Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
File: rfjUKjroBc6WqpT66fW0QG_0VZk.mft (raw, json)
Hash identifier: IzGOm1dgB2P4akpEF+8HvmLhbc2AMi+d2cFfb+NazF4=
Subject key identifier: 7C:CB:11:EE:FF:5A:F8:B9:00:C0:34:F7:25:B8:92:9C:35:5E:FF:92
Authority key identifier: AD:F8:D4:2A:3A:E8:05:CE:96:AA:94:FA:E9:F5:B4:40:6F:F4:55:99
Certificate issuer: /CN=adf8d42a3ae805ce96aa94fae9f5b4406ff45599
Certificate serial: 0197CC83B5B97786367826B7AA2F0052A60B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfjUKjroBc6WqpT66fW0QG_0VZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
Manifest number: 0327
Signing time: Wed 02 Jul 2025 19:01:13 +0000
Manifest this update: Wed 02 Jul 2025 19:01:13 +0000
Manifest next update: Thu 03 Jul 2025 19:01:13 +0000
Files and hashes: 1: rfjUKjroBc6WqpT66fW0QG_0VZk.crl (hash: /u6qZFgr7ZhCKJR8eKsQ863EpzOHzKm9Eh4Qw2xqv6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfjUKjroBc6WqpT66fW0QG_0VZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:83:b5:b9:77:86:36:78:26:b7:aa:2f:00:52:a6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf8d42a3ae805ce96aa94fae9f5b4406ff45599
Validity
Not Before: Jul 2 19:01:13 2025 GMT
Not After : Jul 3 19:01:13 2025 GMT
Subject: CN=7ccb11eeff5af8b900c034f725b8929c355eff92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1c:1f:d0:66:60:94:f2:b8:72:df:77:1b:85:
d7:05:41:e3:89:38:b5:18:30:d6:75:56:c1:cc:1c:
8b:7f:61:a2:f0:5f:76:90:bb:59:a0:b9:fb:d7:4e:
3a:db:40:6c:53:9d:61:90:0a:94:85:02:78:11:5a:
9e:58:2b:e3:c5:be:a3:44:7e:32:83:c0:41:7f:4a:
bd:9e:cf:82:88:76:14:bb:97:94:b2:79:59:d8:26:
40:f0:73:48:ab:47:9a:90:a3:63:9b:d4:45:76:0e:
56:70:fa:5e:e4:95:0d:ee:f9:f0:53:5b:76:1b:68:
b1:b0:bf:7c:89:9c:dc:b2:54:8d:70:88:8d:78:25:
c7:3d:a0:2d:14:12:ba:fd:a9:14:3d:e2:d6:1c:08:
15:b5:f3:24:31:b1:80:f4:3e:f7:ac:36:47:4c:e0:
17:d6:cc:3c:30:0e:be:33:27:80:ff:97:8f:10:d3:
65:52:67:87:19:bc:08:9d:c1:c3:8b:07:34:6e:ef:
76:54:8d:6c:ca:e6:a8:47:90:fb:36:cc:2c:0d:11:
17:6a:41:b4:be:9c:86:1e:f8:80:9b:78:36:24:5a:
65:f8:38:f7:27:5d:d1:34:36:d8:a0:10:d0:b2:21:
70:e7:60:8b:bf:85:ff:4c:fa:1c:20:a0:98:d7:a5:
e5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CB:11:EE:FF:5A:F8:B9:00:C0:34:F7:25:B8:92:9C:35:5E:FF:92
X509v3 Authority Key Identifier:
keyid:AD:F8:D4:2A:3A:E8:05:CE:96:AA:94:FA:E9:F5:B4:40:6F:F4:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfjUKjroBc6WqpT66fW0QG_0VZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7b:e9:2e:82:c9:d0:d2:b7:ce:ef:47:37:b1:dc:18:ec:0b:
fc:cb:30:88:a9:a4:c9:91:48:b3:43:75:65:86:00:17:ef:73:
99:c1:e7:58:6d:2d:b4:21:f5:06:da:be:81:e5:9d:38:7e:04:
c6:f2:12:23:30:46:5e:8b:16:d8:26:ba:af:3e:76:f6:d5:3c:
d4:0a:83:8b:9e:9b:6c:1e:45:fe:50:e0:98:d6:16:bc:05:71:
ae:af:d7:89:d3:d7:a5:12:71:36:57:55:c6:41:9c:78:fc:bf:
b7:15:91:ff:61:aa:32:c6:dc:3b:78:a1:af:12:d2:0c:f4:57:
71:ce:af:fb:aa:a5:08:ec:69:e8:b9:94:39:c2:d7:0b:7b:e5:
f6:f9:4c:a7:b5:ea:43:8c:6c:d5:0f:b3:05:e5:fb:93:3f:16:
ae:76:19:39:42:4a:c5:0a:52:2a:56:33:44:5e:a9:eb:19:a8:
8c:0e:b3:a6:74:8d:57:77:c9:9b:ae:dc:97:69:2b:cc:bc:79:
cb:45:d3:84:06:67:38:8f:8e:0c:61:38:f3:a0:51:89:e2:c2:
cc:cc:d8:cd:23:cf:5b:3d:47:3c:06:78:47:fc:86:b6:58:6b:
4f:22:98:d9:9e:f2:1a:62:1d:89:e1:ab:b0:69:21:16:ae:12:
3a:fc:ec:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:50:03 2025 by rpki-client