Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
File: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft (raw, json)
Hash identifier: DLaJkta16c6cR8/Y1JiAeuxgN69VVVLz7h/aJN6kR08=
Subject key identifier: B4:DF:3F:77:2D:86:DB:34:6D:47:09:E9:2C:24:53:F6:07:09:7E:4A
Authority key identifier: FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
Certificate issuer: /CN=fb280c05b76912a09cb12934db33c8e520acdd96
Certificate serial: 01976D3E8F9A7BFE65ABE0C748CB11D9C70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
Manifest number: 08BE
Signing time: Sat 14 Jun 2025 07:01:45 +0000
Manifest this update: Sat 14 Jun 2025 07:01:45 +0000
Manifest next update: Sun 15 Jun 2025 07:01:45 +0000
Files and hashes: 1: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl (hash: Isdj05MW7dvDdGx9FygLe2IPuEV7p8XEY40PfVAEgAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:8f:9a:7b:fe:65:ab:e0:c7:48:cb:11:d9:c7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb280c05b76912a09cb12934db33c8e520acdd96
Validity
Not Before: Jun 14 07:01:45 2025 GMT
Not After : Jun 15 07:01:45 2025 GMT
Subject: CN=b4df3f772d86db346d4709e92c2453f607097e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:ab:da:cb:90:64:ad:db:ca:28:ab:86:41:
0a:4e:4b:51:cc:9a:51:cb:62:c7:35:fc:44:48:f6:
6b:ae:73:c7:05:ab:b7:ff:ac:ed:38:71:7c:a0:a1:
b0:90:db:65:dd:67:3e:d8:01:82:d6:a3:83:02:db:
02:55:7b:de:11:24:07:a4:e8:fc:7d:b2:36:1b:aa:
0a:47:e4:9b:ae:b8:4e:d6:72:c8:2e:7d:f3:3a:6a:
87:b6:43:3b:09:63:c4:75:3d:1f:f2:86:1c:9e:2f:
c6:77:44:d2:61:ec:5f:f9:ce:61:72:c3:08:d1:c4:
b3:92:be:99:90:98:e7:8a:66:61:95:c1:88:38:b4:
9a:23:85:20:90:15:24:9b:b0:b6:4f:70:df:ea:30:
b3:9d:63:e6:ea:31:13:3f:9a:2c:b6:2c:64:3b:ba:
4d:82:ff:13:a9:53:6f:18:86:e5:02:96:31:23:16:
b9:23:63:0b:23:cf:5b:4c:86:9c:87:31:32:7d:e4:
14:87:01:81:80:75:bc:a2:54:e3:46:ff:82:75:e1:
0a:80:cc:50:dd:82:36:e0:44:94:9a:81:cc:81:d3:
81:5c:ef:aa:4f:bd:1a:af:4b:25:8e:20:bc:fa:94:
f6:8f:f8:99:8c:65:73:56:86:9c:e2:93:91:d8:73:
fd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DF:3F:77:2D:86:DB:34:6D:47:09:E9:2C:24:53:F6:07:09:7E:4A
X509v3 Authority Key Identifier:
keyid:FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:37:0c:34:82:df:e9:24:28:c6:7e:06:a2:b3:72:95:ba:18:
40:d4:08:a7:11:4f:47:d9:50:88:22:a3:c0:11:89:2a:33:85:
0a:58:6a:58:21:b5:04:61:41:32:e9:8f:fd:95:db:53:b9:6a:
2f:d2:13:4c:84:81:54:f9:c4:04:6b:c6:9b:89:be:f3:59:bb:
f8:94:af:48:6b:81:c2:d5:df:23:5b:40:63:1b:df:48:6a:17:
a9:4f:af:8b:3e:46:74:34:1b:cb:df:5d:f8:25:c4:97:b6:38:
76:72:1b:25:60:0f:b3:23:39:16:6d:f9:9f:e8:20:60:05:42:
03:94:e4:68:7c:c7:f8:22:0d:1d:5c:93:5f:53:db:43:51:5e:
39:24:99:c5:34:3c:04:61:de:9a:02:37:90:35:77:04:62:9b:
27:f4:08:52:f8:d2:d6:28:a6:cd:e3:de:85:22:0a:5c:6e:45:
ca:d9:f6:a9:87:1d:49:36:aa:5f:04:25:51:88:90:33:b2:bb:
e7:57:3c:ad:25:63:48:3f:29:7c:2c:9f:24:14:1e:ca:30:52:
1f:f1:d0:94:36:12:a3:40:ed:8a:5f:a8:c3:61:4e:48:e6:27:
15:4a:9f:1a:79:df:22:fe:08:a3:42:83:17:3b:d3:4b:fe:33:
79:07:24:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:37:50 2025 by rpki-client