Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
File: fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft (raw, json)
Hash identifier: rfg3hoXLhHAuXcqLDrjsQyC5GqkXmyCec/b1HQzmzFs=
Subject key identifier: 36:46:CF:37:40:3E:16:18:B6:FA:F4:40:82:CA:22:00:C3:D2:20:42
Authority key identifier: 7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD
Certificate issuer: /CN=7c1e84e1854b1660c5bd02819e420e9fdcc116bd
Certificate serial: 01984965F9AEFA52175690C4B454AE277680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 01:01:16 +0000
Manifest this update: Sun 27 Jul 2025 01:01:16 +0000
Manifest next update: Mon 28 Jul 2025 01:01:16 +0000
Files and hashes: 1: fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl (hash: NMXro9r1MpsXaAuOtmya0xcdh/LouMHf3pAYT7ecAio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:f9:ae:fa:52:17:56:90:c4:b4:54:ae:27:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c1e84e1854b1660c5bd02819e420e9fdcc116bd
Validity
Not Before: Jul 27 01:01:16 2025 GMT
Not After : Jul 28 01:01:16 2025 GMT
Subject: CN=3646cf37403e1618b6faf44082ca2200c3d22042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:33:7f:02:6d:dd:c6:a2:ea:23:63:f1:d3:cd:
37:af:40:bc:25:e0:69:4b:b0:31:2b:a8:39:85:28:
2b:96:09:99:bb:4e:47:f5:11:7a:bf:57:63:ad:a6:
7e:4b:db:e6:8d:56:23:85:9e:b8:67:b1:c7:15:76:
50:d6:c9:c1:be:f5:3b:56:61:85:ea:7d:40:07:09:
31:10:66:30:cc:ec:e4:60:b9:58:7e:fe:70:da:0f:
5a:6e:4c:f5:04:9d:27:e0:c6:f2:e2:d6:25:52:46:
00:df:71:54:82:61:5e:e4:7b:90:f2:ac:f7:c3:a8:
ad:1e:45:68:ea:00:76:7f:9d:c1:4a:d3:9e:c9:4f:
3f:fc:d7:31:bb:3b:92:0e:8c:6a:83:cd:98:78:04:
8a:f2:76:5f:ce:c7:2b:5d:c6:c5:d7:d1:a6:e9:69:
f7:d4:ac:c3:30:e9:65:05:13:32:39:de:39:74:7c:
e2:08:25:57:75:76:eb:7b:8c:59:44:30:b4:86:4b:
98:8a:25:c7:4f:36:c3:91:3a:53:e5:82:48:8f:a3:
6b:2c:f7:44:8a:c9:ef:4f:f0:36:da:7c:4f:8c:82:
11:9a:e5:b4:41:51:d1:81:a4:f2:54:60:09:e0:5d:
47:2e:d8:70:19:10:4f:34:88:0f:04:89:7b:34:7b:
2b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:46:CF:37:40:3E:16:18:B6:FA:F4:40:82:CA:22:00:C3:D2:20:42
X509v3 Authority Key Identifier:
keyid:7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:07:f1:60:dc:12:37:53:ce:9a:66:7a:a6:4d:d7:c2:57:0c:
e9:af:86:82:1d:3d:c2:3a:76:81:01:48:fb:f3:8c:a7:a6:10:
37:17:af:4d:f5:8a:b4:62:5a:bf:f7:43:2d:cf:44:c2:23:f4:
83:04:b1:5a:e3:cd:b6:05:af:64:a0:5f:6f:ba:1a:2e:d7:05:
5c:ed:d3:3e:d5:83:19:bd:c8:41:bf:ab:86:a9:6e:a6:92:3b:
4b:31:68:67:34:c0:80:23:fc:06:48:68:98:f0:1e:7e:c3:e1:
0c:31:e9:a5:c7:e9:79:93:b4:a8:3e:93:26:0f:1c:0f:a6:81:
30:43:40:1e:83:95:d3:89:1f:19:5c:e0:2e:12:06:d2:77:bf:
87:1b:ab:c2:2d:51:cf:a9:28:92:6f:27:01:3d:9c:7d:ed:c4:
05:fb:8d:c8:51:db:f7:af:63:4b:57:20:66:c1:0e:f0:4e:78:
e4:d0:c1:2a:23:0b:56:99:9b:80:fe:9f:91:9e:69:95:2c:17:
96:93:02:b3:a7:40:04:da:00:5f:ee:a2:d0:36:1d:3a:cf:e1:
a1:c4:51:6d:41:8d:c3:1e:f5:55:95:0a:2e:d0:06:ba:6a:56:
78:b8:a0:87:8d:89:de:6e:ee:9c:11:9a:fe:16:50:26:44:39:
84:61:ae:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:22:28 2025 by rpki-client