Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
File: fE1IJUsiup1SREgNc0E0brz1wPc.mft (raw, json)
Hash identifier: ixN3vbVfdbhyrHuHu4MI615ETOYoMND6Dc3nuQBH3DY=
Subject key identifier: CF:20:AA:58:6D:57:40:B9:8B:1A:9F:A5:E8:7B:8E:A0:03:FA:A9:05
Authority key identifier: 7C:4D:48:25:4B:22:BA:9D:52:44:48:0D:73:41:34:6E:BC:F5:C0:F7
Certificate issuer: /CN=7c4d48254b22ba9d5244480d7341346ebcf5c0f7
Certificate serial: 0197CB3A5DAD374F4E64B60A87465B2E09F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE1IJUsiup1SREgNc0E0brz1wPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
Manifest number: 03CF
Signing time: Wed 02 Jul 2025 13:01:29 +0000
Manifest this update: Wed 02 Jul 2025 13:01:29 +0000
Manifest next update: Thu 03 Jul 2025 13:01:29 +0000
Files and hashes: 1: fE1IJUsiup1SREgNc0E0brz1wPc.crl (hash: AHBDbY0R7v80bFkSVSnPAYdl0dNpdKKLIAM8Y30A+fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fE1IJUsiup1SREgNc0E0brz1wPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:3a:5d:ad:37:4f:4e:64:b6:0a:87:46:5b:2e:09:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4d48254b22ba9d5244480d7341346ebcf5c0f7
Validity
Not Before: Jul 2 13:01:29 2025 GMT
Not After : Jul 3 13:01:29 2025 GMT
Subject: CN=cf20aa586d5740b98b1a9fa5e87b8ea003faa905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:52:49:f3:88:31:6b:51:af:52:4f:27:c9:e9:
f0:29:36:9b:3d:64:7c:a7:48:4b:b3:d2:eb:1f:b1:
c8:13:02:22:38:82:53:0e:9e:4a:05:2c:88:04:f0:
75:54:33:d6:a6:bd:51:df:d7:86:77:f4:9e:0d:3d:
79:7a:15:e5:d3:3b:06:3c:14:71:14:3d:17:ae:3c:
86:a0:2b:58:d9:fd:33:81:60:55:3a:4f:73:2c:85:
5f:c5:50:58:c5:11:c0:51:14:6a:be:8f:73:1b:f8:
15:62:3c:2e:59:cb:90:6f:15:9b:7a:b0:ff:19:61:
aa:2a:00:31:1d:b5:ef:f9:69:dd:d6:3d:f2:e7:ec:
05:f7:a5:17:18:30:79:74:17:2a:ac:9a:e9:12:c7:
48:ab:59:7c:3f:96:4a:66:8c:d4:a0:5b:ee:b4:14:
5c:e8:07:48:d4:a4:0a:bc:dd:20:f9:e9:92:37:b7:
cd:51:26:c1:59:14:f8:02:8a:29:41:47:66:da:c8:
c1:1a:9e:ea:5e:d8:4e:1f:73:f5:a7:a7:b5:11:64:
1a:10:36:7f:d4:f4:b4:03:9c:c1:b6:7d:fc:1a:d1:
12:f5:fe:94:53:ee:84:1b:9c:4c:f1:97:58:e8:c4:
b4:4a:42:c8:25:3e:3b:63:16:2e:6c:cd:b3:cb:e4:
13:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:20:AA:58:6D:57:40:B9:8B:1A:9F:A5:E8:7B:8E:A0:03:FA:A9:05
X509v3 Authority Key Identifier:
keyid:7C:4D:48:25:4B:22:BA:9D:52:44:48:0D:73:41:34:6E:BC:F5:C0:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE1IJUsiup1SREgNc0E0brz1wPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:19:18:c0:83:fb:bb:34:32:cc:01:9b:dd:f6:b1:e0:a8:a5:
b4:86:d8:1b:b5:7e:ca:5d:f5:a5:9f:73:1a:0e:05:6e:83:00:
e1:7e:67:18:ec:65:89:11:6b:8f:c4:b1:e0:17:10:35:c9:cb:
0f:24:79:4b:e5:06:dc:76:81:e1:26:da:e2:8f:39:87:e9:a7:
0f:0d:15:09:6d:10:fa:a8:8a:66:c1:5e:89:68:06:79:eb:79:
48:78:f1:a7:b9:47:14:d6:58:8a:e0:58:8c:6f:0f:b8:63:b0:
96:49:5a:40:97:9e:80:01:f9:03:af:68:f8:54:9b:70:cc:9d:
31:cc:e7:b6:4f:d5:fe:06:8b:3a:fe:ea:a9:a5:f7:0a:57:1e:
b6:2b:4e:7b:42:7e:77:c6:a1:95:ef:8b:1b:e1:73:64:28:42:
f8:77:3f:d2:d0:91:4a:2d:fd:a3:24:13:7e:c6:63:49:ad:fc:
2d:d2:66:7b:1e:c8:e5:f3:b6:19:13:46:18:4a:fc:df:25:63:
4a:67:40:3b:e6:ed:66:6d:5f:b3:ee:41:44:81:80:7d:2a:8b:
b4:03:cd:c7:fe:f0:32:2a:8b:f7:b2:9f:53:06:23:d5:bc:b6:
e7:55:b5:e6:8d:27:2c:fc:7c:c2:36:72:03:28:72:32:c8:bb:
52:dd:c4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 18:36:43 2025 by rpki-client