Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
File: _v9e0ddTW8-gPh8oisLHdWobEWA.mft (raw, json)
Hash identifier: W56Era01LgUn+tTws/jcZdMUchO/JAEiGO/nS/X+KQA=
Subject key identifier: FA:7D:D2:9A:5B:FF:05:75:DE:C7:EB:5C:0E:0F:98:95:46:A1:B6:FE
Authority key identifier: FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60
Certificate issuer: /CN=feff5ed1d7535bcfa03e1f288ac2c7756a1b1160
Certificate serial: 01975D5CE29F933036452A5B2C26038E6A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
Manifest number: 3B
Signing time: Wed 11 Jun 2025 05:00:57 +0000
Manifest this update: Wed 11 Jun 2025 05:00:57 +0000
Manifest next update: Thu 12 Jun 2025 05:00:57 +0000
Files and hashes: 1: _v9e0ddTW8-gPh8oisLHdWobEWA.crl (hash: AHnBiqV8rc/BmyuEJxO/27W0aGJ3ic+oOlqu9ZjcHKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:5c:e2:9f:93:30:36:45:2a:5b:2c:26:03:8e:6a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feff5ed1d7535bcfa03e1f288ac2c7756a1b1160
Validity
Not Before: Jun 11 05:00:57 2025 GMT
Not After : Jun 12 05:00:57 2025 GMT
Subject: CN=fa7dd29a5bff0575dec7eb5c0e0f989546a1b6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f8:bd:ee:fb:8f:a1:cc:ce:82:16:e8:f1:98:
60:da:42:46:3d:0a:47:1d:f2:bf:ab:49:dc:e9:66:
a7:10:dc:8a:d7:07:08:19:40:bb:6a:98:b9:74:a6:
ea:a6:26:b7:b1:c7:b7:e9:18:8b:2a:56:7e:c3:43:
91:83:55:6d:9c:73:64:a8:02:3e:a4:79:79:75:f9:
48:00:60:11:56:a7:3a:03:9a:39:02:10:e4:93:17:
79:e7:4b:46:5e:ff:ea:dc:14:8b:8e:a7:55:6b:44:
7b:49:f5:a8:54:cd:7b:af:3f:09:63:ba:a1:0b:5c:
f2:19:b6:6a:a6:09:60:5c:7f:3a:96:6e:cd:4c:31:
2f:40:f1:25:9c:7b:c6:63:a9:c1:e6:81:e4:a5:1b:
d0:d1:72:6f:10:c7:8e:8d:90:1c:5e:a4:fc:7d:12:
17:22:b5:20:30:83:4f:eb:1e:a2:6b:a3:45:32:45:
03:df:be:cf:d6:bf:92:e0:a3:e2:20:62:e4:1d:6a:
9a:3d:0c:8e:67:01:bc:d9:d6:34:7b:20:f2:3c:76:
70:46:84:4f:bd:ed:4d:60:2f:57:1e:8c:11:d6:0b:
ef:44:f5:9e:02:d8:0d:9a:e6:90:f3:7a:a3:cb:34:
6c:91:c1:0b:19:75:e0:95:50:fb:fc:74:cc:49:13:
fb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7D:D2:9A:5B:FF:05:75:DE:C7:EB:5C:0E:0F:98:95:46:A1:B6:FE
X509v3 Authority Key Identifier:
keyid:FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7c:64:06:4f:b7:ff:0d:7d:ad:e6:17:c5:29:bf:b9:51:8d:
45:aa:1b:95:6f:a2:21:02:15:dd:99:7a:bc:bb:c0:f4:2d:b0:
83:7c:10:fd:78:e2:cc:2d:fe:1c:83:bd:d1:cd:d9:4d:26:ce:
d2:0a:5f:f7:0f:43:9f:d5:68:ac:0e:5e:3c:cb:5b:a5:f0:32:
15:db:2e:af:b1:cd:ea:60:d2:87:a3:1a:cc:1f:99:67:fc:95:
c2:2c:8b:74:23:ae:1f:de:1c:8c:c1:ca:0e:b8:b9:27:b3:97:
be:75:e3:85:bd:48:b0:d9:62:0f:58:44:68:c5:5d:a4:f4:c3:
d3:68:ab:68:71:7a:f6:1e:7a:88:9c:87:72:70:38:98:33:03:
14:90:87:f1:23:18:b1:f8:e2:fa:2b:79:a0:01:a4:19:97:29:
84:79:41:8f:c1:a7:2d:12:75:08:09:6c:43:28:06:6f:6b:f3:
cb:6a:b2:8f:0f:e1:2c:0d:20:a0:09:1b:06:28:1f:c6:f0:f7:
49:b1:b3:9c:dc:22:82:55:d1:62:07:72:4c:a7:19:ec:c4:c9:
0e:33:17:e8:03:1f:e6:a1:3a:45:30:fe:1e:1e:85:94:12:39:
5f:81:32:0c:0a:f3:2f:b2:5a:3f:ea:31:47:f5:0f:9f:5c:6c:
bf:28:02:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:41:12 2025 by rpki-client