Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
File: FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft (raw, json)
Hash identifier: eeDuII/9uIE/LeRRt9O8ZDGHSxOm7WIRO67YkpVy2O0=
Subject key identifier: 8A:1B:68:7B:CD:BD:6A:17:32:83:59:CD:43:34:BA:27:F0:69:32:72
Authority key identifier: 15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
Certificate issuer: /CN=15894575555cde14c770cbb183da5535d144b540
Certificate serial: 01976403F9AB75F9761FA7CA7168C3509EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
Manifest number: 1574
Signing time: Thu 12 Jun 2025 12:01:11 +0000
Manifest this update: Thu 12 Jun 2025 12:01:11 +0000
Manifest next update: Fri 13 Jun 2025 12:01:11 +0000
Files and hashes: 1: FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl (hash: GirXSIougbfkDqLCBfKcHiBqr6MfpHiklooe6kdlWpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:03:f9:ab:75:f9:76:1f:a7:ca:71:68:c3:50:9e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15894575555cde14c770cbb183da5535d144b540
Validity
Not Before: Jun 12 12:01:11 2025 GMT
Not After : Jun 13 12:01:11 2025 GMT
Subject: CN=8a1b687bcdbd6a17328359cd4334ba27f0693272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f7:29:18:cb:2c:e0:e2:04:07:d1:4e:5a:51:
48:a6:1c:6b:34:eb:e6:43:22:aa:53:67:22:9e:a6:
44:4b:91:26:1d:03:96:b4:a6:71:c1:d8:fa:1d:62:
b6:02:34:46:60:1a:68:c4:ec:8b:67:80:31:58:c5:
7a:2f:fe:0a:4e:af:5c:26:98:1f:91:f2:db:5c:df:
bc:59:49:95:af:b9:96:b9:04:59:34:81:49:ec:33:
3e:15:ab:6b:9a:00:59:6d:4d:a2:91:17:e8:ba:f3:
fd:26:df:3f:98:88:3d:60:c0:50:8e:84:16:bf:b3:
66:55:08:79:da:d7:c8:11:83:65:2b:52:bc:00:61:
53:c8:d6:17:59:27:b3:d7:65:6e:60:a5:64:b9:72:
8c:e7:43:3b:cc:3b:64:d9:8f:38:71:53:b7:22:c7:
81:4e:64:2b:28:72:ba:f2:20:c1:4a:f4:fd:2a:3e:
32:bc:44:4c:bf:c1:be:7e:d5:3c:95:be:ae:5a:62:
a6:e7:df:56:83:71:a4:0a:92:e1:ee:d0:70:24:d0:
9d:87:2a:3b:f4:a1:d2:0e:6f:43:fc:12:29:b7:a9:
7e:00:a4:ee:b6:da:b3:32:db:b5:fd:50:4e:9e:3e:
dd:75:a2:2a:f4:1c:cf:d0:7f:09:e3:11:c8:e0:a9:
17:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1B:68:7B:CD:BD:6A:17:32:83:59:CD:43:34:BA:27:F0:69:32:72
X509v3 Authority Key Identifier:
keyid:15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:fe:78:a6:37:54:9f:f8:43:6b:63:45:f3:e9:17:2a:a7:26:
2b:eb:0c:d7:38:86:3a:34:e8:ac:9b:3f:f2:82:0d:7e:65:4b:
63:dc:03:0a:c1:05:71:65:bb:5e:46:a7:db:f8:12:8e:98:4e:
10:ba:9b:53:ad:dd:85:13:81:97:b2:34:fa:3b:99:64:32:74:
e8:5f:9b:bc:6f:e9:a4:ff:a1:aa:0e:73:c5:49:11:b9:6d:52:
e7:73:3c:ec:93:e2:f9:7a:06:11:ac:a9:9a:e3:52:f9:6c:af:
48:c6:38:46:29:fe:c4:f0:db:44:4a:93:5d:c8:0c:64:3b:ba:
ce:11:07:98:8d:28:44:e6:28:2d:a1:58:3a:65:77:dd:8e:fc:
36:17:98:e5:cd:6d:a9:be:4f:4b:c2:19:03:da:91:ff:b8:5a:
60:77:f7:33:31:b4:20:70:7a:dd:29:98:eb:1a:fa:47:45:99:
95:15:1e:73:d8:cc:a4:0c:b6:bf:84:bf:42:d6:0c:fd:0f:a3:
c0:7c:53:0c:39:02:9e:eb:ef:ee:78:03:0d:43:83:28:34:33:
19:d4:9d:cd:ed:97:27:ec:17:06:98:08:1e:20:c8:68:0e:10:
6a:32:ec:42:0c:06:93:f7:e8:4a:70:c2:a2:74:d0:43:b5:71:
74:cf:9f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:42:09 2025 by rpki-client