Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
File: FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft (raw, json)
Hash identifier: q9ldbvAfOoz0MZmzdWOkDflQK776c7DOE4QANPP5ons=
Subject key identifier: 39:87:12:57:64:CF:FD:DB:7E:28:A1:2C:99:B4:5E:AB:0F:A6:B7:35
Authority key identifier: 16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE
Certificate issuer: /CN=1617d0afeabbf339b06db283c4b8e027a04abcae
Certificate serial: 0197B77C3449367897FA3C82BEC88AF2AA2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
Manifest number: 0364
Signing time: Sat 28 Jun 2025 17:00:59 +0000
Manifest this update: Sat 28 Jun 2025 17:00:59 +0000
Manifest next update: Sun 29 Jun 2025 17:00:59 +0000
Files and hashes: 1: FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl (hash: 82SibekZJQ4ESxr2hqdLU7oY/4nT0qAdW9Zrlw9/DJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:34:49:36:78:97:fa:3c:82:be:c8:8a:f2:aa:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1617d0afeabbf339b06db283c4b8e027a04abcae
Validity
Not Before: Jun 28 17:00:59 2025 GMT
Not After : Jun 29 17:00:59 2025 GMT
Subject: CN=3987125764cffddb7e28a12c99b45eab0fa6b735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:16:88:79:f7:5d:83:ac:c7:b3:bd:ee:af:
4f:0c:96:aa:78:e3:1f:69:96:53:dd:de:fa:c7:70:
ed:59:ed:4a:93:3b:80:a7:d6:ab:b0:75:89:2f:2e:
d7:b8:29:92:80:7a:66:50:84:be:b8:34:71:bd:16:
9f:b1:9c:3c:bb:73:82:2f:90:91:41:53:34:d7:7a:
11:a3:b8:95:bd:90:b8:b5:7a:64:98:44:95:e4:2e:
b5:19:86:e0:65:7b:bb:84:7e:7f:9a:67:33:53:b5:
17:11:93:b3:64:45:95:01:ef:5d:dd:a2:bd:21:a2:
8f:f2:db:20:94:ce:f2:97:c7:c2:89:25:e1:c7:a0:
ba:56:20:11:73:e7:1f:01:27:3e:ce:55:65:a1:ad:
e6:f7:0f:c1:21:d7:aa:bd:81:f9:23:f3:c6:52:7d:
aa:ce:d7:52:eb:f9:1d:07:3f:27:86:c6:f4:4b:63:
c6:41:79:a6:d5:2e:12:40:78:fc:60:c6:2a:d8:d7:
07:85:c7:ab:61:46:c8:e3:86:52:0a:b6:82:1a:b9:
7c:39:bd:67:ab:cd:6a:66:a8:10:9e:6c:c3:a7:89:
0c:5d:0d:3a:40:b6:38:bb:7a:8a:dc:59:55:4a:f5:
fb:34:ab:d8:54:a1:52:37:86:fd:b4:8b:c5:b7:b6:
01:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:87:12:57:64:CF:FD:DB:7E:28:A1:2C:99:B4:5E:AB:0F:A6:B7:35
X509v3 Authority Key Identifier:
keyid:16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:38:c2:b3:ba:2c:24:af:e9:20:50:83:52:ce:94:b0:65:16:
e0:e7:0f:f0:bb:3a:50:2a:06:78:c1:e4:e9:85:8e:8e:ec:18:
1c:b9:9f:38:61:c1:b4:85:17:58:23:ee:1f:0c:e9:4d:de:f8:
24:45:ce:8d:3e:a6:91:f8:9b:e6:24:79:19:87:47:0b:aa:57:
f4:18:2c:5d:ad:25:38:1a:a0:a3:ed:a2:be:11:59:d0:79:8f:
4e:ee:77:6a:4d:88:9f:f3:8a:66:10:34:27:da:9c:74:63:2c:
a3:1a:09:92:2f:52:a5:c7:48:8b:f9:3f:3f:0a:00:76:3e:a3:
ed:7f:6c:62:61:d1:d5:84:b2:70:64:0c:5a:40:12:8a:bb:5e:
2f:aa:78:6b:e2:d5:e5:2b:4b:28:a8:1d:63:e0:37:17:4c:56:
0b:14:e4:b2:7b:ae:89:19:3f:d1:da:4f:25:d5:a7:43:5b:0f:
a4:b4:a9:38:a7:6f:91:0f:76:5a:04:4d:91:ff:de:ae:78:45:
28:27:ed:29:a6:c6:d3:be:ce:fd:15:fa:fa:63:37:63:e8:1c:
52:45:36:d5:b9:d3:df:d3:98:af:f6:04:39:06:66:c5:54:2c:
50:57:c4:6e:77:e6:7e:db:2b:9a:ce:da:01:a9:39:6d:7a:aa:
93:2e:7f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:09 2025 by rpki-client