Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
File: _s4nFs6tjACFRiJL5LVocIaD_0s.mft (raw, json)
Hash identifier: ehsMkkSQGr042KPCtPkhNXK9LzCkSLskZpwAoPhVvac=
Subject key identifier: DD:13:53:49:11:65:58:54:43:4F:9F:A9:EA:B6:12:9A:77:43:D9:E3
Authority key identifier: FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B
Certificate issuer: /CN=fece2716cead8c008546224be4b568708683ff4b
Certificate serial: 0197B745BFFE2F832AE7395F1C88793A01AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
Manifest number: 1512
Signing time: Sat 28 Jun 2025 16:01:31 +0000
Manifest this update: Sat 28 Jun 2025 16:01:31 +0000
Manifest next update: Sun 29 Jun 2025 16:01:31 +0000
Files and hashes: 1: _s4nFs6tjACFRiJL5LVocIaD_0s.crl (hash: S/cMRudm2QPaEJCJzfjr2z1s80flFrtX74r9rd41SPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:bf:fe:2f:83:2a:e7:39:5f:1c:88:79:3a:01:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fece2716cead8c008546224be4b568708683ff4b
Validity
Not Before: Jun 28 16:01:31 2025 GMT
Not After : Jun 29 16:01:31 2025 GMT
Subject: CN=dd13534911655854434f9fa9eab6129a7743d9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:e7:05:0c:89:62:9a:37:ad:f0:f4:07:83:
fb:06:12:13:74:65:bc:81:f0:3f:a4:58:f9:68:3b:
20:7b:f0:2d:e1:f4:56:e3:1d:ca:54:f1:89:7c:48:
ae:cb:69:ec:7b:58:4b:10:c7:1c:d4:fa:34:6c:3f:
92:ae:56:ec:e3:01:70:12:16:9a:ae:e1:a7:bc:f8:
f0:d6:01:37:31:48:d0:94:07:d9:a1:40:bf:e7:ae:
bf:e6:f2:1f:37:97:d3:50:7c:2f:ce:27:69:c2:49:
25:6e:c9:bd:65:07:73:5c:a8:74:71:cb:c3:ae:34:
3c:f3:93:6d:ba:e8:a7:87:48:4e:65:2d:14:08:04:
50:9a:13:5b:74:51:9f:28:ef:46:a4:ca:ec:c3:d6:
37:90:0a:5b:d0:de:d3:63:49:af:b1:22:46:6c:71:
b7:74:b9:96:d5:af:02:9d:ec:bf:f3:07:19:47:a0:
ca:22:15:a0:ce:5f:d9:b2:94:03:49:bd:c9:5a:1c:
67:82:a4:d3:d0:a8:b3:45:72:e1:e2:7b:57:d7:f6:
df:5e:01:35:06:7a:eb:54:48:a2:7c:31:da:65:5d:
1b:1a:ce:4a:2b:35:4c:1f:06:42:75:48:03:f4:46:
cf:cf:1a:e0:7c:e9:7c:78:51:01:3e:ee:aa:c7:47:
df:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:13:53:49:11:65:58:54:43:4F:9F:A9:EA:B6:12:9A:77:43:D9:E3
X509v3 Authority Key Identifier:
keyid:FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5a:13:a0:19:6a:5f:46:70:b1:9d:9c:38:0f:9c:7d:b9:ba:
86:7b:eb:5a:ea:24:87:c1:d7:75:8e:61:dd:f3:fe:d7:a8:40:
dc:3d:54:a2:5c:ee:74:3d:0d:e6:72:45:6c:c0:3f:a0:dd:1e:
90:ab:89:69:0f:d8:a9:42:bb:67:cd:54:60:47:f4:ec:91:28:
bb:22:ea:0f:59:e3:b9:fd:13:4d:64:95:57:8a:a1:78:2b:ff:
27:9d:93:e9:b3:84:39:67:6f:75:ae:8c:f3:97:fd:34:40:b3:
16:3d:b8:ae:dc:22:57:96:8f:d4:03:8b:9f:ae:85:9b:68:ef:
6a:72:91:00:01:3c:a2:da:d5:51:18:52:7e:4e:91:be:61:9a:
d5:7c:02:ca:eb:7b:b1:c0:79:09:fb:a2:fc:58:97:5e:a9:35:
91:63:f7:4a:38:72:a7:34:cc:53:19:4e:44:6c:4a:63:5e:d8:
96:99:d1:86:58:9f:e7:97:f8:0b:4b:53:c5:6a:b3:c8:f4:e4:
f3:47:25:35:92:51:7f:f2:7d:f2:07:a0:ab:c3:1b:9d:7e:0c:
f2:9c:10:a2:15:46:99:48:40:59:4f:3c:13:05:83:36:65:5f:
d0:a1:77:49:40:fd:95:bd:4e:8c:ef:8b:c5:6e:6c:18:22:24:
d1:e7:8d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:12 2025 by rpki-client