Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
File: _P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft (raw, json)
Hash identifier: J76Ku/H8cTbx5iIab9+P7VADldfRLydKQYbshAPtqlc=
Subject key identifier: 8E:BD:00:7C:50:D5:1A:38:07:9A:5B:57:58:E9:E5:FA:9C:15:37:AA
Authority key identifier: FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4
Certificate issuer: /CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4
Certificate serial: 0197B9D8B09D3994D3ACA15BEBA47041A47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
Manifest number: 0CBF
Signing time: Sun 29 Jun 2025 04:01:15 +0000
Manifest this update: Sun 29 Jun 2025 04:01:15 +0000
Manifest next update: Mon 30 Jun 2025 04:01:15 +0000
Files and hashes: 1: _P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl (hash: Ws2/FmeA15qPc/XBnn8d9nBoOekbLr9lpLq75KwD52c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:b0:9d:39:94:d3:ac:a1:5b:eb:a4:70:41:a4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4
Validity
Not Before: Jun 29 04:01:15 2025 GMT
Not After : Jun 30 04:01:15 2025 GMT
Subject: CN=8ebd007c50d51a38079a5b5758e9e5fa9c1537aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5a:9f:b7:38:2b:43:78:a7:ff:7f:6d:2e:0e:
86:b0:44:93:54:e8:fe:7b:bc:e9:f1:3c:02:07:3a:
1a:61:f2:b8:f1:6b:01:e9:4b:35:02:8b:f6:ce:98:
a3:e7:a4:dd:d7:96:61:ac:92:1e:0f:1a:9d:2c:43:
de:f4:69:72:0f:69:7b:be:7e:69:c4:73:4b:a6:56:
96:51:73:de:f4:b5:8c:28:9a:c3:d6:b5:14:7b:c7:
36:eb:31:5c:4f:93:44:c1:9f:61:54:4c:27:b9:76:
61:37:c9:cf:e1:19:fd:d9:93:63:f6:c9:6b:ad:f0:
11:4b:71:92:a7:f9:8b:ae:fd:3e:0d:c6:f1:d4:9c:
bc:5d:6e:17:4e:02:bb:48:f1:5d:35:d4:5d:02:32:
05:7f:d7:11:90:0f:99:0d:1a:4a:e6:2e:84:ae:20:
f7:d5:02:78:08:4b:5b:7d:9c:08:d0:90:b6:96:14:
c9:7f:da:bb:58:02:8d:3c:92:51:e4:a8:d2:b3:12:
a5:e8:62:18:63:f0:9b:3d:f4:ef:3a:3c:f8:af:01:
82:c5:3b:37:dd:59:cf:a0:fe:f5:bb:26:fa:d4:ba:
77:f6:e0:96:05:91:00:61:7c:25:e2:3f:2a:a5:80:
6b:9d:ba:f8:86:14:9d:2b:3c:d2:a1:81:db:e4:fd:
49:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BD:00:7C:50:D5:1A:38:07:9A:5B:57:58:E9:E5:FA:9C:15:37:AA
X509v3 Authority Key Identifier:
keyid:FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:42:ba:61:03:83:84:95:0e:1d:d7:1f:4e:c2:08:64:6c:31:
5a:1e:7d:a6:6b:1b:1f:a4:4e:16:95:b9:6c:e2:cc:a6:82:e2:
c3:57:f8:c9:80:61:d0:ba:6a:ae:71:3d:9c:c8:11:27:d6:38:
f6:8d:e9:51:5c:87:90:84:fe:14:d2:01:db:59:fb:9d:66:2b:
95:0f:d2:15:19:f1:0d:f5:af:3e:b8:86:70:97:37:f1:16:d0:
b3:7e:97:d2:86:aa:b2:dc:8d:d7:5e:a2:0c:b7:77:76:cc:40:
fe:f7:95:cb:9c:22:14:0e:85:1b:b1:f0:88:6f:5a:45:3d:d8:
f4:59:b7:4f:b2:b4:4c:5c:e0:62:d9:da:53:c0:82:aa:e4:94:
71:46:20:af:89:ec:54:49:22:66:aa:3c:d1:f4:6e:c7:b3:42:
fc:8b:d7:c7:32:20:f3:71:c7:f4:9c:9c:35:9f:f9:64:86:39:
0c:ff:fc:3a:fb:52:fc:c7:b8:3b:10:92:46:57:fc:c5:4a:cd:
9a:64:ab:e9:a4:09:d9:94:47:81:d2:87:62:bf:d3:f6:40:72:
cf:01:82:4c:fc:bb:8c:43:4f:98:c5:6e:ec:a7:c8:41:84:99:
e9:e9:3e:d6:25:00:4d:f1:f1:49:62:a1:55:38:b7:75:a9:86:
3e:f5:02:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:38:52 2025 by rpki-client