Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
File: _C71HmsUo-6_tImOD6gTq2eIUTY.mft (raw, json)
Hash identifier: qMlXcviGfxAaB1kXfXz2ehrWkqt+ML9zcG7RQ+OTxgw=
Subject key identifier: 64:81:2F:D3:96:BE:43:55:9D:BD:08:36:E5:5A:41:DA:E1:C4:FC:A8
Authority key identifier: FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
Certificate issuer: /CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Certificate serial: 0197B88E9E54257BAE02C985350E0A78A6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
Manifest number: 0D16
Signing time: Sat 28 Jun 2025 22:00:43 +0000
Manifest this update: Sat 28 Jun 2025 22:00:43 +0000
Manifest next update: Sun 29 Jun 2025 22:00:43 +0000
Files and hashes: 1: _C71HmsUo-6_tImOD6gTq2eIUTY.crl (hash: sRg2FN28/SDtBqt8AliBXzyqt2ywUYUErDKshjsoMCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:9e:54:25:7b:ae:02:c9:85:35:0e:0a:78:a6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Validity
Not Before: Jun 28 22:00:43 2025 GMT
Not After : Jun 29 22:00:43 2025 GMT
Subject: CN=64812fd396be43559dbd0836e55a41dae1c4fca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6e:81:af:19:2c:1e:67:bb:97:ef:4a:c0:34:
13:b2:3e:12:c7:95:23:5c:6d:23:30:a1:7c:e2:2a:
b1:67:ae:bf:63:00:5e:1e:8d:98:0a:68:1f:4b:cb:
ad:d1:06:a0:36:b0:db:0c:60:5c:dd:39:ad:f1:fd:
88:47:66:bc:5c:32:db:6e:e0:46:80:88:19:24:c9:
f0:28:ce:6c:4f:a7:15:f6:94:25:fd:a8:7a:23:2c:
6b:cf:d9:d7:b2:74:48:94:3b:e1:94:17:91:89:39:
91:e4:9a:2c:64:8f:5e:74:34:cd:bc:4f:dc:79:98:
34:2f:7d:4c:dc:e5:94:3c:e1:7b:75:cc:3c:d8:03:
89:b7:44:4e:e5:0e:73:0f:91:9a:47:f5:b9:11:d6:
91:2a:68:f5:06:d7:99:88:41:3d:7e:79:a9:f4:24:
5d:33:2f:d4:a1:e9:2b:9b:94:ee:eb:2f:65:68:5a:
73:1e:d6:8c:7c:d8:27:c0:53:e7:fc:1c:b3:e5:cf:
40:46:9e:27:94:aa:a0:b7:96:e1:3c:4a:80:38:aa:
af:54:56:c6:2f:bc:29:8c:54:24:dd:30:0b:e8:78:
43:89:80:81:f1:90:88:2c:69:ed:54:d7:95:be:a7:
f9:80:cb:e7:e9:a7:dc:7f:19:79:92:9a:5f:0d:7a:
82:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:81:2F:D3:96:BE:43:55:9D:BD:08:36:E5:5A:41:DA:E1:C4:FC:A8
X509v3 Authority Key Identifier:
keyid:FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:20:f7:2d:e4:64:06:62:96:c7:09:5d:5c:52:97:a9:e0:cc:
35:06:29:84:de:f3:3b:cc:25:34:07:3b:51:ab:8d:b4:89:d1:
24:69:0f:1a:f1:3e:9a:e3:0a:6a:47:a6:fd:29:fd:50:2b:92:
97:8f:f4:b9:93:dc:5e:81:c4:8f:c5:f7:76:bd:b8:ba:bc:a9:
f6:82:ef:b6:d4:de:ac:c0:e5:56:b6:56:d2:4f:f0:b5:75:f7:
af:36:63:25:4d:f4:c6:dd:22:ff:46:d6:ee:11:01:88:d1:7c:
08:42:03:6b:b7:fc:e4:13:85:48:eb:a3:11:04:d7:9c:b1:e2:
06:ae:82:c3:2e:da:53:02:97:69:cd:40:63:3c:30:51:24:df:
cd:fd:21:fe:dc:02:30:f8:23:ee:5f:4e:e5:8e:7b:b1:d3:7e:
08:ea:5f:44:c0:a0:93:0b:12:6a:9e:4b:fb:35:e2:0b:b2:84:
d9:23:d8:cc:25:59:4f:0a:16:50:6a:78:ce:61:a0:de:f7:3a:
b4:52:df:c7:3a:92:78:e7:5e:b4:01:88:55:3b:5e:76:24:8a:
d5:8a:aa:48:96:9d:3f:f4:6c:db:04:ec:15:52:38:63:19:ca:
81:25:da:a1:16:69:7d:e1:71:c5:f5:6c:c6:0d:f4:c2:b7:0d:
f0:7e:74:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:40:15 2025 by rpki-client