Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
File: Fde1_SspxmhdeuJ2recEtYZscwc.mft (raw, json)
Hash identifier: WKu06+tiU5FhZN0tPSdeB1/G8E7ut92u/JTp6r3R/XE=
Subject key identifier: 38:DE:11:F0:43:2D:4B:BA:2C:97:27:AF:35:C7:D4:10:68:74:ED:6C
Authority key identifier: 15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07
Certificate issuer: /CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307
Certificate serial: 0197B5FC516861AB27EDBEA33AF3F1475692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
Manifest number: 0E81
Signing time: Sat 28 Jun 2025 10:01:41 +0000
Manifest this update: Sat 28 Jun 2025 10:01:41 +0000
Manifest next update: Sun 29 Jun 2025 10:01:41 +0000
Files and hashes: 1: Fde1_SspxmhdeuJ2recEtYZscwc.crl (hash: 8758kAu7LBudLRtM8Nhyh1Vwh0p/KiFA+cQW5Z+cyn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:51:68:61:ab:27:ed:be:a3:3a:f3:f1:47:56:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307
Validity
Not Before: Jun 28 10:01:41 2025 GMT
Not After : Jun 29 10:01:41 2025 GMT
Subject: CN=38de11f0432d4bba2c9727af35c7d4106874ed6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:c4:a4:13:61:f9:e2:71:59:56:75:e0:f4:
cf:e0:a4:cf:52:1b:30:9b:0f:e0:fa:96:03:05:f3:
17:17:fd:3c:6a:c9:1a:8f:50:30:e6:64:50:c2:6b:
36:c6:c8:74:23:1d:da:35:a3:35:36:04:bb:83:70:
13:fd:c2:b5:b3:72:ed:df:9a:ac:7f:e8:84:78:a6:
8c:03:ff:bb:ce:b1:2c:af:b0:f9:47:25:ce:c1:74:
36:df:30:c9:9f:80:9a:78:ce:4f:e0:76:8c:58:de:
7f:4c:a4:ed:ec:65:b6:dd:94:52:26:17:7c:47:c3:
46:1d:05:ae:36:53:bf:44:a3:f9:e0:03:5c:ee:d6:
7c:0f:30:fc:71:3f:1a:7f:91:b0:9d:d0:36:8b:b5:
32:01:d2:8d:e2:fd:92:24:72:d4:d7:d7:51:a5:6f:
4d:05:9d:31:32:2c:09:9c:d2:39:bf:3b:7c:87:ae:
ea:31:93:66:61:6a:47:e6:75:3c:4e:d2:e0:28:bc:
b5:ad:b6:92:60:32:d4:82:d1:15:9a:83:59:3c:f2:
98:41:55:e7:11:3e:9e:46:a6:73:bf:b3:48:77:c8:
8d:6a:4d:b8:b7:cf:e0:95:1d:ae:3f:df:95:a5:1c:
aa:c8:4b:db:c2:10:e5:f2:62:f9:f1:bb:1a:46:3e:
fc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DE:11:F0:43:2D:4B:BA:2C:97:27:AF:35:C7:D4:10:68:74:ED:6C
X509v3 Authority Key Identifier:
keyid:15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d0:ab:b7:a9:a2:79:27:e7:29:8d:8c:cf:ea:6b:c3:9c:92:
e9:10:77:bd:0a:ae:a4:6f:5d:eb:2d:85:69:57:02:4c:05:02:
41:81:31:56:79:24:8a:d6:ff:76:8f:3a:a5:f2:2b:c5:51:c5:
49:f6:c2:4e:1e:92:8b:65:b1:55:61:0a:e5:52:8d:3a:42:1e:
58:61:4d:46:36:14:87:e5:f8:7c:11:12:92:7a:c2:7c:7b:50:
9c:b3:bb:87:85:05:e8:6f:2a:bf:12:60:65:81:28:96:a7:83:
bd:02:c3:45:6c:fc:5f:7f:e4:9c:fd:f5:e2:98:4d:d3:2e:f3:
22:35:4e:fd:45:e0:3a:57:85:1b:0b:9c:52:e3:cf:4b:da:bb:
ba:76:2e:40:e3:c8:23:90:4a:30:03:62:31:18:02:2a:58:d9:
ec:97:71:45:4f:5c:30:f1:53:f0:7f:38:42:13:e9:a5:58:1a:
2b:49:03:7d:54:a8:a6:63:32:25:71:a1:34:e0:06:c1:9f:44:
38:35:73:f2:5b:f3:69:39:27:5a:90:23:e6:e0:19:f6:76:5b:
97:63:69:28:1e:47:81:93:f4:66:5a:2e:72:27:2d:bf:c2:86:
c3:51:94:30:81:37:e9:c2:b3:96:3a:7e:1d:46:a3:f9:68:ae:
ce:c5:8e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:48 2025 by rpki-client