Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
File: fjGzT4SD1T_rGSrhFFSs43vH9YE.mft (raw, json)
Hash identifier: Gh5VkpQ7QNVOiJvq8B44ZiOYKJUfTFJUOqBFOvUe3WQ=
Subject key identifier: A5:D7:FF:86:06:A5:CF:DF:C8:76:B1:F6:3E:33:41:9C:91:BF:5B:37
Authority key identifier: 7E:31:B3:4F:84:83:D5:3F:EB:19:2A:E1:14:54:AC:E3:7B:C7:F5:81
Certificate issuer: /CN=7e31b34f8483d53feb192ae11454ace37bc7f581
Certificate serial: 0197C2A4AF1D32177B3DD8ADB506D1AE07BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
Manifest number: 0389
Signing time: Mon 30 Jun 2025 21:01:02 +0000
Manifest this update: Mon 30 Jun 2025 21:01:02 +0000
Manifest next update: Tue 01 Jul 2025 21:01:02 +0000
Files and hashes: 1: fjGzT4SD1T_rGSrhFFSs43vH9YE.crl (hash: kDvNxT9Kq16LHOROgxR8hOGTjnm4AZGZ4NX5XebniOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:a4:af:1d:32:17:7b:3d:d8:ad:b5:06:d1:ae:07:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e31b34f8483d53feb192ae11454ace37bc7f581
Validity
Not Before: Jun 30 21:01:02 2025 GMT
Not After : Jul 1 21:01:02 2025 GMT
Subject: CN=a5d7ff8606a5cfdfc876b1f63e33419c91bf5b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:67:be:80:ad:96:42:94:bb:43:b4:f5:c7:f5:
c5:cd:3b:9f:e9:2e:ba:2f:42:02:67:ec:d5:2e:fb:
a9:d3:aa:18:00:c1:86:74:78:6a:ff:22:39:9b:7e:
c5:dd:c8:a8:2a:e2:22:0d:2e:b5:f7:fe:be:ff:76:
e7:3a:25:42:74:88:20:0a:93:00:45:59:12:be:d6:
d6:61:5b:05:b9:aa:5a:4a:c2:fa:14:34:86:a6:78:
45:0c:13:38:fc:15:2d:aa:f6:d5:0d:08:84:0b:55:
32:43:b1:17:39:78:60:ec:11:e3:93:f9:2c:75:54:
bf:ea:6b:da:98:3e:cd:44:8d:44:2e:8d:15:33:a1:
a5:b7:e5:fe:21:0f:b0:46:a0:7e:68:5d:9d:b3:73:
7f:5b:37:20:9b:b8:af:cd:a4:20:3a:59:b5:7b:d4:
81:1b:f2:01:4d:b4:ea:46:94:30:d3:11:b0:51:7a:
79:f4:16:85:d5:74:b5:31:45:13:38:af:85:ab:19:
8d:4a:28:dd:9b:f1:c8:fb:01:f9:86:47:c3:41:86:
f6:29:6f:55:4f:fd:39:91:53:b3:50:4b:cd:51:dc:
c8:5a:88:f4:25:7f:9d:3f:4c:c1:d6:bd:17:c8:41:
c2:0f:f5:c1:f0:ae:e0:95:4f:82:0e:f1:84:e5:11:
3a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D7:FF:86:06:A5:CF:DF:C8:76:B1:F6:3E:33:41:9C:91:BF:5B:37
X509v3 Authority Key Identifier:
keyid:7E:31:B3:4F:84:83:D5:3F:EB:19:2A:E1:14:54:AC:E3:7B:C7:F5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f0:59:29:cb:d5:78:60:23:f4:b0:1a:5a:5e:a5:5c:af:7c:
94:79:45:2f:08:06:9a:6b:c0:ce:9a:48:bb:be:23:b2:56:4b:
de:cc:48:3b:dc:32:a6:ff:79:a5:dc:42:5d:1c:28:8f:d5:6e:
61:83:f0:de:4f:ff:56:35:67:de:c8:4f:8b:75:72:af:71:61:
ed:ff:ba:93:0e:8a:a2:c0:27:8a:ea:17:3a:da:8c:45:8a:4b:
5c:80:4c:04:e9:06:88:38:0d:6d:66:8c:b7:aa:a7:8b:1a:68:
ba:10:bb:e4:4e:03:57:9c:99:f2:f3:b5:84:50:fa:51:1d:f4:
94:e9:4e:6f:cc:96:bc:77:52:ae:f0:23:ed:f8:a3:f1:c8:42:
d9:00:e1:dc:db:db:0e:ff:97:57:cb:1a:94:4d:18:05:58:96:
49:6c:8c:cb:a6:00:f4:72:22:65:41:2d:40:a7:d2:8d:9e:f9:
99:35:60:6d:48:d5:10:a3:7a:66:7b:38:1b:31:bc:bf:ec:a4:
80:b8:45:1f:8c:5c:55:e9:2a:e4:7b:05:dc:d8:31:26:28:63:
b7:5a:78:86:30:80:61:7b:15:55:22:10:43:0e:62:9c:88:74:
5e:47:0a:62:fc:58:ab:94:d3:b3:de:b8:95:38:1f:4d:04:92:
0d:d3:7a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:17:54 2025 by rpki-client