Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
File: 1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json)
Hash identifier: jffoSoANasfYTFEE+pc13NTjxbViIBrh3c5P5UWw33Q=
Subject key identifier: 4F:B4:A8:51:3C:15:DE:4E:D4:6A:79:A6:6D:F5:61:99:62:60:67:AA
Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
Certificate issuer: /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Certificate serial: 01976C99087AFAB7ECEAB94AD2446FFE8C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
Manifest number: 1273
Signing time: Sat 14 Jun 2025 04:00:57 +0000
Manifest this update: Sat 14 Jun 2025 04:00:57 +0000
Manifest next update: Sun 15 Jun 2025 04:00:57 +0000
Files and hashes: 1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: J4QzcGQqPoOJYRcunhqrbEbZlYFVfs+4SChHB4Ofzd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:08:7a:fa:b7:ec:ea:b9:4a:d2:44:6f:fe:8c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Validity
Not Before: Jun 14 04:00:57 2025 GMT
Not After : Jun 15 04:00:57 2025 GMT
Subject: CN=4fb4a8513c15de4ed46a79a66df56199626067aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:8f:fb:68:b3:32:69:fd:41:1b:ba:e3:73:
cd:4a:cc:b9:33:d0:ac:1c:1c:93:95:2b:07:60:9b:
65:c0:44:c2:50:42:61:6d:da:cd:87:fd:ef:83:6a:
18:f4:99:ff:2d:3a:4f:26:85:1a:45:f2:1d:e7:58:
cf:53:fc:b0:7a:15:0d:77:2b:8c:0a:1d:af:0a:e1:
65:5b:05:22:3e:ab:12:d1:18:17:43:09:e0:3d:a7:
ec:80:a5:42:22:3d:43:4a:fa:11:ae:b0:11:1b:c9:
25:a6:96:c7:be:0d:0a:9e:14:cf:fa:f9:58:6f:b0:
29:a2:8e:01:d4:5a:18:ff:64:3d:29:9e:0b:2d:99:
5a:d7:7f:e4:be:aa:68:29:84:e4:42:d2:ed:4f:0d:
14:a8:dd:79:42:c0:24:8f:47:be:ff:1f:0c:d2:f1:
c6:2f:2a:1a:ff:58:19:54:2c:4d:69:0c:2a:0e:b0:
47:51:10:c1:7e:7c:fe:92:4f:eb:b8:74:44:d7:7d:
79:51:ad:73:43:f7:be:b5:7a:a9:a6:05:2f:ba:ff:
91:b5:28:e3:4f:b1:c5:7d:11:18:78:e4:4c:58:58:
9c:23:83:8b:49:9f:2f:a2:9c:60:a6:39:19:2c:46:
8e:8c:a5:0a:0e:80:91:ce:0f:ef:a3:5b:41:f3:01:
f5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B4:A8:51:3C:15:DE:4E:D4:6A:79:A6:6D:F5:61:99:62:60:67:AA
X509v3 Authority Key Identifier:
keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c9:aa:63:06:c7:41:64:f6:97:72:2b:09:b6:a1:c4:1c:34:
55:17:2c:9f:86:c7:36:28:3f:62:78:f4:fa:47:a7:8c:d3:9a:
60:7f:64:f4:18:21:be:9e:32:8a:bc:43:df:95:21:bc:2c:ee:
c8:41:58:a5:03:01:11:9e:43:ca:87:91:14:bc:dd:c3:cb:79:
26:8c:29:0c:54:9c:83:58:47:f4:c4:6b:c9:dd:1e:e6:4a:a9:
a3:77:73:bc:ac:87:aa:4b:c2:4e:94:17:37:4d:85:be:19:29:
fb:99:a5:52:64:c0:9e:19:89:24:9a:de:b1:0a:32:4f:b7:21:
16:84:2a:be:14:d8:0f:0e:4b:19:8e:aa:5d:27:3c:ba:0d:c2:
d5:e4:99:72:cc:37:22:80:ab:6c:09:44:13:c8:10:f8:31:fd:
97:ed:70:4b:fd:f0:7e:d8:29:d0:f5:be:4a:c3:d2:29:43:3b:
2b:33:21:15:8b:a4:a0:7f:5a:d8:f6:84:99:3a:30:3b:91:85:
04:64:db:18:e2:bc:85:af:fe:93:20:fb:a9:ce:54:f6:2b:a0:
e3:2c:e9:2a:79:78:14:7f:e8:fb:83:de:15:de:d8:f1:df:9d:
da:12:99:b9:cf:89:56:95:c8:14:24:b4:2d:a7:71:95:a0:1a:
3a:e9:ca:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:11:38 2025 by rpki-client