Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
File: 1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json)
Hash identifier: VcgJvpOF8ZY3mAG9OpilNz+n54TeDiA+WFVV43cDGPg=
Subject key identifier: 11:8B:91:20:A6:B0:01:EC:0A:4A:07:6F:35:AD:E4:2A:F5:0A:6D:B8
Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
Certificate issuer: /CN=fbbe52d834e268dc698830292fde4b63c7da392e
Certificate serial: 019774F820897A480E798E3F64AB5CEC47C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
Manifest number: 0B14
Signing time: Sun 15 Jun 2025 19:01:47 +0000
Manifest this update: Sun 15 Jun 2025 19:01:47 +0000
Manifest next update: Mon 16 Jun 2025 19:01:47 +0000
Files and hashes: 1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: clhV7CVqj1zESpCKDHVXFJpPP/4xxQ7jR72gc8HFrD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f8:20:89:7a:48:0e:79:8e:3f:64:ab:5c:ec:47:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e
Validity
Not Before: Jun 15 19:01:47 2025 GMT
Not After : Jun 16 19:01:47 2025 GMT
Subject: CN=118b9120a6b001ec0a4a076f35ade42af50a6db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:74:bd:fc:13:47:27:69:f5:47:f0:2b:04:
94:93:4a:4f:55:ec:6c:00:f1:99:51:c5:bc:66:63:
97:63:1e:c0:fc:39:9c:03:17:33:07:01:7f:45:7d:
b3:d1:41:3f:17:b8:d8:27:0a:ae:e0:21:f1:37:4f:
fd:25:9e:d1:d0:a5:8d:e2:69:b6:c3:cf:95:60:08:
f5:d3:fb:ad:b6:b8:fd:0d:8d:55:05:a1:f5:34:dd:
74:6a:a6:56:9c:e5:ac:90:ca:3a:50:94:f7:df:24:
9f:c2:89:83:e3:0c:13:60:a5:7f:e4:6c:4b:6f:07:
f1:e4:d0:81:9c:7c:d6:7f:48:85:52:57:e9:c8:75:
29:d3:e5:e8:95:d2:34:0b:7c:d0:3f:2b:52:33:3c:
ab:fb:4e:af:69:0e:be:f6:eb:89:8f:ad:c2:d3:61:
ac:fc:3c:71:de:10:6a:67:f5:9d:be:ff:ef:4f:71:
d9:22:2f:a7:50:a2:83:8e:98:af:d2:53:7f:78:e9:
e0:22:f6:6e:23:d8:ff:c0:99:bd:85:a1:1d:17:5d:
3e:89:93:5c:9c:c4:96:d8:18:7f:e3:75:24:49:09:
af:94:8a:3b:b0:da:bf:b6:9a:f6:2d:92:17:f1:82:
d3:ab:e2:bb:c6:73:bf:91:7f:75:6e:a9:dd:15:20:
a0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8B:91:20:A6:B0:01:EC:0A:4A:07:6F:35:AD:E4:2A:F5:0A:6D:B8
X509v3 Authority Key Identifier:
keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9b:09:33:18:d3:6d:47:a4:5b:37:de:10:bd:70:ea:13:ef:
b4:2a:17:35:c2:ab:1f:6c:68:e6:06:09:d7:89:9d:e2:2e:15:
7f:d8:ed:86:a4:f5:bd:4f:c2:89:1b:f9:5a:2a:81:1d:f7:62:
9c:5d:44:44:38:aa:03:29:fa:8c:2a:49:7b:8e:bf:50:d2:61:
59:fd:1d:66:ae:9b:6b:a5:c0:f3:b5:43:cd:35:b8:6d:84:8f:
fb:7b:01:35:74:64:ca:14:b2:84:42:83:7c:f4:5f:a7:7f:23:
07:5e:cb:17:0b:d4:66:01:27:0f:e1:e5:21:4d:09:94:67:f5:
20:b4:46:fa:4b:5d:18:d9:66:bd:93:be:41:a9:30:6c:9e:b0:
2e:97:60:90:79:de:fd:8d:51:5f:99:4d:4b:3c:13:22:cd:2d:
d8:7d:a9:a8:67:00:82:a7:ee:d9:72:e5:32:bc:53:e7:48:7c:
0c:5e:8e:ba:b7:25:b6:2e:3c:82:7a:20:4b:40:9b:fc:97:ec:
f7:05:6b:40:b4:b3:34:2e:60:b6:cc:1c:c3:8f:ea:b5:6c:bd:
2e:fd:34:e4:37:66:e8:d8:d3:84:96:7a:62:79:61:b9:3e:fd:
98:6f:99:18:a1:64:8e:d3:6a:ec:99:ec:3f:0a:6b:2c:d8:bb:
f7:70:42:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:40:50 2025 by rpki-client