Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
File: F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft (raw, json)
Hash identifier: 85eA57xfUWRH0mA3bTNs1zeQtPXEsZAXZ+KfRJQlb54=
Subject key identifier: 32:24:4D:DC:0F:18:34:17:59:3E:40:40:13:58:BA:1C:21:EB:CE:A3
Authority key identifier: 17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
Certificate issuer: /CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Certificate serial: 0197B77C865281FB567AF7FAE695144FBB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
Manifest number: 0884
Signing time: Sat 28 Jun 2025 17:01:20 +0000
Manifest this update: Sat 28 Jun 2025 17:01:20 +0000
Manifest next update: Sun 29 Jun 2025 17:01:20 +0000
Files and hashes: 1: F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl (hash: ncwoRQKJqDFCAHEEQDg5iJnswRHzCSs9wennJUkmYqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:86:52:81:fb:56:7a:f7:fa:e6:95:14:4f:bb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Validity
Not Before: Jun 28 17:01:20 2025 GMT
Not After : Jun 29 17:01:20 2025 GMT
Subject: CN=32244ddc0f183417593e40401358ba1c21ebcea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:de:0e:d7:60:56:b4:fe:0f:78:dd:8c:c3:f2:
20:49:e6:0b:6b:e5:44:53:f3:4b:10:57:e6:7e:17:
80:f5:4d:db:e8:52:20:2a:8e:e9:9f:a3:a7:75:0d:
0d:74:f2:16:d5:8e:51:da:7b:8f:d1:53:b1:95:4d:
5e:5e:dd:f8:8f:9a:f6:79:a1:75:db:16:e2:2f:87:
84:97:37:26:43:cf:cc:46:2c:36:5f:3b:92:e2:b8:
a8:67:a0:6f:6a:db:eb:4c:c0:fe:5d:43:30:6d:cf:
3e:df:2e:0b:62:a2:e7:15:6e:82:de:f1:39:b8:8a:
6e:8f:70:22:d6:99:48:6d:09:10:67:2c:29:83:d5:
03:24:d9:7c:db:f4:5c:5e:c0:58:d2:bc:ad:3b:57:
26:88:13:b1:02:81:61:09:43:1e:b8:12:0f:f0:8c:
4b:8c:05:cb:a5:09:7b:23:a3:c4:57:86:90:03:aa:
4d:76:0c:6b:34:9e:e6:ab:ea:f8:90:aa:c7:4d:a8:
c4:f6:09:80:25:51:3c:ec:63:1e:35:2c:b9:e5:8c:
e9:6c:8a:22:b4:ad:ab:4f:68:5b:45:93:2a:14:f1:
4d:41:35:84:7e:fd:f7:61:37:6c:8b:e1:a6:31:65:
67:57:6f:75:6f:e5:d6:67:b2:0f:d9:0b:2a:f4:7d:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:24:4D:DC:0F:18:34:17:59:3E:40:40:13:58:BA:1C:21:EB:CE:A3
X509v3 Authority Key Identifier:
keyid:17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e6:6b:22:8c:91:18:0f:ea:fd:6c:fb:be:ce:83:24:83:11:
5f:ef:80:65:cd:1a:db:2a:dc:cd:34:d1:33:79:5b:ae:4b:07:
ff:32:6a:bd:2e:9c:32:53:1a:51:73:d8:c8:d7:00:2b:44:34:
9f:c3:ee:86:25:18:7d:58:14:20:38:dd:aa:8f:8a:81:ff:14:
ba:04:88:54:f5:ad:72:34:74:5e:de:6d:6f:9e:40:8c:ad:be:
65:2c:43:75:f5:fc:5e:34:88:76:41:29:76:40:6b:d6:df:3e:
eb:7d:d9:4a:23:fb:05:f2:78:92:01:aa:39:76:f6:51:6a:24:
4a:8f:d9:be:d7:6a:b1:91:6d:1e:f6:45:ff:d4:03:2f:34:65:
78:c0:b6:c3:1c:20:1c:4d:20:5c:c6:8b:54:29:70:73:78:e9:
76:e0:9c:0c:64:e5:45:76:c8:9b:b7:3b:98:94:94:df:f1:7c:
3b:d5:b4:a9:2e:f4:d1:05:d6:5a:9d:95:12:f5:b0:43:e4:56:
e3:0c:cf:4c:3a:87:eb:10:fe:ba:e2:45:d7:58:22:b7:13:56:
ca:c8:1f:0e:81:23:5b:3f:35:cc:f4:29:78:e7:d4:82:bc:83:
bd:8b:e7:18:71:e7:aa:ee:db:61:88:10:6d:fd:8e:c4:7f:c7:
84:62:79:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:21 2025 by rpki-client