b3:3e:07:6c:08:48:f7:f9:c7:81:75:38:90:00:3f:57:f6:
2c:02:cc:11:c8:88:c7:27:02:9f:a6:47:dc:43:3b:fe:0f:f6:
45:43:ac:3e:02:6c:1c:f1:c9:46:53:16:0d:2e:fc:71:8d:a3:
d5:f7:4c:69:82:15:9a:b3:09:0e:ec:39:98:70:6e:b3:4b:af:
ce:64:28:37:3e:2e:34:ff:ed:3b:80:7f:2d:e1:2d:19:95:96:
93:f9:e4:8d:30:69:ce:e4:75:03:ba:16:1f:f0:c8:1e:cf:cb:
92:cc:50:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:31:49 2025 by rpki-client