Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
File: fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft (raw, json)
Hash identifier: Y8BeGg+m1vuYsW7QoFcfs2kMSdnsDL6QiZOz9uD95/w=
Subject key identifier: 8E:7F:9A:4B:F7:E4:D0:8E:27:99:0F:DD:FE:7A:29:0F:E4:7F:F5:B9
Authority key identifier: 7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9
Certificate issuer: /CN=7c823028aeffc599aeffa5de5b90ccad33497db9
Certificate serial: 0197B6A159A6D1B1F9C6DD79B6AE6E84DB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
Manifest number: 0544
Signing time: Sat 28 Jun 2025 13:01:56 +0000
Manifest this update: Sat 28 Jun 2025 13:01:56 +0000
Manifest next update: Sun 29 Jun 2025 13:01:56 +0000
Files and hashes: 1: fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl (hash: KYLTAWTMF6qYLnF7Z60K55F4XZtPhDAD+yFfA+XvFbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:59:a6:d1:b1:f9:c6:dd:79:b6:ae:6e:84:db:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c823028aeffc599aeffa5de5b90ccad33497db9
Validity
Not Before: Jun 28 13:01:56 2025 GMT
Not After : Jun 29 13:01:56 2025 GMT
Subject: CN=8e7f9a4bf7e4d08e27990fddfe7a290fe47ff5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d1:91:31:4f:0d:af:c5:f9:a1:f0:43:b6:cc:
93:d4:75:48:16:49:44:a5:e7:9d:4c:95:55:de:18:
b9:db:0f:c1:aa:4d:ef:3b:38:02:70:55:55:11:85:
27:e6:4a:bf:58:3e:19:f1:50:a2:cc:ba:cc:72:fd:
3c:74:cd:cf:67:b3:58:35:a6:68:54:03:aa:57:6e:
1a:b6:74:ac:4f:fd:ae:af:22:a2:5b:82:21:f0:78:
96:b8:28:ec:df:d3:17:52:89:34:9a:ea:2d:26:2b:
56:0c:9a:98:94:39:8a:72:de:4a:a9:17:57:91:63:
0d:13:1a:e8:45:72:a2:50:0b:0a:8e:49:9d:6a:97:
9e:d5:61:bf:34:05:9f:ab:b4:8e:bd:bd:37:72:06:
a5:13:7f:c1:76:1b:aa:4d:a6:55:a4:65:36:e6:b0:
cd:24:c6:14:73:a8:3b:b9:54:ee:e0:91:ca:85:96:
a8:55:78:30:5e:49:9f:a4:0f:f9:f4:5a:b9:3c:e6:
b8:1b:49:a8:f0:a2:c9:1b:6c:ee:4c:31:a3:ed:34:
17:41:df:44:c4:d9:f6:3e:16:2b:8a:f5:e3:94:90:
af:c7:5b:ae:3e:35:cf:a5:bf:58:f2:89:5d:71:d9:
37:51:2a:6c:53:07:2d:47:ad:6c:e6:50:51:62:48:
b2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7F:9A:4B:F7:E4:D0:8E:27:99:0F:DD:FE:7A:29:0F:E4:7F:F5:B9
X509v3 Authority Key Identifier:
keyid:7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6f:a8:a6:a0:04:9f:54:a5:cd:c1:47:b5:96:2e:18:4b:b1:
c0:f6:90:46:3f:ff:88:45:d4:55:74:6c:75:43:bd:0e:d8:4e:
8c:7d:71:43:dd:46:6d:8a:25:8d:6c:54:03:9a:dc:0f:e4:a6:
70:22:e5:69:d6:10:8a:2d:88:3b:d1:34:a3:59:9e:6f:ee:9d:
b0:83:2d:1c:29:f3:ee:b5:1f:fe:b9:0c:19:0f:a5:67:89:69:
c6:b0:fa:59:60:45:91:32:e1:d4:23:69:6b:31:4c:25:f1:9d:
df:5e:e4:c7:6e:8e:96:75:70:d8:9f:06:ff:db:a4:28:38:9e:
32:cd:98:2c:32:e2:b6:4d:0a:2d:e7:54:a2:34:a9:c1:dd:96:
a4:55:e7:5a:9c:cb:5b:58:8c:d2:51:85:b3:bf:e6:e0:66:70:
c1:4b:62:db:f8:72:3b:04:73:f8:da:8d:8e:d8:8d:f5:f8:5b:
02:99:4d:5f:cf:95:3e:3c:6d:a0:fa:d4:43:c6:13:5d:e0:52:
14:8d:bb:a9:af:00:79:6d:51:3f:7a:e4:51:b9:59:f6:da:a4:
44:6c:3d:c8:b3:2f:2e:48:cb:55:56:09:a6:a5:7e:48:9c:c0:
e6:ee:2d:51:15:d8:f0:8b:30:a8:74:a5:37:65:41:30:02:08:
ef:3a:c3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:09:25 2025 by rpki-client