Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
File: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft (raw, json)
Hash identifier: UUir5LoaVYTuF3FBAP/KJGjTB6u+Mylex9Kg7X9Td/E=
Subject key identifier: DB:8B:08:C3:88:52:B7:36:EB:93:1C:8B:D2:34:31:CB:6F:EF:0C:2B
Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Certificate serial: 01976D3DAFCA8E74CF78BE4EC0BF37725016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
Manifest number: 1014
Signing time: Sat 14 Jun 2025 07:00:48 +0000
Manifest this update: Sat 14 Jun 2025 07:00:48 +0000
Manifest next update: Sun 15 Jun 2025 07:00:48 +0000
Files and hashes: 1: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl (hash: K5ekS4ABHQlARsce5YDRcO7ZZAkiX+82x1bHU8w4PbI=)
2: sdcv864WQrJBi5xKuVwuLH2j6Tk.roa (hash: eFYC5loUXzRtmrgy7poaf0InOUtNFCrHQGg1kdVt86Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:af:ca:8e:74:cf:78:be:4e:c0:bf:37:72:50:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Validity
Not Before: Jun 14 07:00:48 2025 GMT
Not After : Jun 15 07:00:48 2025 GMT
Subject: CN=db8b08c38852b736eb931c8bd23431cb6fef0c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:47:43:60:dd:23:65:e4:1a:a2:35:e1:cb:d8:
ba:d1:8b:17:68:ff:f5:34:ed:be:58:ce:9f:a2:36:
95:ce:4b:e5:63:bd:d8:a6:2f:42:66:05:46:84:db:
65:17:2c:23:f3:1c:77:bf:35:91:2a:06:23:fe:bd:
e4:27:d0:19:9d:d1:fa:d5:6c:04:b2:22:15:e2:cf:
da:4b:cd:a1:1d:3e:79:c1:55:4a:28:31:65:26:5b:
83:eb:b9:9d:51:cc:95:b2:3e:61:d4:6e:f4:30:39:
7d:27:f8:e6:7b:3d:ab:73:68:b6:a1:13:2d:68:6b:
ae:ea:0d:31:f9:a5:77:47:51:03:47:da:99:09:fc:
dd:f5:76:61:1d:0f:6c:e1:48:50:93:7d:0a:ef:89:
7b:66:01:c0:1f:9b:c0:0d:aa:5c:6b:8f:a0:7e:6c:
8d:c6:53:03:f7:2d:e1:63:e7:39:a3:6e:7f:4e:38:
c2:3f:a1:4a:3f:d7:05:64:cc:8f:0b:de:76:55:fe:
d6:ad:4b:b9:6b:d8:54:3e:70:98:c9:a5:bb:1e:6d:
dd:4b:13:03:45:a6:49:43:95:4a:c4:c7:6a:88:d0:
74:65:19:0c:75:c9:dc:62:f1:89:2e:a4:a9:27:92:
ec:7a:0f:2b:6a:c7:96:39:d5:66:3d:29:13:cb:43:
61:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8B:08:C3:88:52:B7:36:EB:93:1C:8B:D2:34:31:CB:6F:EF:0C:2B
X509v3 Authority Key Identifier:
keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:dd:cd:c9:58:07:94:1b:73:3e:bb:ad:e0:35:95:ad:1b:2c:
76:98:99:84:40:39:98:1e:de:4c:0b:cc:ff:d4:40:d9:f2:bd:
ba:9e:d1:d5:c0:80:83:d5:7e:aa:d6:61:93:b1:e7:9e:56:00:
b4:06:5e:88:70:c7:32:f6:75:d1:cd:33:47:27:22:92:d9:0b:
f6:a1:63:00:49:64:e7:17:39:0c:c0:44:4e:6f:7f:fb:91:b4:
3c:a5:1c:dc:87:01:e0:4f:95:cd:8f:36:9e:16:7a:91:df:27:
dd:8d:ee:11:46:e3:43:db:6e:cc:59:7a:1e:f0:e0:b1:97:d8:
56:f6:b5:0d:69:10:c6:b0:65:2f:19:bb:81:b1:00:ed:fb:e8:
e4:c4:e9:57:89:9b:2e:6f:73:b8:fe:0e:f0:41:c8:4f:f2:e0:
32:e5:67:1e:45:04:8e:6b:42:b1:7b:5b:96:22:ef:14:32:02:
b2:c9:e4:45:0d:7b:a9:d5:fd:9e:77:14:5c:58:a0:08:8f:f7:
5d:15:60:97:ea:ec:3d:f4:06:9a:93:59:a3:03:fa:92:15:0c:
59:72:4c:b8:13:c9:13:33:0a:67:a4:64:1d:19:46:71:f9:5c:
c1:e5:92:67:d6:91:b1:86:a9:b8:bd:98:11:a2:44:2e:e7:59:
6e:e1:44:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:56:46 2025 by rpki-client