Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
File: fvoucF0jP_80WpErLyObWs43K7k.mft (raw, json)
Hash identifier: rqp03UxOURK0TyhxYyRK6SARRMacYNcBMHxjZ0T1eS8=
Subject key identifier: 10:20:BF:3E:48:E3:6D:E9:0D:2D:2F:E9:3F:90:56:5C:B7:B2:C8:82
Authority key identifier: 7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9
Certificate issuer: /CN=7efa2e705d233fff345a912b2f239b5ace372bb9
Certificate serial: 0197B933BA1208BC0A91FD3EF884EDBAE98D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
Manifest number: 04F3
Signing time: Sun 29 Jun 2025 01:01:04 +0000
Manifest this update: Sun 29 Jun 2025 01:01:04 +0000
Manifest next update: Mon 30 Jun 2025 01:01:04 +0000
Files and hashes: 1: fvoucF0jP_80WpErLyObWs43K7k.crl (hash: Myv+yAFis+CFrsbrHVL+GjYYJEq/PDG1Ohj6hBl09NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:ba:12:08:bc:0a:91:fd:3e:f8:84:ed:ba:e9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7efa2e705d233fff345a912b2f239b5ace372bb9
Validity
Not Before: Jun 29 01:01:04 2025 GMT
Not After : Jun 30 01:01:04 2025 GMT
Subject: CN=1020bf3e48e36de90d2d2fe93f90565cb7b2c882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ca:87:b0:53:be:a4:d0:75:67:dc:26:6d:39:
a5:bc:16:2e:ad:ca:24:ce:67:c1:04:eb:f8:c6:7d:
cd:d2:fa:dc:47:cf:3a:df:65:a5:46:f9:ac:1c:6b:
52:72:47:36:d2:d6:70:88:67:07:27:25:c7:c8:3f:
b1:28:da:6a:44:2f:de:8c:0c:79:c9:1f:8a:47:3b:
95:e5:6f:33:5a:2e:e2:30:d8:17:6d:0e:02:95:0d:
ef:ab:06:5f:12:42:b9:77:95:32:73:3f:41:a6:ae:
d0:96:31:97:6e:ad:2c:c0:1f:ed:0d:85:1d:f7:87:
1d:8e:8f:94:ba:cb:62:f8:3d:79:e0:98:3c:6f:12:
f3:94:a6:7f:4e:57:5b:2c:3b:d0:18:44:71:55:96:
79:f9:0e:38:13:6f:47:d9:ae:25:e4:e2:f3:30:c0:
6c:42:9d:75:0e:07:98:1c:11:93:e5:ac:7d:ad:7f:
8b:8e:fb:ec:6d:1b:01:23:53:ea:f9:a6:3f:1a:1b:
d4:72:29:4a:c8:63:cc:ef:75:12:93:ae:33:31:c8:
c9:1a:32:82:9b:f2:22:86:90:7a:a1:22:23:b3:67:
a0:6d:0c:f5:a6:f6:93:14:2a:26:f1:59:91:3a:96:
8c:f0:f3:0d:d6:73:30:9a:f2:28:5e:2e:e0:b8:8e:
4f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:20:BF:3E:48:E3:6D:E9:0D:2D:2F:E9:3F:90:56:5C:B7:B2:C8:82
X509v3 Authority Key Identifier:
keyid:7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:30:8a:31:a1:d8:b1:b0:4b:02:df:43:64:ee:9d:ff:6e:23:
6c:d3:f3:3e:20:ad:87:c5:23:5f:bd:ff:40:b8:c6:71:dd:30:
8c:76:a8:5f:e9:6a:b3:00:35:64:6d:ce:b2:96:43:32:a4:ef:
8b:52:ab:02:b8:7d:ab:1b:20:0c:b7:31:7b:ea:1f:4f:82:13:
1d:38:6d:88:45:06:f8:b4:9f:c2:38:f5:cd:2e:3d:2a:4f:a6:
de:7e:05:a2:bc:2a:ff:1c:bf:78:32:3e:7c:9b:28:b2:e1:75:
63:e4:9a:ac:36:e0:b5:63:f5:db:5e:38:84:7d:ac:a8:70:05:
2e:96:74:11:f4:fc:b3:30:c7:50:ee:ea:56:7e:e0:3e:6d:65:
f1:b8:f6:5b:54:c8:21:3f:ce:ab:c8:58:db:79:53:a4:7c:ba:
eb:be:bc:af:65:0f:99:c5:97:60:1e:2e:4f:2d:fd:af:35:df:
51:52:d3:8c:9a:57:ef:d9:ae:9a:be:95:18:e2:3f:cd:01:8c:
6c:c8:8d:b0:4c:ba:d7:f6:31:11:5c:68:c5:40:45:6f:93:1a:
b0:ac:4b:07:d9:3a:cc:d8:d3:b8:a8:43:94:40:40:ff:52:5b:
58:3b:83:d8:9b:5f:a6:95:af:ef:e3:43:72:d5:35:7e:28:b1:
0b:21:28:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:13:09 2025 by rpki-client