Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
File: 1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json)
Hash identifier: DpTbcFFOUs3BdYZEiaVAwNZsicyHA7uDbYZpTBliRmg=
Subject key identifier: BD:9A:48:B7:54:75:FD:D6:FC:E3:0D:28:E4:98:A2:2B:82:43:5C:78
Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
Certificate issuer: /CN=d4876414dc995d14ede3a01a323b62b906f83c57
Certificate serial: 01976A05FFA52B1C84AEFEF999777C707B26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
Manifest number: 0514
Signing time: Fri 13 Jun 2025 16:01:07 +0000
Manifest this update: Fri 13 Jun 2025 16:01:07 +0000
Manifest next update: Sat 14 Jun 2025 16:01:07 +0000
Files and hashes: 1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: rTvj82cv03EUbNoX3mEnko0u8L8kJCKC4PxNPGV1nfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:ff:a5:2b:1c:84:ae:fe:f9:99:77:7c:70:7b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57
Validity
Not Before: Jun 13 16:01:07 2025 GMT
Not After : Jun 14 16:01:07 2025 GMT
Subject: CN=bd9a48b75475fdd6fce30d28e498a22b82435c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:d2:bd:b8:7f:8e:78:d9:31:55:d3:69:cd:
10:b8:be:55:13:91:bd:40:fa:e0:d0:aa:3d:0e:1b:
b0:44:2e:dd:be:af:b1:a5:92:1e:1b:9a:eb:1c:f9:
b7:79:3d:84:a3:cc:5f:19:09:86:5d:b6:3b:77:a4:
bb:05:9b:c2:db:30:0b:f9:fa:05:85:4c:42:c1:9d:
a1:61:73:6d:6c:ed:56:2c:19:79:5a:46:59:01:9f:
0a:d0:41:81:96:6b:14:93:4c:11:af:cc:9d:63:3b:
25:f6:fd:ed:a1:db:0a:b2:42:d0:d7:70:64:bd:fc:
6f:9f:3e:01:96:c9:1e:62:87:7f:a0:e7:f9:cb:87:
ff:18:63:b6:d0:a6:85:1a:7d:31:3e:d5:1a:85:a1:
72:7a:80:7d:25:2c:4b:12:56:6a:80:ad:dc:da:d9:
ee:eb:6b:2a:02:00:3f:59:68:8d:0c:9f:31:c7:26:
d2:ec:49:d5:3f:5b:4c:63:a6:74:53:f2:54:78:4b:
34:df:eb:4c:4a:bb:a0:8d:8e:91:45:07:fe:7e:6f:
ab:0b:53:d9:f3:c7:c9:a3:b5:80:15:41:ea:dd:86:
b7:a7:be:32:a2:be:58:44:1e:eb:5c:c1:96:20:44:
03:29:b2:ef:a2:a4:23:07:2a:2c:79:f6:82:ec:86:
7a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9A:48:B7:54:75:FD:D6:FC:E3:0D:28:E4:98:A2:2B:82:43:5C:78
X509v3 Authority Key Identifier:
keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ae:9f:b2:95:66:f0:01:5a:c7:ba:ff:52:fc:7b:f0:23:02:
67:2e:84:e7:7d:d4:49:cf:c0:b4:e7:53:f8:e8:b1:a1:53:9d:
61:a5:34:9e:e0:ac:b7:f3:1d:ef:55:36:63:90:06:39:63:54:
af:ac:73:35:72:5b:b2:1d:30:b7:36:26:f7:6a:c3:b8:a8:50:
48:fd:b4:a2:b2:4c:3d:3d:f9:d4:aa:7c:13:ec:32:57:c6:2a:
92:cc:26:61:91:2b:8d:b9:4e:85:3d:3c:f7:ac:aa:e0:bd:d8:
35:e5:a4:78:02:29:57:48:33:18:df:bf:54:35:f6:09:94:8c:
de:be:94:b1:52:9d:60:f4:90:89:71:4f:18:99:e5:b6:0e:5b:
4f:f4:08:b1:3f:11:c7:c9:24:70:b0:cb:a1:22:fd:31:63:0b:
82:0c:86:39:34:dd:97:08:4b:0c:c0:2b:5e:18:e1:c0:fa:52:
53:66:40:a4:4b:48:81:1c:b8:95:13:05:0f:2f:e5:0b:7e:9f:
4a:36:e6:0e:9c:8e:03:bd:68:c3:c8:93:2f:dc:7c:0b:70:f8:
48:b5:b1:d8:56:22:2c:02:fd:0a:7f:61:6e:49:00:b0:ee:ba:
d1:a8:06:a0:61:90:7b:28:b1:dc:da:8d:7f:2e:9b:32:51:bb:
fc:02:e4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:25 2025 by rpki-client