Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
File: sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft (raw, json)
Hash identifier: 6ORq9Nq/0DdSg0GO/c2P1rkGzAzoLQfatIFu23OkEXc=
Subject key identifier: 6F:D9:8B:16:CC:1F:6A:F4:FB:48:21:25:E8:EE:1F:5A:45:AC:73:04
Authority key identifier: B0:52:4F:65:5B:A3:C9:CA:5D:98:B0:57:C2:4C:0F:08:B7:19:D4:A7
Certificate issuer: /CN=b0524f655ba3c9ca5d98b057c24c0f08b719d4a7
Certificate serial: 0197B7B345CA777F9F5F2727EACE2DDF0EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFJPZVujycpdmLBXwkwPCLcZ1Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
Manifest number: 02F7
Signing time: Sat 28 Jun 2025 18:01:08 +0000
Manifest this update: Sat 28 Jun 2025 18:01:08 +0000
Manifest next update: Sun 29 Jun 2025 18:01:08 +0000
Files and hashes: 1: sFJPZVujycpdmLBXwkwPCLcZ1Kc.crl (hash: usPQL1sapWqfIzRS8mNNG2BSnju371puzcbia7E8+MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFJPZVujycpdmLBXwkwPCLcZ1Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:45:ca:77:7f:9f:5f:27:27:ea:ce:2d:df:0e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0524f655ba3c9ca5d98b057c24c0f08b719d4a7
Validity
Not Before: Jun 28 18:01:08 2025 GMT
Not After : Jun 29 18:01:08 2025 GMT
Subject: CN=6fd98b16cc1f6af4fb482125e8ee1f5a45ac7304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1e:c2:86:d6:2c:ec:00:52:70:6e:d3:dc:92:
fd:b8:be:47:51:39:01:14:75:05:f8:21:c5:d4:79:
0a:cf:d4:25:8d:84:7f:fe:cf:27:a2:52:72:b3:44:
63:12:28:9b:72:d8:2d:49:fc:f6:26:4d:87:06:ac:
f1:53:e1:91:0a:e2:a2:71:87:3f:b9:9e:50:f1:96:
3e:f8:b7:f5:c6:5c:2c:98:d5:93:64:60:d5:9d:8e:
66:ee:fc:2b:c2:bb:08:f0:eb:75:9d:6a:1f:03:c4:
c4:ee:c8:42:1d:2c:4d:83:f7:92:e3:9f:a7:9a:9d:
18:8f:d6:34:52:d8:f6:b1:ca:2b:64:fe:b2:74:ff:
0b:2a:d9:d2:02:a3:78:e5:3b:d2:1d:18:2a:da:2e:
4d:81:38:67:cb:49:fc:be:35:13:35:f6:6f:fb:e3:
82:ef:48:f7:99:87:01:84:fe:11:8c:3a:76:51:c7:
f3:14:72:64:78:46:03:6f:92:a5:dc:70:25:be:d1:
1a:01:e4:29:88:c3:34:c3:75:a7:4c:9b:91:64:a9:
e5:2e:3a:89:f4:2a:6d:cc:7a:91:9c:4b:23:b3:a6:
cf:dd:b2:4b:c6:f8:30:6f:85:47:c5:c7:54:1c:51:
63:f8:11:d4:56:2d:85:60:eb:2c:d2:3f:78:60:3c:
a1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D9:8B:16:CC:1F:6A:F4:FB:48:21:25:E8:EE:1F:5A:45:AC:73:04
X509v3 Authority Key Identifier:
keyid:B0:52:4F:65:5B:A3:C9:CA:5D:98:B0:57:C2:4C:0F:08:B7:19:D4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFJPZVujycpdmLBXwkwPCLcZ1Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:57:35:e8:48:1e:aa:73:fd:1c:cd:e1:96:c7:36:f7:fe:52:
e1:3a:83:84:be:63:9a:22:66:af:bc:89:d6:da:54:b9:ce:08:
63:f4:37:44:a3:cc:5e:95:fa:cf:ca:4d:c0:7d:61:14:02:05:
84:c0:ce:41:70:0e:be:04:1a:65:50:7f:24:d4:55:a8:0b:2a:
82:93:26:df:2b:25:0b:1b:a8:80:d5:65:aa:84:8d:32:b9:f9:
30:6d:f6:e0:1b:1d:91:cd:2b:93:9f:23:1d:84:ea:98:b0:4c:
ab:02:00:da:b7:63:e2:1a:7d:ca:08:c4:ac:5d:93:b2:ae:8a:
cc:ac:20:ff:55:b1:88:86:e6:b1:b2:4f:69:28:8b:53:3b:de:
8a:dd:03:44:28:d0:07:db:d9:85:ca:b6:63:f3:f0:9b:82:3a:
5e:78:6f:25:86:d4:67:65:3e:07:5b:a7:d6:62:e3:7c:ae:b4:
e5:12:71:4f:c1:b3:20:95:8d:85:6e:1e:5a:a8:d3:08:0b:02:
e4:15:12:08:d5:8e:62:f3:78:95:87:14:67:d8:7c:46:ca:4f:
0d:62:27:ef:20:70:73:15:96:b0:eb:5a:77:6a:8b:89:c0:17:
06:b4:db:9c:d0:82:de:56:41:ec:f6:4c:a3:72:14:19:3f:46:
88:f6:36:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:26 2025 by rpki-client