Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
File: FZVEc2Bfo00pH7dD2kFeVdaSINY.mft (raw, json)
Hash identifier: 4eiKW2Zf3h4t05qhiMzXwxHmkKldOO0huSxJLVIoOd8=
Subject key identifier: 53:E0:2F:10:7A:3B:07:81:8E:38:7F:34:19:49:84:6D:A6:3B:7B:6F
Authority key identifier: 15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
Certificate issuer: /CN=15954473605fa34d291fb743da415e55d69220d6
Certificate serial: 019849661D548DB3E62BCE94C28F2242EB19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
Manifest number: 07E1
Signing time: Sun 27 Jul 2025 01:01:25 +0000
Manifest this update: Sun 27 Jul 2025 01:01:25 +0000
Manifest next update: Mon 28 Jul 2025 01:01:25 +0000
Files and hashes: 1: FZVEc2Bfo00pH7dD2kFeVdaSINY.crl (hash: 2sfAtd/D59AOmfRDCwtrlSa7zmj0QWzOi+d1l1gd2Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:1d:54:8d:b3:e6:2b:ce:94:c2:8f:22:42:eb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15954473605fa34d291fb743da415e55d69220d6
Validity
Not Before: Jul 27 01:01:25 2025 GMT
Not After : Jul 28 01:01:25 2025 GMT
Subject: CN=53e02f107a3b07818e387f341949846da63b7b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:37:14:90:8e:d3:6d:47:64:a5:8f:ef:bd:9b:
46:26:20:ee:ae:54:c8:1f:c2:f1:8b:f9:06:83:c0:
6d:09:11:c4:f8:6b:3f:b8:92:b7:86:ec:db:07:ec:
2d:91:49:9d:dd:a1:78:ee:fc:65:73:94:54:82:0c:
d1:ce:19:69:fa:48:21:d2:1c:de:23:84:57:4d:81:
88:69:6b:ba:d8:ef:b1:e5:09:e0:0b:81:20:76:11:
62:2a:98:81:d4:ca:b2:7a:48:ee:43:22:62:2a:5f:
71:e7:14:3f:d6:da:d9:af:5c:80:b5:e9:96:5c:06:
e6:16:4e:90:7b:6e:a3:d4:53:8d:c5:65:91:d6:e5:
94:81:b2:13:d0:59:9f:c1:fe:28:14:e2:a3:7b:94:
e1:80:c6:89:36:29:92:7f:b7:4a:8f:85:57:b9:e3:
c1:f0:be:b5:36:b6:29:c6:18:b7:df:bf:1c:d2:73:
ed:60:7b:98:a7:5d:4f:ef:ae:37:0e:f0:bc:44:59:
49:30:aa:e1:3d:8e:bb:fb:ae:0b:b9:31:c0:11:05:
30:2b:ca:8c:9d:04:4c:ca:ec:39:83:47:ee:d9:eb:
e6:a9:06:72:ae:4a:21:fb:68:89:0a:d7:26:27:5d:
f6:98:ad:ae:c8:e4:be:b6:71:c7:38:25:a9:d9:20:
3d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E0:2F:10:7A:3B:07:81:8E:38:7F:34:19:49:84:6D:A6:3B:7B:6F
X509v3 Authority Key Identifier:
keyid:15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:91:e1:18:42:d7:39:ad:92:b0:ba:80:60:b1:8b:74:f8:10:
79:bf:a5:c7:12:a4:3e:9f:aa:63:24:10:cf:7a:45:0e:a9:1f:
45:21:89:d3:87:be:d2:3f:ab:24:5f:cf:52:28:ae:bf:d8:1d:
d5:7e:98:e3:f7:ae:4d:e1:40:43:f7:ec:29:37:ef:91:ec:73:
75:4f:4a:8e:f9:ed:8d:31:86:82:05:21:6a:48:e8:3d:d5:d0:
4c:a5:98:1b:c7:15:54:09:91:95:3c:56:14:f9:73:a4:8c:a1:
76:b3:3f:e4:1c:0d:46:e7:db:80:b0:1e:63:93:53:e3:dd:bf:
dc:85:10:4b:53:d2:e2:d1:30:83:02:11:ce:57:e1:d5:3c:f6:
5e:14:f2:fa:15:8c:53:4d:5a:1a:b7:ad:52:8f:1a:57:0a:51:
2b:d5:63:a3:1b:fc:b0:4f:9e:da:1b:32:dc:a8:91:93:aa:7b:
31:8e:ee:ec:93:de:fd:60:ac:b7:a7:37:18:02:03:51:df:15:
c7:82:00:0a:d7:ad:7d:aa:ca:bb:83:72:57:b8:d1:c9:79:55:
75:be:55:b3:77:50:9f:92:2e:f5:77:84:77:af:16:31:97:bf:
b3:39:2d:91:e4:1f:f0:34:69:12:8c:91:69:09:4d:40:c5:dd:
0f:ba:cf:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:13:24 2025 by rpki-client