Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
File: fE6qxnNkfEicoVs_GEx64mfB6ms.mft (raw, json)
Hash identifier: 16BNDZv9QqPiphBZDTj3MDQAG0HJ34oE8d7DAsYxdL0=
Subject key identifier: 7B:C5:87:73:D7:F9:86:BF:CA:47:C0:C9:CE:C7:C7:89:6B:DC:E8:1D
Authority key identifier: 7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B
Certificate issuer: /CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b
Certificate serial: 0197B70E9E1CF6856F2055E81781843C9BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
Manifest number: 0F31
Signing time: Sat 28 Jun 2025 15:01:17 +0000
Manifest this update: Sat 28 Jun 2025 15:01:17 +0000
Manifest next update: Sun 29 Jun 2025 15:01:17 +0000
Files and hashes: 1: fE6qxnNkfEicoVs_GEx64mfB6ms.crl (hash: X35S+W0dprzT0xX6W/4q6VdQG+5crgxohPlEbNryUjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9e:1c:f6:85:6f:20:55:e8:17:81:84:3c:9b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b
Validity
Not Before: Jun 28 15:01:17 2025 GMT
Not After : Jun 29 15:01:17 2025 GMT
Subject: CN=7bc58773d7f986bfca47c0c9cec7c7896bdce81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:ef:cc:71:19:89:35:03:cb:87:29:c0:3c:
d0:57:dc:7f:73:fa:35:dc:c3:59:af:de:f4:b3:1b:
9b:cd:66:77:db:cf:f5:8b:d2:f4:10:6d:33:ae:5e:
84:da:94:38:ed:95:91:a4:48:23:73:70:a5:4f:5f:
d3:e0:53:ab:4a:8d:12:bf:72:09:7c:09:cc:42:3e:
57:e0:09:85:26:19:77:43:58:a5:bf:8e:13:b1:6e:
fd:de:ba:5b:a4:b6:aa:c1:58:a8:eb:1b:e0:8a:7b:
f1:73:fe:e9:dc:da:f1:6f:99:52:d0:57:ec:79:44:
c6:c0:af:28:9d:0b:84:dc:81:43:c1:3f:e3:b5:33:
82:4f:52:8a:2c:38:31:62:58:8f:5d:cd:3c:53:92:
bf:6d:01:e2:d2:dd:4f:af:06:1f:37:a9:47:9a:82:
08:20:82:69:c2:75:2e:97:b9:81:ba:c5:2b:43:ce:
a5:bc:01:04:a5:37:37:db:b6:e5:39:20:f4:19:a3:
39:5a:b0:76:9a:06:55:aa:a6:10:26:9c:21:7a:48:
71:2d:11:3c:96:18:68:1a:5d:a6:b6:7a:80:a1:ff:
13:84:db:49:cd:92:f2:f6:8d:40:77:6c:56:1c:39:
81:c1:75:07:a9:7f:c6:d7:19:5f:15:6c:3b:7f:0d:
bd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C5:87:73:D7:F9:86:BF:CA:47:C0:C9:CE:C7:C7:89:6B:DC:E8:1D
X509v3 Authority Key Identifier:
keyid:7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b3:b3:9a:26:d5:82:ec:12:3b:08:a8:29:17:70:63:fa:3d:
19:f2:6b:82:65:12:ac:d7:e1:a5:ef:96:66:52:f8:c2:76:38:
0a:8c:90:36:14:97:35:78:48:1c:93:b2:79:3d:f3:db:26:d5:
ec:2d:a3:68:50:f1:88:fb:92:6c:dd:43:d1:0b:d5:65:f8:12:
13:8c:f4:e1:49:a4:dc:5c:fc:e9:5c:d5:f0:da:62:41:d7:f0:
98:94:5f:7a:cb:8b:42:c5:4f:36:c6:06:2e:47:a8:e1:43:38:
d6:0b:4b:86:76:94:96:9a:86:66:2a:f0:7d:0f:29:19:e9:31:
24:31:e4:24:9b:45:a7:0f:c7:d1:fa:42:13:c4:39:af:8d:89:
df:d4:f1:4b:b0:c1:58:9a:a7:10:34:63:a1:d1:a3:9c:4d:11:
7e:74:b3:ac:b6:1b:99:0e:a9:a2:68:82:5b:b0:81:de:8d:70:
3a:61:da:5e:a3:24:70:5e:bd:a3:88:2c:bf:99:35:2a:32:cd:
de:7d:ae:13:d1:7a:dc:19:59:25:41:77:69:41:0f:0a:c1:27:
7d:35:11:a8:7b:ac:7d:c0:b4:e5:89:70:0e:8a:fb:b3:48:bb:
bc:b6:4e:ae:72:26:9b:f6:5f:3e:ef:29:57:9f:35:22:8a:e1:
b5:58:2f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:35 2025 by rpki-client