Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
File: fGXsjueSu10KPMcJrcrptoWp3ls.mft (raw, json)
Hash identifier: amM2gj8uoNY0suNRVFeTYBZQaH+9pNgUWgwSO8IAzKs=
Subject key identifier: 7C:DB:89:CC:FB:82:4F:8A:ED:49:78:82:FD:B8:88:EE:B2:C3:71:1D
Authority key identifier: 7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
Certificate issuer: /CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Certificate serial: 0197C048E8A69951829CFDA09440F8819463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
Manifest number: 06C1
Signing time: Mon 30 Jun 2025 10:01:32 +0000
Manifest this update: Mon 30 Jun 2025 10:01:32 +0000
Manifest next update: Tue 01 Jul 2025 10:01:32 +0000
Files and hashes: 1: fGXsjueSu10KPMcJrcrptoWp3ls.crl (hash: j0SLopPZB+MBn+7ELRETv8bbD42dmU2bZhzBthPvfac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:48:e8:a6:99:51:82:9c:fd:a0:94:40:f8:81:94:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Validity
Not Before: Jun 30 10:01:32 2025 GMT
Not After : Jul 1 10:01:32 2025 GMT
Subject: CN=7cdb89ccfb824f8aed497882fdb888eeb2c3711d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2f:4d:67:ae:f7:b1:b5:26:b1:74:39:21:30:
a6:3f:cb:72:87:4b:64:92:c5:da:88:58:b4:d7:59:
95:d9:06:09:c5:99:bc:57:9e:8d:88:8c:af:f7:d8:
bd:8d:83:df:11:4f:a7:9b:0f:78:cf:fc:2f:0a:70:
e5:0c:6c:d4:99:7d:21:7f:29:e8:85:1f:f9:e5:ac:
02:e1:4f:93:22:80:b4:49:85:f2:0e:0a:09:6b:63:
54:bb:18:4c:ea:48:29:c1:29:da:c5:8a:14:2c:83:
c6:66:e7:0f:51:9b:20:c3:69:22:e2:d8:40:27:7f:
e8:4d:cb:27:f4:2e:c1:69:4d:54:9c:2d:3e:d6:e9:
a4:3d:c4:06:ed:ca:5f:2f:5b:d0:25:06:23:50:cd:
a4:bb:a3:e7:df:22:8c:cf:b1:55:a9:4b:0f:65:e8:
cd:49:95:8b:ce:cc:85:10:e6:38:ca:e0:bc:b0:61:
ef:5c:e0:0a:6f:73:13:d3:2e:93:a2:bd:a7:1b:61:
1a:b7:ac:07:05:40:bb:9e:f8:c5:3b:b6:e9:64:21:
f5:6c:3d:c4:41:76:7a:03:0d:e0:f5:a5:9b:e0:1d:
04:0e:51:c8:e1:52:4a:97:04:82:d2:7f:21:1d:9c:
25:ed:48:71:68:61:39:5e:04:c0:59:d3:9d:3e:50:
71:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DB:89:CC:FB:82:4F:8A:ED:49:78:82:FD:B8:88:EE:B2:C3:71:1D
X509v3 Authority Key Identifier:
keyid:7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a0:00:bf:b2:4d:46:b8:be:c9:cc:98:52:53:38:fd:5e:a4:
8b:58:0e:98:b5:51:50:d6:36:92:17:03:b7:fe:04:68:a4:68:
24:f6:44:a2:47:e1:de:1b:6c:95:36:f5:3d:c2:79:92:22:ca:
97:71:70:f2:7e:6a:6d:15:ee:16:a1:6d:15:52:6b:79:72:17:
a5:08:a2:6b:5e:f1:9a:ae:06:5e:0d:8a:ba:f2:cd:a3:1c:06:
dc:d9:fc:9d:a6:2f:9d:c1:18:3d:c2:63:7d:b0:11:0a:b7:90:
14:96:a1:b4:ff:fc:fa:9c:10:27:bd:f6:3c:b6:a8:fe:52:10:
d8:42:3f:9b:56:e6:73:ff:ae:0f:50:61:3e:98:0c:11:5a:21:
84:42:7b:23:d9:68:e3:44:a1:d7:26:11:fd:92:1b:ee:5a:46:
8e:e6:c8:68:04:bd:56:26:bc:e8:25:64:96:a2:f1:16:5b:52:
c7:9f:bb:e8:53:82:f9:73:d0:3a:2f:10:44:68:fb:1c:53:88:
83:7a:51:ad:73:08:7d:08:f1:4d:fb:71:86:38:99:8c:7c:ee:
01:97:57:61:a2:c5:69:4b:46:8d:e3:81:8a:d9:70:f0:11:da:
34:50:f4:6a:d1:59:65:64:2d:e6:de:00:54:81:98:7d:c9:2f:
3f:72:84:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:24:19 2025 by rpki-client