Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
File: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft (raw, json)
Hash identifier: 2GM2xyK2m80mHXrg37hmBTBQhgbcbYV83hOY36uFUUo=
Subject key identifier: F8:2E:F0:7B:8C:68:A3:07:65:06:DC:EE:9D:7D:26:A8:3A:5B:7B:27
Authority key identifier: FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
Certificate issuer: /CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Certificate serial: 01976DAB78BB97606BF3C716ED415BCA2C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 09:00:43 +0000
Manifest this update: Sat 14 Jun 2025 09:00:43 +0000
Manifest next update: Sun 15 Jun 2025 09:00:43 +0000
Files and hashes: 1: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl (hash: pqG8a1yiW78JfSxkYOzm8tM2rWTOIWU+H87BzavK1BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:78:bb:97:60:6b:f3:c7:16:ed:41:5b:ca:2c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Validity
Not Before: Jun 14 09:00:43 2025 GMT
Not After : Jun 15 09:00:43 2025 GMT
Subject: CN=f82ef07b8c68a3076506dcee9d7d26a83a5b7b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d2:7d:f9:d6:4e:0e:d8:49:12:07:30:bf:2f:
df:ac:6e:08:24:c9:69:0f:11:e5:4f:f6:ef:b5:dc:
5e:26:6b:6b:21:be:81:dd:3e:dc:98:0d:31:6f:65:
37:66:45:42:ae:3b:b3:be:67:71:e8:f7:dc:c3:e5:
eb:b1:0a:cd:f7:20:7c:f9:3a:bb:b6:7a:d7:8c:cc:
e7:4f:b6:d5:98:c5:d3:b7:14:34:94:0c:e2:2b:82:
fb:8e:53:1c:17:8a:87:9d:42:22:d6:a8:b7:e7:4f:
9b:d4:82:32:e7:56:3b:11:84:50:7d:a1:d1:4c:1e:
37:5d:7c:7f:3a:2f:3c:a8:6e:82:44:55:9a:37:3c:
fa:f2:d3:44:e1:b2:89:88:a8:ba:85:44:f1:ab:4b:
39:22:39:48:7b:5a:f0:c8:5c:f0:f6:f5:a0:a4:02:
00:f5:a2:c4:dc:7e:a6:f9:c0:c8:cf:c5:b9:34:6e:
3f:93:12:0f:61:7d:7e:fd:36:4a:e4:69:09:b0:4c:
7d:21:f7:95:11:7b:0f:8c:47:55:b2:04:3b:61:e0:
57:b7:7c:a9:64:e6:c6:81:ee:94:ef:d6:93:28:6b:
a1:ed:7a:a7:4c:55:9c:d0:4b:06:bf:66:fa:12:74:
4e:ad:f3:24:8a:df:06:96:c9:b9:ab:c0:0d:fe:a8:
1a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2E:F0:7B:8C:68:A3:07:65:06:DC:EE:9D:7D:26:A8:3A:5B:7B:27
X509v3 Authority Key Identifier:
keyid:FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f2:c5:8c:15:57:4e:ca:36:5a:d5:ad:74:ef:db:76:3c:3b:41:
e4:3b:ee:00:c7:41:d2:81:87:a1:9a:3c:ae:70:75:c4:29:da:
43:d6:92:b3:65:85:61:12:fe:8b:6f:1d:1f:65:9e:59:a8:03:
9e:7e:f2:4c:f9:4e:15:68:dd:de:b1:dd:df:44:d4:39:ef:6b:
1c:51:06:7b:d0:0c:2b:c8:08:e6:91:3f:ab:ca:0d:95:55:a0:
30:1c:e1:6a:5e:6b:e6:43:11:ce:96:66:1e:de:61:fe:3f:59:
5e:f6:b2:05:46:9a:d1:69:25:4c:07:b5:47:9b:2d:5b:fb:3f:
5e:f3:b8:f4:83:41:c7:23:c2:08:35:83:07:1b:a2:fb:2f:61:
69:9e:0e:38:c5:ad:41:07:ad:b0:e1:ba:45:0a:8e:33:54:1c:
2d:4a:2b:3a:95:06:1b:59:92:50:2d:13:2e:1c:5f:de:32:c0:
f1:5f:ae:d9:c2:33:9f:45:98:84:bc:61:c4:76:d1:89:de:e8:
b4:74:2b:1a:15:55:3a:2d:c2:fd:3e:e1:f1:8a:73:bf:18:07:
99:4a:57:00:af:af:f8:68:4d:77:b4:1c:76:b2:61:22:70:39:
36:ff:46:a0:66:fd:dc:c5:db:d5:1f:38:10:23:24:42:23:b8:
69:1b:f5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:38:01 2025 by rpki-client