Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
File: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft (raw, json)
Hash identifier: pkhjF8dN6kETbbU4qC4oB0TEr9rQN1jL86AVQu640jo=
Subject key identifier: E0:3A:85:FB:80:EA:7D:EF:D5:83:D5:E6:69:C0:FE:46:E0:A1:C8:EC
Authority key identifier: 7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7
Certificate issuer: /CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
Certificate serial: 0197B8FCF2F4B741E6A009424AEF824DDB31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
Manifest number: 0CB3
Signing time: Sun 29 Jun 2025 00:01:14 +0000
Manifest this update: Sun 29 Jun 2025 00:01:14 +0000
Manifest next update: Mon 30 Jun 2025 00:01:14 +0000
Files and hashes: 1: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl (hash: 8c9mYs1uaRNJOnosomyEziKYB/YhlkfMNRV+v2BgLQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:f2:f4:b7:41:e6:a0:09:42:4a:ef:82:4d:db:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
Validity
Not Before: Jun 29 00:01:14 2025 GMT
Not After : Jun 30 00:01:14 2025 GMT
Subject: CN=e03a85fb80ea7defd583d5e669c0fe46e0a1c8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:be:f7:76:10:2e:99:4c:40:55:c0:bb:de:ac:
ec:f4:5f:83:d1:0b:d8:7f:33:7b:2f:8a:b4:49:4c:
6f:41:84:a9:e6:4f:34:93:61:d6:aa:0e:37:77:f0:
a7:0e:f6:56:03:f5:24:68:f4:29:ad:4b:59:b9:3a:
38:bf:3b:96:7e:a5:6e:6c:c2:8b:75:36:10:f3:d4:
0a:7b:17:c3:10:07:da:d3:97:e5:f3:6e:b7:e8:a7:
ca:78:79:66:31:f2:e9:af:e9:94:6e:a9:7b:1f:1f:
54:b2:4e:da:36:aa:ee:1c:03:6e:b4:c0:5e:a7:02:
2f:18:a9:70:96:1e:f6:f1:ca:ed:55:d3:b9:3f:62:
d1:55:67:ca:21:6a:a3:81:5f:98:ef:86:cd:43:05:
2a:a1:e4:11:91:15:7e:5a:e1:f6:24:4b:7d:6d:92:
f4:80:1d:b5:04:6a:8b:c6:27:97:c5:4f:16:b3:f2:
e1:b2:fa:71:55:8f:42:53:15:b7:77:1c:f3:44:86:
b7:a9:72:a2:4d:36:d8:9e:e4:76:0c:04:be:1b:04:
1d:57:28:c9:06:01:a2:b0:9b:59:c0:f3:82:85:9c:
a2:70:bf:fa:c3:a9:e0:b6:5d:5a:bc:8c:e2:1f:7b:
29:60:36:35:66:1d:1e:4c:28:e0:d8:3f:a8:61:df:
78:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3A:85:FB:80:EA:7D:EF:D5:83:D5:E6:69:C0:FE:46:E0:A1:C8:EC
X509v3 Authority Key Identifier:
keyid:7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ac:00:93:a9:65:fa:c9:f4:5e:57:f0:df:86:7b:d4:d9:53:
3b:e6:50:cb:fb:59:06:46:3c:d3:d3:1b:d9:06:e0:66:c8:46:
72:3f:b6:72:da:3f:d8:99:34:89:ff:13:f9:a5:6d:68:30:0b:
14:99:4d:0a:37:28:3b:d6:5b:c7:72:20:84:5c:a6:aa:1f:d8:
34:37:f9:e3:ef:ba:98:e0:ac:93:3a:12:02:ff:13:0f:08:dd:
f3:33:19:2b:b9:c8:62:00:3e:12:e1:0f:95:08:2e:79:44:60:
a0:f8:44:71:34:1d:50:32:ed:05:0c:ab:5a:3f:6c:4f:e8:8e:
5c:59:44:a9:65:a4:b3:77:e0:5b:c4:0d:f4:05:71:08:c6:60:
85:48:d2:fd:b8:30:9a:41:7f:46:54:87:55:8a:31:32:87:cd:
31:fb:d2:fb:7d:af:c8:03:6a:13:50:c1:27:57:21:d1:3e:4f:
8d:3e:6e:dc:f7:77:e8:ea:2b:e1:c6:2c:73:bc:e7:a2:2b:eb:
81:d8:b9:b3:57:76:d5:93:86:14:90:01:07:d1:d9:8e:54:4f:
da:67:d9:f8:c5:56:08:b7:32:1e:3c:f1:e0:d0:16:92:52:1a:
b3:64:da:ec:87:0e:94:6c:dc:8f:96:1b:3b:99:e2:f3:d5:84:
9f:f4:46:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:26:20 2025 by rpki-client