Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
File: FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft (raw, json)
Hash identifier: KRWKpmrAexs3o/XJVOqUTZ6OSzYlGz3WSxniqwCe1Fk=
Subject key identifier: 46:E5:1E:E2:0E:4B:AE:1C:7F:C8:C7:24:60:44:7E:86:44:66:50:D1
Authority key identifier: 15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
Certificate issuer: /CN=15894575555cde14c770cbb183da5535d144b540
Certificate serial: 01975E38B6E64267D1D452060C781CB7ACB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
Manifest number: 1571
Signing time: Wed 11 Jun 2025 09:01:04 +0000
Manifest this update: Wed 11 Jun 2025 09:01:04 +0000
Manifest next update: Thu 12 Jun 2025 09:01:04 +0000
Files and hashes: 1: FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl (hash: pE7eGNG5wSUQkxsopioUu4GVO8HAiOBMVFvn3M5h5vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:b6:e6:42:67:d1:d4:52:06:0c:78:1c:b7:ac:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15894575555cde14c770cbb183da5535d144b540
Validity
Not Before: Jun 11 09:01:04 2025 GMT
Not After : Jun 12 09:01:04 2025 GMT
Subject: CN=46e51ee20e4bae1c7fc8c72460447e86446650d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:61:a9:c1:21:7f:62:8c:ad:a4:da:4e:b2:8d:
87:8f:28:09:d9:ff:d0:bf:de:f4:26:6e:64:eb:2b:
12:00:8c:2e:e9:61:75:b7:c2:fa:85:fe:26:56:e0:
4c:40:ca:ec:ce:f4:73:b6:7d:e6:ee:5b:e6:c2:06:
91:c9:72:47:be:8c:c6:31:e5:a7:65:88:e8:e6:2a:
83:f8:67:c8:ad:4f:50:f5:eb:52:ae:bc:62:54:a3:
59:14:be:9f:37:c6:8b:e7:76:cf:04:f8:02:6a:07:
8a:31:ef:57:d0:1b:3f:db:03:f1:8d:31:83:fb:20:
23:b1:5d:db:26:45:ec:63:07:17:08:d6:a7:ed:54:
87:f3:b1:f6:73:20:d3:57:39:04:46:c0:9d:08:5d:
20:a2:0c:1a:1f:98:26:67:36:6b:9c:23:fb:1c:1b:
0b:73:1b:63:08:b2:4c:08:4d:07:53:54:59:b3:66:
0a:38:1d:ce:f5:9c:5b:f0:c8:e8:f9:e6:f1:bc:95:
69:6e:a7:23:3c:0d:e5:ed:8a:a6:ff:61:86:74:d0:
7a:b9:1b:f9:12:ab:91:c7:50:21:a3:76:fd:11:cb:
d5:7f:55:d4:d7:48:a0:82:c7:b2:45:d8:48:be:9b:
01:4b:ef:44:68:6d:3a:e6:f5:6c:69:ab:25:c2:d6:
71:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E5:1E:E2:0E:4B:AE:1C:7F:C8:C7:24:60:44:7E:86:44:66:50:D1
X509v3 Authority Key Identifier:
keyid:15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:26:f2:56:c7:06:f5:21:96:f8:4c:7e:48:92:e6:d0:65:b2:
90:b6:e7:76:5c:e7:2c:b0:74:1d:53:09:45:66:0a:7d:65:b4:
5f:ba:d5:44:9b:3d:a4:ac:93:23:b7:47:c0:ef:47:5a:bc:0c:
60:94:e7:0a:c4:0b:22:22:2b:65:91:4e:9d:12:ef:a5:25:0b:
23:14:0d:8a:98:95:6c:63:1e:d9:c4:72:1b:ad:3c:82:7f:d3:
36:5f:3d:dd:d5:d8:1d:f7:3c:2e:ba:64:29:6c:e2:bd:b4:5a:
65:80:de:7f:e4:88:b5:6b:a1:7a:d1:88:7c:04:12:0d:63:d3:
09:17:55:73:ba:d1:d6:c4:69:95:c1:7a:14:73:89:fa:d9:28:
1b:ee:25:92:45:b8:63:27:8f:6f:33:97:07:37:dc:e4:cc:1e:
6b:b0:a9:72:21:98:e1:30:46:7b:e9:b9:f8:f0:af:66:2a:1c:
63:d8:de:ad:f7:2c:9c:3f:be:bf:77:7d:0b:c4:9e:5b:1b:34:
75:a4:be:15:4c:9b:a7:d5:bb:21:b6:e4:90:70:81:05:f0:fb:
ad:66:f7:79:00:b6:59:f9:de:1f:3c:39:1f:a3:60:e9:6d:c7:
21:91:b7:47:a8:a0:b4:e4:ed:da:b8:cc:50:b3:b8:b7:e2:7a:
63:c1:28:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:15:12 2025 by rpki-client