Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
File: Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft (raw, json)
Hash identifier: o3PBKmKDJaYvkY68+qL2T6EMyYBwT9jnCcWsD6x5pSg=
Subject key identifier: 28:B3:48:6C:49:30:84:FE:E9:60:49:AF:19:1A:A3:DC:F1:24:60:6D
Authority key identifier: 15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
Certificate issuer: /CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Certificate serial: 0197B745BEA37B1A85EE86E9A61FFA19F86C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
Manifest number: 13FB
Signing time: Sat 28 Jun 2025 16:01:30 +0000
Manifest this update: Sat 28 Jun 2025 16:01:30 +0000
Manifest next update: Sun 29 Jun 2025 16:01:30 +0000
Files and hashes: 1: Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl (hash: 23GJf02D3r8iKQj5oj3tA7tB2SLBDOZUHENpQbKGSSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:be:a3:7b:1a:85:ee:86:e9:a6:1f:fa:19:f8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Validity
Not Before: Jun 28 16:01:30 2025 GMT
Not After : Jun 29 16:01:30 2025 GMT
Subject: CN=28b3486c493084fee96049af191aa3dcf124606d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:67:b4:9e:fe:82:39:86:3e:d0:29:c5:4c:08:
25:50:1d:eb:15:a4:40:44:84:fd:e5:3b:62:96:00:
79:c0:3a:46:8f:43:30:52:8e:5c:36:23:02:71:45:
8f:b1:2d:43:5d:a4:52:e6:44:b1:70:83:53:91:f4:
0a:a3:cd:e0:a6:73:a3:66:73:71:41:53:aa:57:5f:
01:a2:d9:ee:f7:f3:79:4d:a7:af:a7:52:3b:96:3a:
02:5f:c1:08:9c:1d:68:d7:71:32:dc:ef:e4:f9:11:
1a:2d:3f:1b:ca:c2:6a:50:0b:af:44:db:dd:14:53:
49:00:12:e2:30:6f:af:22:33:4f:a8:2e:78:76:fc:
5c:87:3d:aa:b0:85:6c:cc:97:e7:6b:75:16:45:9f:
6a:1a:f2:f3:d9:72:f0:ae:f8:98:93:f0:f3:ea:d5:
03:12:b6:9f:e0:56:a2:e0:62:54:61:38:bb:cf:1e:
e2:40:ba:32:67:a0:2a:d8:47:03:e2:52:7a:4b:04:
af:31:ce:48:8b:2b:83:31:c8:b1:5f:fc:4b:e9:ce:
a0:f0:ea:43:e0:91:81:c6:45:da:98:77:66:af:5e:
53:de:91:77:e4:8f:69:5a:e1:f8:03:11:51:64:a5:
70:6e:c6:fc:fe:a6:a5:36:fd:8d:10:45:21:51:c6:
8e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B3:48:6C:49:30:84:FE:E9:60:49:AF:19:1A:A3:DC:F1:24:60:6D
X509v3 Authority Key Identifier:
keyid:15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f2:f2:9a:ad:8e:44:50:24:8e:42:72:11:29:60:b0:cb:0b:
38:be:2a:4b:5e:93:5b:d4:2e:1d:23:b2:f0:46:bc:b6:4a:21:
97:2f:6e:ce:5f:b5:1c:a2:10:ba:c8:ac:7d:4b:d9:2e:e0:4f:
ec:f9:9b:a0:ce:20:31:97:3d:ea:78:02:e3:c4:a0:05:27:5f:
00:2b:f4:07:03:16:34:df:fe:12:15:5a:4e:d7:2a:5a:fe:f1:
e6:9c:25:1a:39:77:43:59:a8:8c:7c:d4:f5:90:97:5e:b2:55:
87:df:7b:15:10:03:bc:7f:4b:73:74:31:ea:6c:94:5b:45:60:
6d:dc:54:44:c5:f2:b6:5e:00:da:14:3e:56:38:64:41:f5:d8:
2f:25:31:8d:b0:b7:18:1d:7c:43:67:08:ce:2b:18:bf:0b:7d:
8a:e5:74:42:2c:52:ed:b0:be:1a:94:07:4f:f2:10:45:a7:e0:
d2:6f:f3:2a:42:75:9b:49:8d:06:0d:df:64:f1:9a:83:02:d3:
99:78:cc:98:5f:24:f3:51:b7:4f:94:8f:b7:61:90:ed:34:ee:
7e:61:09:ee:3f:0a:8d:16:2d:ec:41:21:ca:45:9d:5f:8c:18:
3a:88:e8:21:eb:50:03:7b:92:9d:53:e5:50:07:3b:b9:59:a1:
f1:77:99:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:20 2025 by rpki-client