Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
File: FrGYtu469o3rwjR6Xpj3Efsw8os.mft (raw, json)
Hash identifier: jAKCex1g+sI9CA5ihK9PoDuzEYjh2d6xlWT2yjR4dCQ=
Subject key identifier: 0D:E8:13:BF:54:E9:58:27:DD:39:43:AA:66:F9:EC:3D:F8:90:5C:36
Authority key identifier: 16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
Certificate issuer: /CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Certificate serial: 0197B6A0CBC4433ACA2F1498C23486C7FFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
Manifest number: 02B9
Signing time: Sat 28 Jun 2025 13:01:20 +0000
Manifest this update: Sat 28 Jun 2025 13:01:20 +0000
Manifest next update: Sun 29 Jun 2025 13:01:20 +0000
Files and hashes: 1: FrGYtu469o3rwjR6Xpj3Efsw8os.crl (hash: vv4WAwNpFnzNB9PpLN5FvxXKsSs8TKghYUyhs31AM4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:cb:c4:43:3a:ca:2f:14:98:c2:34:86:c7:ff:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Validity
Not Before: Jun 28 13:01:20 2025 GMT
Not After : Jun 29 13:01:20 2025 GMT
Subject: CN=0de813bf54e95827dd3943aa66f9ec3df8905c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:05:b3:40:fb:7e:b6:57:3a:fc:f2:44:65:
ce:41:1a:a8:4e:59:aa:ff:14:bc:72:86:dd:65:6d:
39:69:87:7e:36:3a:dc:bc:87:08:1d:55:57:03:77:
0b:83:a7:c5:26:1e:81:95:11:49:6f:e2:52:97:fe:
e6:55:a5:8d:0c:4d:cc:c0:a6:f0:d5:c9:9f:55:54:
4b:38:4e:4d:f4:be:ea:75:73:62:80:ef:44:81:fa:
d8:ba:6a:08:e5:e7:b8:cd:e5:31:65:b4:8e:2f:1c:
d1:9e:99:1e:13:19:a6:91:fc:b3:44:44:f1:04:7a:
f7:05:c1:ce:23:9b:e3:e7:23:66:2a:61:9c:0e:02:
0f:47:1f:63:00:74:32:2b:3e:bc:b3:8c:cc:2e:ab:
0f:de:66:68:82:28:bc:a2:c4:2c:c0:51:85:53:13:
ad:bd:e3:62:9b:84:28:90:f8:3f:3e:37:a3:a4:28:
cc:2b:e2:a5:72:dd:0f:36:24:d8:82:c8:22:13:63:
25:11:d5:6b:c2:28:d9:66:58:d6:97:39:3b:4e:3b:
83:49:c5:1f:62:a9:b1:55:9f:75:96:59:ba:ac:d7:
66:6f:b2:03:0e:56:7d:79:89:2f:48:d8:cd:46:c2:
e5:76:aa:79:6d:48:6c:da:00:24:5c:e4:e3:c1:65:
d8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E8:13:BF:54:E9:58:27:DD:39:43:AA:66:F9:EC:3D:F8:90:5C:36
X509v3 Authority Key Identifier:
keyid:16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ee:29:b1:7d:d6:bd:73:17:8b:83:2a:e7:2a:8e:b1:e0:62:
33:75:6c:16:63:55:52:5a:34:a9:09:c3:e1:bb:d8:ab:c3:18:
d4:19:97:0e:5b:a8:35:ce:cc:da:16:ef:4f:28:09:9f:d0:28:
4c:8f:5b:e0:b2:45:c8:b2:52:ff:9d:5f:4c:21:4f:09:0e:65:
6c:ed:76:42:fd:be:99:5c:19:e0:1f:19:15:18:fe:cf:d5:f7:
fe:88:d9:69:e3:07:62:1b:c4:e8:3b:ba:c2:bc:77:eb:9f:da:
02:6a:64:78:6f:8f:b9:f7:10:68:b4:8b:60:fc:ba:aa:40:ea:
44:fd:a6:c9:71:3f:6c:04:eb:e3:38:b2:e0:ee:b6:ca:7d:3a:
29:40:42:af:ee:c8:05:a8:be:0e:a4:ee:f9:f3:19:a0:60:b8:
e1:02:39:60:0e:3c:6c:b2:a3:29:8e:cd:01:e9:bb:e4:88:2d:
eb:84:3b:f1:22:46:ed:1d:d4:58:7b:c1:df:62:67:d9:11:8b:
1d:5e:01:cf:53:71:96:c8:60:53:17:a3:54:37:e6:28:7d:10:
5f:59:88:c8:07:e1:ce:f9:b4:ef:c0:c2:10:bb:67:f7:48:72:
39:51:4b:74:31:32:e0:21:1d:49:c8:6c:5c:0b:95:ce:50:bc:
0b:85:c9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:26 2025 by rpki-client