Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
File: fp2uVBo7fD77bdZkadCH6F9179o.mft (raw, json)
Hash identifier: 1oOg5xIfOYu8jXjQMwDOvO4vgRpy6XbGQWK6FOOoQpU=
Subject key identifier: D5:65:F1:5F:24:31:0B:85:08:83:CB:51:BF:A7:F7:AD:1D:EE:5D:9D
Authority key identifier: 7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
Certificate issuer: /CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Certificate serial: 0197B88FA2A640DA1F11B6E37F9BB847FB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
Manifest number: 0217
Signing time: Sat 28 Jun 2025 22:01:50 +0000
Manifest this update: Sat 28 Jun 2025 22:01:50 +0000
Manifest next update: Sun 29 Jun 2025 22:01:50 +0000
Files and hashes: 1: fp2uVBo7fD77bdZkadCH6F9179o.crl (hash: eqGl7Oxprd+3Avpdjx4Q1r/d6ZfDhbClZimZUsxzrMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:a2:a6:40:da:1f:11:b6:e3:7f:9b:b8:47:fb:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Validity
Not Before: Jun 28 22:01:50 2025 GMT
Not After : Jun 29 22:01:50 2025 GMT
Subject: CN=d565f15f24310b850883cb51bfa7f7ad1dee5d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0f:97:62:d0:c0:ba:19:cd:ad:ea:ab:57:13:
4a:48:d0:7b:0c:50:57:6c:01:5c:6e:d8:be:85:d8:
9a:eb:81:4f:9e:87:1f:66:cd:af:89:2b:5b:c3:cf:
b8:46:9f:1a:08:02:64:35:17:25:ab:db:47:b9:58:
c4:5e:f6:ea:75:f8:1d:34:24:20:10:3f:e4:20:da:
4a:44:9a:16:d6:1c:29:49:70:9a:a3:23:d4:b1:ee:
1e:18:bd:77:23:1a:13:bc:07:6f:3c:db:1e:7d:0c:
e9:77:c8:fa:84:34:0d:64:80:72:f3:96:59:40:b8:
7e:9e:86:68:0e:eb:87:4d:15:7c:7d:a1:7e:68:8f:
9b:60:63:48:32:0a:1c:30:95:9c:32:88:cf:cc:7b:
61:6e:29:15:d8:39:44:da:91:05:81:19:40:88:b2:
06:c9:60:1a:95:cb:da:3b:34:65:15:63:fb:e6:8c:
53:38:b8:ca:0c:55:0a:3e:85:d1:00:b2:aa:e8:76:
f2:78:ff:a0:ae:36:00:98:9a:5f:88:c6:b1:fd:0e:
24:95:79:3d:26:f7:b8:3c:c6:0d:c3:1f:59:6b:52:
75:50:db:09:6d:49:d8:8d:2d:ff:77:13:85:4a:98:
b0:87:5f:aa:d8:c3:42:47:70:11:6c:23:e9:cf:2f:
a0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:65:F1:5F:24:31:0B:85:08:83:CB:51:BF:A7:F7:AD:1D:EE:5D:9D
X509v3 Authority Key Identifier:
keyid:7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2e:89:a2:41:75:63:ef:20:bf:0f:1e:b4:4e:24:6c:a3:11:
fc:0b:26:74:39:91:6c:cc:7e:26:a5:75:b9:a9:64:30:86:11:
04:b3:99:19:ad:64:c4:bc:c6:99:01:d3:59:f6:fa:3b:45:66:
fd:d7:33:4e:ad:8a:39:cb:f8:97:e2:b7:e5:73:18:90:d4:31:
98:fc:8d:c0:03:01:5b:2b:ee:2a:ea:6e:cf:35:57:ad:7c:0c:
ef:41:d3:1a:b2:44:94:55:82:5b:02:6b:82:1e:ae:f4:79:bb:
fb:96:66:5c:26:0f:1c:eb:8e:30:59:c2:65:70:df:a4:1f:d9:
7e:6d:ff:1e:31:af:c8:87:ed:63:26:00:46:d8:14:19:9f:fe:
9b:03:36:a1:0d:71:7b:f6:a5:bd:4e:31:f7:8f:08:b2:93:c2:
63:62:d6:17:d2:d2:5c:fb:61:8d:8c:02:ff:ad:b7:7d:b5:02:
d2:39:23:6d:35:10:b4:58:3a:f3:fe:bf:ae:40:01:10:ba:8c:
51:33:46:c9:7e:8e:2c:5e:c4:67:9a:5a:09:de:b2:2b:a0:b5:
6f:9f:92:26:d2:73:23:08:08:61:da:7c:33:08:42:b1:bc:f6:
46:93:fd:b8:44:d6:56:3c:28:ce:89:4c:49:bf:82:0d:60:79:
29:f3:0c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:40:24 2025 by rpki-client