Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
File: fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft (raw, json)
Hash identifier: YU2mVdMbm20SuWaoKHI/jGuSWXGvSVmEhIcAlxv0o3w=
Subject key identifier: 54:1B:A6:1F:45:59:10:59:DA:F4:DA:63:95:91:BC:95:C0:36:7B:B8
Authority key identifier: 7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71
Certificate issuer: /CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
Certificate serial: 01974968628958D641DB1B346DA1A6ED63E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
Manifest number: 150C
Signing time: Sat 07 Jun 2025 08:01:06 +0000
Manifest this update: Sat 07 Jun 2025 08:01:06 +0000
Manifest next update: Sun 08 Jun 2025 08:01:06 +0000
Files and hashes: 1: fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl (hash: Wb7t4dm8Br1rOeGg+OHpW3ifZ3g14gWL7hFybqyWX2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:62:89:58:d6:41:db:1b:34:6d:a1:a6:ed:63:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
Validity
Not Before: Jun 7 08:01:06 2025 GMT
Not After : Jun 8 08:01:06 2025 GMT
Subject: CN=541ba61f45591059daf4da639591bc95c0367bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:19:a4:53:a9:4d:99:03:e4:3a:6e:85:7e:14:
ba:2a:dc:43:5b:b4:50:6c:73:8a:98:66:30:56:5d:
2f:d6:37:d4:2c:cf:a1:d4:c4:21:f5:c9:3b:a0:bf:
e8:79:8b:ec:37:78:10:33:2d:6d:e5:f5:6f:76:d3:
8c:98:69:4f:c5:cf:35:14:dd:f2:ff:2b:94:34:10:
db:1d:58:d3:f3:93:1f:58:9d:62:e6:6d:82:12:b8:
5d:f4:12:5c:63:97:ff:dd:e4:f9:f1:64:70:a5:dd:
5e:68:2e:c3:e2:3e:56:4a:21:f9:1e:76:dd:7f:df:
00:f0:54:14:77:b7:63:d3:ed:8f:bd:44:c2:d2:ae:
60:fc:9d:0c:e2:43:4f:bf:1f:ee:f3:e0:b7:48:fd:
ed:a5:0e:5f:0f:ac:51:67:3e:7b:85:8a:ae:8f:d8:
3b:e3:61:d6:4d:70:43:91:88:7d:ee:08:83:50:c5:
13:1b:e3:99:1d:78:c0:6f:e2:e4:3e:37:80:38:5a:
7a:2c:72:17:e6:cc:8e:87:03:aa:dc:81:bf:8e:3f:
79:89:58:82:8a:49:e7:4b:d5:ed:38:88:ab:a4:14:
e6:fa:dd:03:0f:a8:f0:63:af:f0:8c:03:59:57:e0:
18:0c:e9:63:e8:b4:d5:2f:98:dc:a9:56:f0:64:64:
75:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1B:A6:1F:45:59:10:59:DA:F4:DA:63:95:91:BC:95:C0:36:7B:B8
X509v3 Authority Key Identifier:
keyid:7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ee:d1:d0:b8:8d:55:f8:14:17:70:c8:63:21:54:3e:2a:da:
0a:dc:b1:9c:dc:f2:80:e7:8b:cc:c4:c5:64:0e:61:db:0d:d4:
17:31:57:f0:52:b0:3a:59:7e:45:db:8e:b2:77:4e:bb:bb:0c:
86:d4:8f:51:cd:3c:fa:35:d8:1a:dc:13:07:d8:69:ca:90:57:
6e:a4:23:46:a3:c8:45:3a:5e:ec:74:76:6c:11:c9:ff:43:99:
ad:83:03:83:79:49:d7:01:1b:02:f7:bb:08:31:56:28:c5:a2:
3b:d3:1f:23:f5:84:02:5e:ac:60:5b:89:47:0b:a9:ef:55:fc:
87:7c:c6:e6:38:d2:c5:26:9d:cd:ef:1e:40:43:2d:fd:11:7a:
bc:72:f1:13:8e:c7:b0:5a:98:5f:60:f3:2d:d7:61:f5:1d:ba:
2f:45:75:98:d3:5c:b4:20:43:3c:8f:54:b8:c1:5d:7e:2b:b6:
94:61:58:1c:1b:ae:e4:bd:48:82:0f:3c:d0:9a:18:35:03:c0:
83:39:4c:5a:82:37:78:b6:9a:f6:f1:46:36:68:e2:98:2c:ce:
26:ec:b7:ed:46:9b:fa:ea:d1:3c:c8:2b:29:25:4b:5f:d0:f6:
3e:64:b7:dc:5a:96:16:39:0d:6d:65:3e:e2:3c:37:5e:49:80:
7d:4b:9c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:04 2025 by rpki-client