Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
File: FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft (raw, json)
Hash identifier: xnDPwAPxPawlEi6G9ymv/ulPu57v1g/pKhOmD53D8ng=
Subject key identifier: F6:84:FA:33:E9:20:63:BC:53:91:9C:55:E4:B0:8F:00:F9:D7:7E:D7
Authority key identifier: 15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
Certificate issuer: /CN=154e2f85361ff5d06309c25684b908d7b702439b
Certificate serial: 0197B77CAD6C4CE7728C4BDFB51B15DAF201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
Manifest number: 0394
Signing time: Sat 28 Jun 2025 17:01:30 +0000
Manifest this update: Sat 28 Jun 2025 17:01:30 +0000
Manifest next update: Sun 29 Jun 2025 17:01:30 +0000
Files and hashes: 1: FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl (hash: ju5zjtHLBe/yZQbKeMqhYxDB9ktYP2JqEhPXn5FRfAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:ad:6c:4c:e7:72:8c:4b:df:b5:1b:15:da:f2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154e2f85361ff5d06309c25684b908d7b702439b
Validity
Not Before: Jun 28 17:01:30 2025 GMT
Not After : Jun 29 17:01:30 2025 GMT
Subject: CN=f684fa33e92063bc53919c55e4b08f00f9d77ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:e1:70:a5:7b:e3:ec:54:62:95:fe:d9:10:
0a:8a:49:a0:4a:07:ac:5b:64:d6:40:33:89:33:e1:
0b:10:ad:fa:4d:d1:e2:f5:29:3f:ad:3a:73:2d:26:
c5:0a:d5:6c:83:ad:5c:d4:82:7d:20:20:b6:31:cb:
ff:23:28:74:82:7c:20:e1:a4:9a:ab:be:f3:83:ed:
e8:63:94:27:64:08:94:35:a9:ad:ad:2d:08:3a:9a:
d8:f3:4c:d4:46:56:4d:2a:59:aa:67:64:98:c4:4c:
ac:d4:c3:e9:d3:46:42:dc:0f:16:41:1e:8d:c1:91:
84:63:64:65:df:e1:a6:2d:37:73:7a:0c:6a:71:de:
ea:57:75:2f:c4:fc:49:d0:96:a0:99:98:63:ef:6c:
10:63:67:54:9d:da:36:dd:df:b6:90:70:68:a1:6e:
3b:56:53:2a:c5:3c:89:16:40:30:4b:42:66:3f:f7:
5c:0d:ae:06:fe:90:f0:92:a2:2e:da:64:0b:e2:79:
e7:c7:d4:a8:3b:0b:2b:da:f6:f7:2c:2f:a4:ea:e6:
7c:f2:e4:33:ec:4a:6a:4a:1b:cd:48:7e:31:5e:4f:
d6:81:3d:a4:de:e4:da:cc:65:ec:82:b4:cb:58:c2:
fe:02:cb:ef:79:71:e9:b7:26:99:fc:73:a4:8e:49:
70:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:84:FA:33:E9:20:63:BC:53:91:9C:55:E4:B0:8F:00:F9:D7:7E:D7
X509v3 Authority Key Identifier:
keyid:15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e2:a5:66:c4:31:9c:4c:2d:e1:c1:2d:ef:35:79:05:3a:9b:
c0:ed:99:ee:5f:25:1e:a5:ac:08:fc:da:d8:09:46:a7:bd:99:
0f:9c:5c:72:35:52:33:22:1c:11:61:e0:fb:d3:19:85:52:2a:
bf:75:44:70:e8:56:1a:d6:15:5e:2a:2f:fe:0f:e0:81:3c:76:
cc:3c:ce:00:71:a4:a8:ec:d6:da:ff:8a:00:a1:2d:82:57:60:
9b:9f:eb:f7:e6:c5:ba:0e:44:28:bd:d9:fa:58:b8:2a:75:6b:
e9:12:d3:f6:2d:ca:ca:71:a6:59:1f:37:af:b7:ba:71:a4:08:
1b:8f:a5:0a:3e:e4:2d:ac:87:7a:a7:56:fe:09:69:19:84:55:
b8:a2:82:eb:9d:6f:68:db:d4:83:68:f4:b2:4e:b2:3f:5b:87:
5a:25:00:c4:53:3a:e7:b4:df:ca:2c:16:1e:44:65:41:1b:0c:
42:0f:60:f3:21:20:82:83:ad:c8:c2:38:77:ad:12:d9:a8:de:
3e:f0:2e:b2:79:a3:ea:ea:de:38:ba:b5:f0:59:3b:0a:f6:83:
65:62:44:cc:d6:27:df:f1:f5:31:f5:d9:a9:f7:6f:29:dc:0e:
75:ca:b3:b7:74:20:99:8a:17:5f:4d:3f:a6:2e:c9:ac:5b:93:
a5:7f:66:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:09 2025 by rpki-client