Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
File: fsS92Wu94fVcNATX7Ga-BH6xfZw.mft (raw, json)
Hash identifier: aKBWK62PinVPMYZ3fyUYV1U+OR4FUq7jxoaxkEr18oQ=
Subject key identifier: A4:5D:D2:B2:5C:55:16:65:74:41:76:9E:5A:99:02:43:BA:AD:8D:22
Authority key identifier: 7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
Certificate issuer: /CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Certificate serial: 0197B96A79574839339DDDF091E0B03190CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
Manifest number: 0A2C
Signing time: Sun 29 Jun 2025 02:00:52 +0000
Manifest this update: Sun 29 Jun 2025 02:00:52 +0000
Manifest next update: Mon 30 Jun 2025 02:00:52 +0000
Files and hashes: 1: fsS92Wu94fVcNATX7Ga-BH6xfZw.crl (hash: PQkXEU85HKYxW51ZSrkr4BnCDklnuExTEGvPb5c+7xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:79:57:48:39:33:9d:dd:f0:91:e0:b0:31:90:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Validity
Not Before: Jun 29 02:00:52 2025 GMT
Not After : Jun 30 02:00:52 2025 GMT
Subject: CN=a45dd2b25c5516657441769e5a990243baad8d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:29:11:d4:73:89:ac:82:10:44:21:f4:fb:
c0:0e:25:8a:b0:c7:9d:f2:4f:ff:6b:f8:9e:6c:28:
7d:64:a2:b9:da:80:04:03:c4:16:8f:d5:fc:45:cf:
48:d2:b0:ab:d5:0f:04:c0:e3:a1:1c:8b:6b:83:4f:
5a:46:71:12:9b:30:12:11:76:5a:98:27:80:5c:97:
4c:d1:0b:00:96:44:d3:75:b0:13:23:7f:a3:3e:83:
09:c5:19:d6:30:37:e5:8c:04:9b:90:ab:7c:54:7e:
dd:04:0c:59:7d:e8:0e:a9:0a:19:46:03:d8:11:97:
6b:d3:4d:33:69:23:bd:6e:33:4c:ce:bc:1d:ba:44:
42:37:ba:48:88:ba:8b:01:26:52:2e:48:67:23:1b:
e6:ae:47:73:87:7c:7a:a7:d4:bf:31:13:25:11:d9:
d6:e6:06:24:76:ff:51:24:35:b0:14:88:8d:d7:80:
0a:15:7e:c2:36:68:ec:06:cf:26:5b:d8:a4:15:fe:
79:db:48:f6:3d:6f:c2:86:c0:bf:cb:40:9d:57:6d:
4b:2f:74:a9:f1:de:5f:87:a5:93:b7:3c:19:b7:43:
a4:b5:16:f6:00:84:31:b9:aa:48:98:ac:2f:36:e4:
85:e7:12:b1:40:ab:fc:4b:09:18:de:a0:82:28:7a:
f0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5D:D2:B2:5C:55:16:65:74:41:76:9E:5A:99:02:43:BA:AD:8D:22
X509v3 Authority Key Identifier:
keyid:7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ac:12:ca:77:67:77:e9:34:9a:7e:45:e1:77:2b:cd:a4:2d:
14:90:44:12:8f:25:8b:60:5b:dc:63:56:60:69:9f:8f:65:be:
90:38:e0:86:e7:24:ef:49:4a:1a:cb:ef:19:92:bd:c1:2d:e9:
8d:fa:71:34:89:60:a4:79:5f:66:5c:69:ee:de:5b:ff:c0:3c:
f5:97:f2:bd:ab:85:a6:bd:86:de:26:58:6d:49:b9:37:9a:2c:
3f:a7:36:c4:13:b9:41:96:40:63:de:2e:13:29:00:18:4e:88:
7a:91:ae:28:3f:5f:28:5f:0c:f3:dd:95:ce:20:e2:a9:89:08:
13:90:6f:f3:1d:ec:76:e8:93:bd:0e:9e:57:70:8b:92:61:58:
e4:20:cd:d6:40:81:f8:65:39:22:a4:14:97:72:34:c3:29:72:
2b:17:cd:da:be:61:7e:18:d8:a7:f5:5a:ee:26:4a:b2:ae:21:
54:8b:e5:36:05:3d:4c:7c:84:ad:f8:f2:88:14:38:3e:53:a5:
38:a7:e4:9e:33:f5:c5:be:f9:9e:30:75:89:58:35:53:de:34:
2c:38:9b:ba:22:14:55:b0:93:df:9b:9a:8c:1c:80:37:1f:a5:
22:ba:61:65:66:da:47:a1:b6:20:91:ab:3c:4d:a6:c3:dc:04:
33:6a:2f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:11:48 2025 by rpki-client