Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
File: w91X4yvXbbd77fxSETY8SAgPBgU.mft (raw, json)
Hash identifier: KJAsIHqhlvtCm3/LJjr98lI/XY4P/Wc6mY8fZvTd4w8=
Subject key identifier: FB:C1:7C:DC:CA:11:53:91:79:9E:44:AD:46:85:4F:55:4D:29:1E:4B
Authority key identifier: C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05
Certificate issuer: /CN=c3dd57e32bd76db77bedfc5211363c48080f0605
Certificate serial: 0197B70EC1BBD3A25201FCBF30E6C6E15A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
Manifest number: 0C20
Signing time: Sat 28 Jun 2025 15:01:27 +0000
Manifest this update: Sat 28 Jun 2025 15:01:27 +0000
Manifest next update: Sun 29 Jun 2025 15:01:27 +0000
Files and hashes: 1: w91X4yvXbbd77fxSETY8SAgPBgU.crl (hash: pzqQZVhEmsU3pxrJ7/192mW3E1H5MmKn523QLjzOZUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c1:bb:d3:a2:52:01:fc:bf:30:e6:c6:e1:5a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3dd57e32bd76db77bedfc5211363c48080f0605
Validity
Not Before: Jun 28 15:01:27 2025 GMT
Not After : Jun 29 15:01:27 2025 GMT
Subject: CN=fbc17cdcca115391799e44ad46854f554d291e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:26:98:a5:80:b6:cc:b4:8d:cb:5f:48:d6:
9b:03:e9:e7:c0:ba:ee:c3:a3:2b:73:b5:de:92:17:
fb:f1:28:df:a5:84:a3:63:f3:94:d7:d1:3e:fc:92:
ac:3d:b1:5d:50:76:90:00:78:41:99:d0:80:50:f3:
3b:2d:cb:d2:55:3c:e3:84:46:00:30:68:36:9a:e6:
4f:f3:0c:d8:83:67:d1:d9:30:bb:2d:a0:8d:4d:61:
c4:bb:28:0b:2c:0f:15:f7:13:fc:98:9b:23:7a:62:
6d:31:ac:0b:14:4f:a0:22:a2:ea:3b:57:36:1b:a7:
cd:7f:4b:ed:d8:27:6a:ef:58:09:69:97:0a:d8:f2:
26:60:87:5f:83:ee:ca:fe:1e:bf:e3:3f:e5:c6:43:
a7:af:5b:a2:bd:b4:8d:b4:c9:aa:22:da:a0:9e:5e:
f2:69:1d:76:f7:34:1c:0a:61:5f:3d:67:e1:fa:e6:
df:a1:f0:64:5e:ab:04:fa:b2:57:39:b9:aa:8d:dd:
79:0c:d1:14:57:86:95:e3:ca:22:48:fd:36:66:1c:
33:c7:2b:a5:1a:a3:0c:e7:b8:6f:83:56:cb:11:96:
47:3c:fc:44:20:d4:f7:6f:32:53:9e:fd:ea:df:97:
9a:64:fc:9c:f9:70:b1:ff:d6:9e:9c:3f:3c:cf:f3:
23:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C1:7C:DC:CA:11:53:91:79:9E:44:AD:46:85:4F:55:4D:29:1E:4B
X509v3 Authority Key Identifier:
keyid:C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:56:bc:02:aa:93:be:04:86:3f:d9:e8:f7:80:d9:57:48:3b:
f3:a6:f6:46:de:7c:84:e4:25:a4:18:bb:7b:85:30:ec:bc:95:
fc:63:e6:5e:4b:0b:41:c5:12:fd:fb:94:9e:bd:b5:de:59:81:
8e:c8:bb:82:89:22:55:63:4d:35:54:20:60:96:16:7e:b2:35:
2f:07:8e:33:73:60:eb:bb:7b:f4:6c:5e:aa:b3:be:90:17:9a:
a1:be:7b:3e:0c:e8:ab:fb:f8:b6:94:b9:fe:b4:0b:93:7e:b6:
6d:8e:33:28:6b:64:3c:6b:26:2a:f0:35:82:00:9e:ca:c5:7a:
b9:8b:fa:ce:f5:d7:ca:25:5b:dc:32:68:49:73:63:f6:02:ab:
d4:4f:ad:cd:83:76:b3:75:ca:de:ef:42:91:4c:0e:c9:e5:05:
ed:5e:52:59:6f:21:14:66:03:c2:26:a6:a3:9f:0b:2b:a7:0e:
3d:f9:51:b3:6b:cf:90:2a:b5:fd:ad:05:e8:4a:bd:fc:e4:03:
5e:7a:62:41:b1:32:f9:bd:0a:95:2f:3b:ee:9b:c0:d6:44:3e:
95:dd:39:e3:5e:4b:79:1b:33:59:c5:64:e7:da:4f:94:0d:2f:
ce:83:c4:ee:12:d3:44:83:13:bf:73:ff:1e:21:8f:8b:a2:a4:
d0:62:3c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:35 2025 by rpki-client