Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
File: fkL5qpHFODs-cnVy67GVWRqHYM4.mft (raw, json)
Hash identifier: q/lAMmgfBa1cQczG73yRJx8khT9PKu7mPqevEvYmcGs=
Subject key identifier: B3:B8:41:58:BF:E2:66:56:DA:52:37:E7:7E:4B:B8:9E:D1:AD:F0:95
Authority key identifier: 7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE
Certificate issuer: /CN=7e42f9aa91c5383b3e727572ebb195591a8760ce
Certificate serial: 0197BA7DDD6D09B72B8ECC93BDB87B05F2AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
Manifest number: 064E
Signing time: Sun 29 Jun 2025 07:01:40 +0000
Manifest this update: Sun 29 Jun 2025 07:01:40 +0000
Manifest next update: Mon 30 Jun 2025 07:01:40 +0000
Files and hashes: 1: fkL5qpHFODs-cnVy67GVWRqHYM4.crl (hash: SAa2GnxcNevgLeoCn/LatNaFFqLH2iD33i5a44SVrLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:dd:6d:09:b7:2b:8e:cc:93:bd:b8:7b:05:f2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42f9aa91c5383b3e727572ebb195591a8760ce
Validity
Not Before: Jun 29 07:01:40 2025 GMT
Not After : Jun 30 07:01:40 2025 GMT
Subject: CN=b3b84158bfe26656da5237e77e4bb89ed1adf095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:2f:1c:dd:f7:7f:87:2f:4c:9c:fa:0c:e4:
44:e4:66:4b:32:1c:ec:8d:6a:d3:ce:d0:20:f8:79:
bc:55:10:4d:29:39:6c:89:08:ce:07:33:d2:07:64:
7f:c1:49:b9:68:f9:da:04:e0:f9:9b:44:8f:70:b6:
e8:9e:93:12:40:69:70:92:80:e1:73:d7:96:c4:75:
d3:d9:5c:ff:36:0c:22:cd:ae:f0:42:a5:36:ca:f8:
f6:67:d2:8c:36:0c:75:16:1c:c8:7b:c4:63:f0:b2:
71:00:cd:35:8c:08:aa:e0:fa:4e:41:4b:83:77:6c:
87:7a:34:de:df:94:12:7a:56:32:51:8b:31:96:0b:
d5:4a:fc:9c:3d:4b:46:b5:bd:79:d3:90:2c:ef:44:
79:49:8f:ae:3d:19:34:be:4e:4b:60:78:9e:e4:cf:
0f:71:0c:37:04:1c:07:44:2e:96:2d:78:db:d7:24:
74:5b:80:cc:10:26:b8:3a:8f:a6:d0:f4:fb:96:9f:
f7:03:76:da:20:ed:3f:d1:5c:67:e2:35:19:f0:8d:
82:6d:3c:90:a8:37:43:06:33:34:90:9c:fd:cf:3d:
ef:c4:37:9c:65:ea:6d:b1:92:19:bc:c2:d2:74:1d:
52:67:d6:ca:0c:1d:4c:4e:b9:f6:1e:61:f9:87:5a:
42:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B8:41:58:BF:E2:66:56:DA:52:37:E7:7E:4B:B8:9E:D1:AD:F0:95
X509v3 Authority Key Identifier:
keyid:7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:71:c7:f9:b1:7e:ca:e3:eb:61:ff:9d:45:68:92:52:d4:dd:
f6:9c:f6:0e:e4:69:41:87:5f:5f:77:d7:0f:36:88:95:81:55:
59:70:e5:6c:cf:71:97:19:92:d1:c2:9b:85:9c:71:ca:05:f8:
07:b5:a4:29:65:9b:80:5c:fe:91:44:84:60:81:ea:0f:b8:08:
9b:41:26:32:ae:40:65:21:f4:ca:3e:64:1f:d2:29:71:10:7e:
40:0b:63:c3:29:31:6f:d5:df:2b:12:1f:3a:92:4e:91:db:b3:
c0:61:a8:99:20:90:10:e8:b5:de:67:5f:34:86:04:76:07:4a:
f3:09:59:56:fe:59:9a:6d:46:1c:9a:48:b2:04:ad:34:2d:83:
e5:b3:9d:77:08:db:8c:d9:bb:91:de:1a:eb:62:27:fc:f8:4a:
a4:60:77:af:50:6b:c7:e4:9d:2b:33:38:3e:65:76:b4:19:58:
04:19:9d:7d:fe:cb:71:f0:50:18:ed:da:65:88:55:4b:09:ef:
bc:56:c8:c0:d0:ed:6d:ec:6d:d2:3d:9d:de:64:17:62:01:7a:
54:47:8a:9b:a6:83:65:45:9d:59:7a:44:de:46:0a:4c:24:78:
68:03:23:2b:07:2b:d9:81:54:4f:55:a4:83:30:9e:02:bb:7d:
0a:f2:90:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:55:18 2025 by rpki-client