Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft
File: fXrxi3mJleFLOBNhoGu2aEm36Fo.mft (raw, json)
Hash identifier: 4ybWcjjShBtjmOK0C7K7Yr8aiwNBESdjZ5gtO2kaCV8=
Subject key identifier: 10:EF:77:FF:74:04:DD:4B:11:EB:3D:EF:DF:13:DF:DC:4C:F0:F9:F2
Authority key identifier: 7D:7A:F1:8B:79:89:95:E1:4B:38:13:61:A0:6B:B6:68:49:B7:E8:5A
Certificate issuer: /CN=7d7af18b798995e14b381361a06bb66849b7e85a
Certificate serial: 0197B93389F2E4F09BE4F78D871C188CA4EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXrxi3mJleFLOBNhoGu2aEm36Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft
Manifest number: 06E1
Signing time: Sun 29 Jun 2025 01:00:51 +0000
Manifest this update: Sun 29 Jun 2025 01:00:51 +0000
Manifest next update: Mon 30 Jun 2025 01:00:51 +0000
Files and hashes: 1: fXrxi3mJleFLOBNhoGu2aEm36Fo.crl (hash: QjHnlg3R+8axXxenLM6z8M0e4cFyVKvzRtiSSxQ3s+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXrxi3mJleFLOBNhoGu2aEm36Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:89:f2:e4:f0:9b:e4:f7:8d:87:1c:18:8c:a4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7af18b798995e14b381361a06bb66849b7e85a
Validity
Not Before: Jun 29 01:00:51 2025 GMT
Not After : Jun 30 01:00:51 2025 GMT
Subject: CN=10ef77ff7404dd4b11eb3defdf13dfdc4cf0f9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:35:ca:a8:12:31:f8:05:a2:55:48:0a:bf:
97:9f:e7:98:8e:a1:05:25:36:9c:db:ea:c0:2b:85:
50:f6:ff:f2:c9:25:ee:4b:31:b6:2e:dd:49:ec:5c:
d6:f3:4b:31:22:91:2b:26:f8:b8:33:d1:84:ef:38:
d1:5c:0a:ef:97:87:37:13:4b:75:cf:88:41:c3:4c:
f8:46:b1:40:66:c9:0f:06:55:48:fb:77:a5:0e:e7:
a6:f0:29:07:4a:12:b7:d4:e8:ef:20:a8:fe:c5:7d:
9b:5a:39:15:ae:bb:9c:97:31:f2:ba:74:e1:6d:57:
dd:9f:7b:62:d5:8a:32:af:cc:64:e2:16:0c:a8:34:
f8:bb:78:40:79:1f:05:9f:84:9c:a8:1f:bf:4f:dd:
bd:3d:07:70:b7:a6:17:38:58:11:3d:40:d6:8d:9c:
f8:0d:12:19:37:e9:68:26:ce:32:f4:ab:e6:08:86:
08:e6:ad:8e:3e:6d:83:af:24:73:c1:cc:49:85:2f:
4e:8c:5a:45:9b:31:96:8d:1d:60:a3:77:89:45:92:
1f:44:55:aa:3d:50:3e:77:3c:19:99:b6:ff:6a:48:
93:7a:56:9f:24:f9:65:1c:8f:15:fb:46:57:0f:d6:
94:44:c4:98:00:8a:ad:45:c1:18:9b:46:85:58:55:
ef:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EF:77:FF:74:04:DD:4B:11:EB:3D:EF:DF:13:DF:DC:4C:F0:F9:F2
X509v3 Authority Key Identifier:
keyid:7D:7A:F1:8B:79:89:95:E1:4B:38:13:61:A0:6B:B6:68:49:B7:E8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXrxi3mJleFLOBNhoGu2aEm36Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3a:49:c4:9d:d6:09:83:0e:06:a9:ad:cb:f4:16:21:58:01:
6f:d0:d9:6f:f9:77:d6:c8:7f:8e:67:05:02:5c:2b:9a:bc:93:
34:9f:53:0c:67:ca:0e:57:ee:a3:e5:13:3d:77:80:c2:39:8c:
60:2a:7e:2b:00:cc:05:b3:96:ba:cf:e1:08:54:91:94:1d:89:
1f:c0:1f:56:1e:08:bc:2b:a7:46:94:df:ce:34:f0:54:a9:74:
ea:d4:52:63:58:c1:62:bc:69:7b:c6:2f:dc:75:8e:3e:c3:f1:
b0:f4:19:a8:65:cc:11:75:07:c5:ea:39:67:8a:b9:6c:a6:9b:
2e:77:ee:5a:c1:d9:aa:c4:03:b6:d7:04:1c:52:08:31:92:b1:
ca:2e:c7:cb:1f:2e:ff:9e:1e:c2:90:52:dd:cc:c5:cf:ba:e7:
dd:e0:e5:d5:7f:ea:69:f7:5a:05:0a:1b:d7:00:38:07:94:f6:
6e:db:ec:7d:94:02:df:e2:76:14:6d:8b:f0:9c:5b:de:51:58:
f3:f1:7f:1f:35:b7:9d:93:c8:59:fa:e0:cf:dd:39:66:e5:55:
13:53:44:d7:be:ec:46:02:37:6e:4b:51:72:2e:e8:d5:15:d3:
3c:93:a3:27:11:d5:b8:b5:fd:89:c2:18:e6:44:10:8b:07:fa:
9f:cf:cc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:05:18 2025 by rpki-client