
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
File: FReBYmtMfEio3NUUxqdUn_tPY6o.mft (raw, json)
Hash identifier: jRlovH5/eiSwiFQH0nAr4NrCMyQbZyCY+QcsqBLosVc=
Subject key identifier: D5:3F:E7:77:F5:96:E2:ED:39:54:95:08:89:87:69:72:EA:30:6D:F0
Authority key identifier: 15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA
Certificate issuer: /CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
Certificate serial: 019748FAB8779D6B22D55F41C33B22E0A042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 06:01:20 +0000
Manifest this update: Sat 07 Jun 2025 06:01:20 +0000
Manifest next update: Sun 08 Jun 2025 06:01:20 +0000
Files and hashes: 1: FReBYmtMfEio3NUUxqdUn_tPY6o.crl (hash: glhsTV5R1STVYlUpzS2yr2r3ztiF6KBJvhwbjyUZmKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:b8:77:9d:6b:22:d5:5f:41:c3:3b:22:e0:a0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
Validity
Not Before: Jun 7 06:01:20 2025 GMT
Not After : Jun 8 06:01:20 2025 GMT
Subject: CN=d53fe777f596e2ed3954950889876972ea306df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:01:5b:9f:3c:47:85:0d:2a:e1:31:29:d0:
7c:51:c2:01:e1:3e:31:3a:69:29:62:23:33:e6:7a:
24:e0:8f:94:09:94:31:32:03:d0:75:71:bc:17:86:
80:1e:b1:83:70:32:6f:f0:9d:8a:42:70:33:d8:e2:
f9:c6:97:c0:1a:b3:5f:b4:65:d3:23:04:25:81:49:
ed:77:22:34:d4:83:8f:bd:cc:70:f6:76:1b:43:a2:
a8:87:99:2a:89:4c:b5:af:16:6c:ad:c9:bb:bb:39:
63:41:3b:ae:ac:62:47:c4:f0:55:46:89:b3:4c:ac:
fd:e3:52:9b:b2:57:53:de:09:fc:2c:ea:02:51:7b:
9f:9e:b7:74:73:91:59:b7:1d:88:44:f7:cc:5d:60:
25:0e:6b:03:a6:5c:fe:6e:7f:7b:bc:d1:07:83:6f:
7d:ff:1d:83:bb:da:e0:13:c7:dd:05:2f:ea:b8:c2:
21:2a:e1:62:6e:df:da:2b:f5:6d:88:42:6d:36:99:
1f:83:99:d1:81:ca:11:37:3a:bf:ec:29:42:be:2b:
2e:7a:47:4d:d6:27:59:09:5c:8f:3e:0b:81:58:00:
c4:d6:ef:ae:00:a5:fe:f1:96:df:95:76:5e:1a:06:
22:22:26:c1:cf:aa:aa:ec:28:cf:ef:03:7a:ea:7c:
96:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3F:E7:77:F5:96:E2:ED:39:54:95:08:89:87:69:72:EA:30:6D:F0
X509v3 Authority Key Identifier:
keyid:15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e6:81:af:a4:ad:c6:6f:89:c8:72:3d:89:b8:8f:c7:c8:d5:
62:0a:e6:41:e2:75:f7:47:74:56:09:25:9b:64:6a:30:0b:f6:
2a:32:6f:b3:e1:55:76:ab:88:72:89:46:52:c1:9b:8d:a6:ff:
d2:5d:fb:db:83:a9:70:4b:8c:d8:88:05:ec:21:25:ca:ae:f5:
7b:6f:99:2a:81:c1:92:93:1c:f6:76:e3:5b:19:35:dc:a6:ee:
38:38:43:bf:9b:7b:aa:c4:49:2f:e5:8c:33:3a:32:a0:9e:6d:
ed:67:74:a5:e9:c6:2f:5d:cf:14:04:de:82:7d:0e:e9:70:c8:
29:8c:41:9c:f0:28:59:3f:1c:46:4f:fb:53:ee:f2:a4:12:fc:
f7:de:65:c4:cc:7f:c6:af:2b:44:05:cf:6a:52:90:fc:57:f9:
7c:11:b4:a9:0b:bb:8c:8b:30:4f:06:04:42:86:f1:59:33:c1:
ba:30:18:15:38:0d:95:07:46:8e:5e:73:c6:4e:bf:5b:25:65:
7c:e0:7f:7a:b0:9d:95:51:27:32:72:9a:12:33:19:84:18:a9:
21:73:93:d0:c7:75:7c:c2:0b:5d:65:b6:c5:df:ed:28:57:7f:
6d:2d:a0:a1:8e:b2:0e:cb:9e:8c:06:81:1c:4d:5d:fd:03:36:
3a:2c:0a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:23 2025 by rpki-client