Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.mft
File: 1-75t-tXrSOmB5A0KS8VatHGuXdk.mft (raw, json)
Hash identifier: Z6/58sdKb9aDmmFc4yGdMrJGzVaiknGi5UbalHdDDhM=
Subject key identifier: 6C:8B:4C:8D:C9:13:1F:28:EB:1D:4A:D2:07:38:A4:8F:5C:C0:98:F5
Authority key identifier: FB:BE:6D:FA:D5:EB:48:E9:81:E4:0D:0A:4B:C5:5A:B4:71:AE:5D:D9
Certificate issuer: /CN=fbbe6dfad5eb48e981e40d0a4bc55ab471ae5dd9
Certificate serial: 01967567ACAE9E52D261857B828DBD1A26DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75t-tXrSOmB5A0KS8VatHGuXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.mft
Manifest number: 0796
Signing time: Sun 27 Apr 2025 04:00:50 +0000
Manifest this update: Sun 27 Apr 2025 04:00:50 +0000
Manifest next update: Mon 28 Apr 2025 04:00:50 +0000
Files and hashes: 1: 1-75t-tXrSOmB5A0KS8VatHGuXdk.crl (hash: wo1EgXn7Al501gfsAef3r6HAnaP6Bgl817sR9ZuDQ1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75t-tXrSOmB5A0KS8VatHGuXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:ac:ae:9e:52:d2:61:85:7b:82:8d:bd:1a:26:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe6dfad5eb48e981e40d0a4bc55ab471ae5dd9
Validity
Not Before: Apr 27 04:00:50 2025 GMT
Not After : Apr 28 04:00:50 2025 GMT
Subject: CN=6c8b4c8dc9131f28eb1d4ad20738a48f5cc098f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a9:9e:fa:55:54:dc:21:40:58:8c:60:45:cb:
c7:b4:b1:f0:98:95:fb:bc:b0:27:97:07:93:22:82:
91:d1:bf:c7:25:91:1b:b4:60:b0:37:48:55:a5:e9:
5c:09:91:f6:b9:d2:a3:da:48:ac:37:a5:a3:60:79:
8a:3b:bc:3b:58:72:f4:60:e0:c2:a4:41:5a:ba:4d:
99:89:f4:b2:de:a2:eb:37:9d:25:94:79:33:af:0f:
6f:21:97:2f:27:a1:6e:16:a4:61:d2:6c:5d:19:0f:
88:7c:15:11:b0:71:ff:a7:7f:c7:4f:19:ea:cb:ca:
3e:e1:98:8f:5b:13:f7:31:20:4c:ec:f3:6a:21:9c:
14:bf:39:2c:d2:a0:29:67:96:e2:3d:59:8c:98:8d:
06:ff:88:4e:57:b5:84:c6:73:07:3e:e7:0b:f3:ae:
fb:ed:7c:54:f1:30:d0:c8:14:53:63:38:e0:38:b3:
9f:d6:63:5e:df:1a:77:a5:29:81:b6:a7:2d:ca:1b:
99:af:3e:fb:e6:a6:99:a5:0e:2e:5f:b5:7f:87:aa:
ba:fb:95:69:ac:ad:f1:15:dc:7d:15:6e:b0:08:bd:
11:13:35:7b:4d:bf:2f:fe:b8:1c:43:07:3a:3c:37:
94:f3:c7:73:30:08:d7:fb:da:70:4d:66:f8:ad:76:
82:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8B:4C:8D:C9:13:1F:28:EB:1D:4A:D2:07:38:A4:8F:5C:C0:98:F5
X509v3 Authority Key Identifier:
keyid:FB:BE:6D:FA:D5:EB:48:E9:81:E4:0D:0A:4B:C5:5A:B4:71:AE:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75t-tXrSOmB5A0KS8VatHGuXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9a:31:b7:ae:6d:21:85:2f:48:93:a4:7e:f6:5f:57:f0:27:
a5:a8:9b:8e:f9:44:d1:8d:c5:b9:66:1e:df:ac:ef:e7:20:7a:
29:d6:3d:a5:9e:af:ef:77:6c:5d:00:df:ca:5b:2c:8d:6f:e6:
a0:58:ed:85:9d:e3:af:41:bf:11:84:bf:aa:07:4c:32:9d:36:
68:9e:82:d7:d4:db:db:96:20:e3:a9:83:c6:d3:a3:fd:38:98:
8f:7b:37:c9:2b:46:cb:f1:d0:df:cc:73:e0:49:4c:d5:73:e5:
ff:ad:4e:bf:d4:86:25:90:df:10:89:d3:d8:1c:01:64:c7:8d:
1d:b5:32:08:62:8a:87:fb:d4:27:a7:35:0b:d8:2e:21:dd:81:
a0:b9:84:a5:6e:06:0f:ca:f6:18:45:19:34:f6:ef:ca:36:dc:
b3:32:72:97:85:24:b3:b0:a0:8d:81:63:c7:a0:67:9f:23:9e:
ee:d5:63:87:cb:ec:ad:89:f2:1f:10:73:8f:8a:a6:e9:fc:96:
85:d5:74:84:27:41:eb:31:15:1b:1b:61:df:3f:72:76:18:1e:
59:5d:9b:5b:bf:89:34:bb:be:f1:03:a2:cf:5a:df:eb:f8:bb:
d6:eb:92:77:14:0e:a2:5b:60:d9:75:a6:8b:7a:5b:e7:73:6f:
d3:98:13:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:46:08 2025 by rpki-client