
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
File: f3NriKAkBNQwS92tX_VQSmgz57c.mft (raw, json)
Hash identifier: w+MO9XQIXlZRq1HSEf+NzvZioAOnrj6gfY3Ks7uOIeQ=
Subject key identifier: 03:83:93:F6:ED:5A:BC:7E:88:45:3C:0B:4B:86:B2:81:1D:A3:45:54
Authority key identifier: 7F:73:6B:88:A0:24:04:D4:30:4B:DD:AD:5F:F5:50:4A:68:33:E7:B7
Certificate issuer: /CN=7f736b88a02404d4304bddad5ff5504a6833e7b7
Certificate serial: 0197B88F390B12A748B1C23894784977AB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 22:01:23 +0000
Manifest this update: Sat 28 Jun 2025 22:01:23 +0000
Manifest next update: Sun 29 Jun 2025 22:01:23 +0000
Files and hashes: 1: f3NriKAkBNQwS92tX_VQSmgz57c.crl (hash: xTTprgNVxVB3jNB4feY4yxgM9UmL6oeQWbOudRxMGD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:39:0b:12:a7:48:b1:c2:38:94:78:49:77:ab:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f736b88a02404d4304bddad5ff5504a6833e7b7
Validity
Not Before: Jun 28 22:01:23 2025 GMT
Not After : Jun 29 22:01:23 2025 GMT
Subject: CN=038393f6ed5abc7e88453c0b4b86b2811da34554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:24:9d:6b:04:d5:49:46:30:c9:a9:fe:d4:51:
c1:b2:60:45:03:4e:0a:12:31:09:dd:73:f8:5a:a1:
18:7f:8f:c7:cb:47:3e:a1:f7:9d:eb:53:c3:7f:28:
c3:30:ec:5e:e1:d0:f4:68:37:0a:ee:57:da:b5:c4:
ef:92:9a:73:ef:72:38:9a:24:96:40:c3:13:7e:fc:
c6:26:d4:06:68:f5:6a:a7:45:a6:3c:27:a3:a8:12:
e0:09:af:f5:cd:2c:1d:0b:6a:97:6c:72:a8:cf:d2:
bd:05:7d:71:b0:f9:23:86:91:7c:fc:fe:fe:06:4b:
c9:1b:af:31:d9:65:5f:8f:25:ae:31:5f:90:f3:88:
17:6e:0a:45:2b:48:42:1c:9e:71:5f:9d:e8:65:5f:
0f:f5:a1:4a:b3:02:e9:76:5d:87:3c:57:cf:1b:a6:
e6:c5:0d:b8:25:03:6e:f2:06:24:0e:ee:20:98:f7:
f7:f2:b8:93:b2:64:63:b7:20:49:e8:44:08:42:3b:
cf:e9:aa:41:f5:0c:f5:c8:d6:cb:0a:6d:2a:49:e4:
f2:c7:ff:14:c4:59:e8:43:f1:f2:01:91:db:de:6b:
ae:bc:d5:9e:ef:70:c1:ef:85:e0:96:66:29:89:c1:
0c:00:13:b5:9b:89:7f:9c:bb:27:93:07:36:13:e3:
ed:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:83:93:F6:ED:5A:BC:7E:88:45:3C:0B:4B:86:B2:81:1D:A3:45:54
X509v3 Authority Key Identifier:
keyid:7F:73:6B:88:A0:24:04:D4:30:4B:DD:AD:5F:F5:50:4A:68:33:E7:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:fe:f0:d2:c9:97:e6:22:ae:35:91:cf:65:8b:4a:bf:b3:5e:
56:be:31:49:19:b0:97:50:c5:92:b9:10:cb:13:1d:88:12:cf:
45:64:bb:91:ce:d5:64:3f:38:90:5e:8e:8a:a9:39:38:b8:57:
68:a6:74:3a:93:4e:34:8e:53:27:24:55:4a:83:29:74:65:ff:
e1:ca:ad:9b:d9:21:5b:23:43:13:d6:da:3b:48:da:81:94:36:
58:c8:dc:48:a3:57:56:4a:3c:59:77:f3:7f:18:f4:e7:48:40:
af:6d:57:e2:cc:94:a2:19:bc:b6:43:eb:9b:92:4c:34:9d:81:
b9:20:11:0c:71:19:8c:5e:e0:77:94:55:71:6e:69:4f:f4:3c:
d4:c5:11:84:32:7c:25:01:02:4b:c3:64:2a:c6:9d:62:c6:91:
9b:b4:53:f8:98:20:58:2c:d2:6d:b6:7f:5c:ca:ad:27:43:72:
8d:e1:95:0c:8e:5f:f7:aa:50:6f:36:f8:b3:6a:8d:cb:c2:75:
29:89:1a:07:25:87:11:a4:a0:45:27:cd:67:84:62:ff:1e:2c:
c1:e7:83:e9:f0:e5:01:ee:16:04:e2:35:76:81:11:2f:8e:13:
38:1c:4b:21:30:d3:72:56:d6:6b:c2:76:33:07:fe:f5:c4:0c:
84:e7:e3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:33 2025 by rpki-client