Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
File: fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft (raw, json)
Hash identifier: gzr3RQpinGwGoImxSfBvU2ByHEUB8ak/ISQHM28ZW2A=
Subject key identifier: C1:F2:9E:9A:B0:9A:33:36:57:8A:FC:C7:E1:92:12:9B:7E:B6:04:83
Authority key identifier: 7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F
Certificate issuer: /CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
Certificate serial: 0197B6A240B08FE8C0C1D168EDF49E190AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
Manifest number: 0E71
Signing time: Sat 28 Jun 2025 13:02:56 +0000
Manifest this update: Sat 28 Jun 2025 13:02:56 +0000
Manifest next update: Sun 29 Jun 2025 13:02:56 +0000
Files and hashes: 1: fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl (hash: zpAbvuGl3e9M6ldjwFL7Qjz3vlgOrxLHXlMgDM//UWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:40:b0:8f:e8:c0:c1:d1:68:ed:f4:9e:19:0a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
Validity
Not Before: Jun 28 13:02:56 2025 GMT
Not After : Jun 29 13:02:56 2025 GMT
Subject: CN=c1f29e9ab09a3336578afcc7e192129b7eb60483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d7:54:54:cd:af:00:7e:75:87:79:5a:43:2c:
6f:9b:2e:59:2b:02:60:f0:85:b8:a8:39:c0:60:74:
ab:96:82:b9:57:be:04:72:b0:3e:f9:23:2a:90:c1:
b6:0d:b6:fe:57:a1:45:54:9f:25:ec:4e:1e:c2:b0:
7e:87:c0:a2:c3:ba:32:46:15:d4:20:b5:a9:57:10:
67:21:22:4a:9d:83:71:a9:a4:23:5b:b7:b3:b8:a4:
97:ff:9c:b9:cb:1e:19:9e:9b:47:79:57:69:24:1f:
76:e2:66:34:09:62:5a:72:8d:79:50:25:76:bf:5c:
42:55:ae:ef:5e:b0:03:8d:09:72:a8:f2:b3:b6:95:
35:a4:68:a6:1e:1e:e8:2b:24:db:03:5c:21:2a:c7:
c9:29:08:03:47:60:ac:09:4f:0f:47:8a:1b:a0:50:
1f:28:8a:83:0b:d2:fc:ad:fe:9f:a6:d6:72:d0:e0:
73:a2:2d:72:1e:e8:aa:05:20:23:85:a2:b6:26:91:
d7:c1:5f:8f:bf:4b:9f:ff:73:3c:bc:af:38:88:cd:
b6:87:00:9a:b0:43:f6:0c:ee:c7:99:82:db:52:bf:
c4:91:81:56:30:9b:58:f0:1d:df:8d:4f:71:4a:bd:
f8:03:3a:3c:36:b9:a4:32:e7:fa:8d:1a:e6:b1:a9:
57:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F2:9E:9A:B0:9A:33:36:57:8A:FC:C7:E1:92:12:9B:7E:B6:04:83
X509v3 Authority Key Identifier:
keyid:7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:a6:fc:a1:ed:78:a1:5a:2b:e4:7f:32:4a:85:be:57:e8:da:
15:c2:74:51:dd:ce:58:b4:50:3c:26:69:1d:dc:64:73:02:aa:
bf:f5:a7:45:16:99:ec:a4:c4:b1:76:dc:15:eb:2d:c6:3e:4b:
88:37:9e:df:93:54:ae:12:3b:c1:62:86:62:ef:54:e3:80:d3:
36:02:30:9f:a5:1c:be:d5:07:f6:b2:fd:db:2a:6b:d8:1e:6d:
7d:37:15:21:5a:e8:16:1e:47:c7:f2:2d:67:33:e4:3a:59:18:
34:1e:2e:fb:b2:ec:1e:56:f2:f8:22:bf:a9:96:0a:2a:09:60:
87:2a:12:5d:d6:9a:00:d7:2d:20:1d:65:97:7a:81:19:cd:bd:
7c:8a:86:24:39:dd:5d:c8:1b:df:41:e4:15:04:dd:5a:27:65:
d1:02:26:ff:74:b3:c4:36:40:6d:cf:76:cc:15:b9:f4:09:28:
df:23:f7:72:74:70:3b:3b:58:09:af:5a:8e:e7:12:05:49:fc:
10:d8:e6:44:9a:de:b9:f8:aa:5a:be:48:15:41:d4:55:d6:86:
7f:42:74:3b:fc:09:55:7e:72:05:e3:dc:01:11:02:78:51:42:
8c:cf:95:45:ee:ba:a7:4c:3e:2d:df:ab:51:d5:7d:05:b5:b1:
19:d4:db:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:47 2025 by rpki-client