Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
File: fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft (raw, json)
Hash identifier: rQHUpI5/ozD5ItiE1SGGiXWbP0xi9yOh6o8vQfp6L+E=
Subject key identifier: D1:74:0A:0B:8D:7E:4A:61:9D:61:A2:6B:05:E4:2F:59:6C:C7:28:1A
Authority key identifier: 7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
Certificate issuer: /CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Certificate serial: 0197BA7D7F62659C30BCC8CD878D79D2BAE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
Manifest number: 08E9
Signing time: Sun 29 Jun 2025 07:01:16 +0000
Manifest this update: Sun 29 Jun 2025 07:01:16 +0000
Manifest next update: Mon 30 Jun 2025 07:01:16 +0000
Files and hashes: 1: fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl (hash: JKji7mu/fd/SzlOEYZVJeMLb629bzbB0hYBrh48hijs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:7f:62:65:9c:30:bc:c8:cd:87:8d:79:d2:ba:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Validity
Not Before: Jun 29 07:01:16 2025 GMT
Not After : Jun 30 07:01:16 2025 GMT
Subject: CN=d1740a0b8d7e4a619d61a26b05e42f596cc7281a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8c:f0:d0:2c:a4:e7:30:2f:36:d0:d6:21:33:
56:d4:86:c9:c7:d9:f4:c2:5a:63:5a:0c:6f:8f:8c:
7b:34:4c:c4:02:7e:69:e0:b7:7f:98:24:34:c4:40:
aa:17:86:3f:da:42:83:87:0f:39:07:f1:b6:14:8b:
c7:3b:54:54:32:75:6c:26:08:88:ab:f5:78:47:d1:
cc:47:14:7d:b6:f9:46:28:ae:25:69:dd:19:61:8d:
84:89:d4:8e:a1:e4:b3:d9:7e:42:18:d6:4f:d6:38:
14:b4:6b:0b:3a:b5:e8:29:5b:a1:3e:f2:04:a6:0a:
f1:53:78:22:d6:68:d9:5b:a6:01:e3:fc:37:57:07:
04:71:53:18:ec:8d:05:e6:80:6d:23:f5:67:e9:40:
93:0b:fe:15:2f:e8:bc:b3:a0:94:ce:df:23:85:c0:
ed:05:4e:a6:d2:21:32:60:a9:d3:ff:9d:41:d0:52:
8b:f5:67:9b:80:97:86:f5:cd:6a:3a:49:60:df:19:
8d:fa:00:4a:ce:1a:73:a4:ab:7a:b7:91:1a:8e:fc:
a1:82:29:13:ec:c6:e4:08:b3:00:c2:32:67:b9:1d:
20:93:30:a6:96:a5:60:de:12:19:f4:14:7f:a3:e7:
6f:e5:21:a3:be:84:6c:61:70:c4:bd:89:ca:c9:6a:
7b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:0A:0B:8D:7E:4A:61:9D:61:A2:6B:05:E4:2F:59:6C:C7:28:1A
X509v3 Authority Key Identifier:
keyid:7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4b:f3:a7:ba:4d:47:9a:50:93:43:23:5e:33:9b:99:0f:e7:
9a:ad:f3:8f:06:1b:a5:c3:05:28:7c:f6:32:94:ad:45:5b:f7:
b6:0c:9c:4a:13:7e:56:72:69:de:2d:6f:67:35:f7:88:0e:be:
43:85:41:d6:79:8c:f9:82:15:1f:1d:d7:95:82:da:c8:be:6b:
bf:41:95:fa:71:a4:47:56:40:a2:d8:aa:3d:89:3b:ae:84:6a:
d0:20:32:d9:bb:ab:59:39:d9:65:ea:11:9c:7b:ee:eb:07:d9:
f0:b7:3a:26:11:c7:36:78:be:4a:76:d5:7e:f8:2b:76:d1:ae:
6a:3e:51:1a:9f:8d:a6:48:33:fc:2d:b5:7c:0e:e2:03:00:64:
e6:25:e2:1a:34:ef:08:3d:d2:7f:69:35:0e:62:49:0c:79:75:
03:7b:ef:1c:ad:66:38:52:6d:a9:42:72:ee:89:b9:d5:c6:47:
1c:93:d4:98:93:81:8f:92:f1:3e:36:20:2a:a1:9d:46:dd:d2:
db:77:7d:d1:4d:05:c5:35:88:78:ca:63:b5:96:5e:8a:fb:1a:
18:36:46:c1:d5:39:6b:98:0a:4b:a8:cc:5b:03:72:09:8b:14:
0f:38:61:c9:6e:43:83:62:3f:54:21:f3:12:52:51:ab:8a:0e:
8c:9d:2d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:35:12 2025 by rpki-client