Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
File: fqigEMxtfJMg4BLqHR424KdhwTg.mft (raw, json)
Hash identifier: pi5WjbF3DU34pJoTOWg30lrpH6QzNB1cW4jDl4gEBO8=
Subject key identifier: C3:C6:43:78:16:72:0E:C2:DA:5F:5A:9E:94:3C:1F:5C:54:D5:1D:34
Authority key identifier: 7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38
Certificate issuer: /CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138
Certificate serial: 0197C2DB674896B0B35A81EADFA84ED0FFD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
Manifest number: 059A
Signing time: Mon 30 Jun 2025 22:00:47 +0000
Manifest this update: Mon 30 Jun 2025 22:00:47 +0000
Manifest next update: Tue 01 Jul 2025 22:00:47 +0000
Files and hashes: 1: fqigEMxtfJMg4BLqHR424KdhwTg.crl (hash: J7/VKbg34zAqAnpn+g26BMrCjL3DSN1v9jpvwyje1Zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:db:67:48:96:b0:b3:5a:81:ea:df:a8:4e:d0:ff:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138
Validity
Not Before: Jun 30 22:00:47 2025 GMT
Not After : Jul 1 22:00:47 2025 GMT
Subject: CN=c3c6437816720ec2da5f5a9e943c1f5c54d51d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f8:ae:aa:b9:e7:39:91:9b:90:80:f4:25:e5:
ef:27:5b:12:7c:60:c0:4d:19:2c:f2:c4:14:ad:ce:
74:f6:de:c2:7e:cd:6e:7a:26:1c:d2:36:e6:d9:84:
0e:c9:fe:51:16:6b:37:2a:3a:1e:68:3d:25:1c:15:
27:df:5d:7b:e9:78:c9:71:da:b7:31:e5:87:dc:e6:
f5:59:cc:30:dc:5d:e4:52:0c:cb:83:98:2a:ca:0c:
80:88:34:5d:2b:49:0c:3c:9b:90:55:35:44:9c:c9:
b2:5f:64:05:a8:a4:d4:2a:ab:87:f6:67:e7:28:33:
33:60:cc:d4:fc:13:b8:a4:10:b3:89:1c:58:c2:d5:
c3:bd:60:40:47:2c:7f:dd:af:0d:bd:62:c4:16:d7:
df:bd:1c:de:0a:df:7d:cc:fe:c0:69:54:d6:c9:8c:
52:14:f0:04:16:f0:82:39:05:9f:bb:e6:a2:00:c3:
7c:fb:8d:6c:3e:ac:78:77:9a:81:f9:93:45:b7:ad:
fe:f5:91:7c:c9:18:4a:67:12:40:85:fd:1d:7e:38:
92:76:d3:90:b6:4a:c2:1a:ff:a1:b6:c8:77:e3:15:
e9:e2:a4:0d:ee:8e:aa:e0:fb:f9:89:b0:70:68:5d:
a7:63:5d:7f:10:0e:49:61:b9:6f:71:29:7e:e0:61:
65:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C6:43:78:16:72:0E:C2:DA:5F:5A:9E:94:3C:1F:5C:54:D5:1D:34
X509v3 Authority Key Identifier:
keyid:7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:be:b9:06:3a:2f:99:39:a5:bb:69:f6:1d:87:cc:4d:e8:91:
b5:09:09:70:98:4b:61:d8:83:93:d6:bc:1d:07:2e:0f:90:25:
cc:90:18:0d:f1:74:0c:52:45:d4:9e:fb:dd:4a:6b:12:e8:a5:
da:a4:e0:68:f0:a7:86:f8:6a:e5:ba:67:ef:3a:2f:8a:5d:ca:
67:cc:55:c4:5e:b5:78:25:2b:e2:fe:75:d2:f0:80:80:bb:10:
50:37:29:77:6a:59:2f:99:2e:33:ac:0a:d7:61:08:98:4a:24:
3c:73:ee:34:33:7c:b5:1e:81:08:e3:3d:a2:19:ac:31:fb:f4:
50:ca:32:66:56:eb:05:de:23:ac:92:e7:ee:81:2b:43:a6:74:
0c:49:21:e5:cb:a5:33:e0:08:92:c2:64:88:2a:e4:e4:10:83:
04:fd:c4:2c:6f:22:1f:a9:4d:ca:ea:d6:e7:89:72:a2:d4:98:
e0:c4:40:2f:3c:f7:35:2e:2a:fb:8f:d4:49:15:c4:e8:47:6a:
9c:6e:2e:93:8b:e5:49:9f:59:e5:2d:f5:a4:83:06:ad:69:ba:
ff:40:77:44:54:b3:5e:ce:90:fe:30:a9:87:94:2d:2d:39:a6:
dd:0f:87:80:27:c9:48:25:3d:75:50:27:9a:5d:d7:0e:95:d9:
3f:e1:4b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:36:09 2025 by rpki-client