Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
File: Rg7_G6LS91kqRNITPSB7KT4kGsI.mft (raw, json)
Hash identifier: Z1KevqUhvId5qAKKBhrbnqxL+u8+/vK6ITsybvRUbfk=
Subject key identifier: FD:55:B3:FC:C5:1F:EE:26:B1:20:84:5F:9B:FE:35:24:26:91:F4:B4
Authority key identifier: 46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2
Certificate issuer: /CN=460eff1ba2d2f7592a44d2133d207b293e241ac2
Certificate serial: 01974967FFF51F0C270CEA6E5B5F6752BBBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
Manifest number: 0A83
Signing time: Sat 07 Jun 2025 08:00:41 +0000
Manifest this update: Sat 07 Jun 2025 08:00:41 +0000
Manifest next update: Sun 08 Jun 2025 08:00:41 +0000
Files and hashes: 1: Rg7_G6LS91kqRNITPSB7KT4kGsI.crl (hash: GhXwfgov4HM95XZwEV7MQkeWBesZe0VvitB2G20ehTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:ff:f5:1f:0c:27:0c:ea:6e:5b:5f:67:52:bb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460eff1ba2d2f7592a44d2133d207b293e241ac2
Validity
Not Before: Jun 7 08:00:41 2025 GMT
Not After : Jun 8 08:00:41 2025 GMT
Subject: CN=fd55b3fcc51fee26b120845f9bfe35242691f4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d2:27:b1:b5:68:fb:52:5e:85:b8:db:22:48:
45:13:ba:61:17:e2:21:86:af:03:95:59:d1:a9:35:
78:ee:f5:e5:af:35:74:be:68:1f:27:9b:dd:24:94:
9d:ad:dc:91:e7:db:f6:a0:db:1a:fc:39:8c:dc:f6:
30:6a:94:ce:61:16:8b:82:ab:b3:5b:a3:7e:21:a2:
39:eb:48:08:ec:3a:6c:68:33:81:a8:31:0a:1d:4b:
95:15:4c:25:a1:8d:a4:26:25:21:e9:af:ee:e2:45:
d0:42:92:f8:be:b2:08:97:fa:cc:fc:70:2d:f8:c8:
59:1f:05:9f:bf:ae:75:a8:b2:50:35:e1:3d:d0:e9:
44:db:1d:f6:c1:4b:54:1f:9a:df:2d:c1:49:96:dd:
b6:f0:45:e2:68:76:d7:c0:41:9c:cf:c2:73:a8:72:
ea:79:48:fc:97:64:16:8b:8d:ad:f8:94:76:e3:4d:
d1:c6:a9:8e:ee:b4:3a:8d:bc:bf:ce:59:54:15:32:
dc:20:53:83:91:66:4c:56:3a:7d:31:99:bf:87:3c:
69:15:a9:49:a4:5d:74:f9:41:0f:22:be:4b:17:c4:
94:07:53:44:99:09:e8:de:0c:eb:51:ce:4f:6d:06:
f7:a1:09:5b:e5:c0:63:83:77:50:bf:d0:c5:48:1a:
82:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:55:B3:FC:C5:1F:EE:26:B1:20:84:5F:9B:FE:35:24:26:91:F4:B4
X509v3 Authority Key Identifier:
keyid:46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:15:42:f1:54:cd:4f:f7:af:4f:86:bb:57:3a:ce:f5:9f:d7:
47:37:0e:cf:9e:f2:9a:d4:d7:01:7a:08:f5:e8:60:11:00:0d:
ea:a4:a1:81:7a:b9:9f:47:85:57:36:79:95:7a:a0:3a:a4:b6:
1d:d6:da:91:29:49:25:02:3d:b7:b2:3a:e1:4a:37:7a:9d:b9:
5e:5c:a4:4c:54:34:aa:4d:5d:81:76:23:69:46:ce:bb:cf:dc:
c9:80:8b:d9:db:ed:91:b8:a4:e6:78:38:be:f6:6d:33:1e:84:
eb:f4:40:73:f4:7e:b5:8c:51:42:cc:3c:02:04:4e:ef:de:37:
87:c2:6c:50:e1:0d:8d:2e:9c:75:b1:87:42:d5:88:ff:96:03:
57:a5:0d:31:5f:46:bd:4b:44:6a:ba:4d:22:3e:74:2c:1b:a8:
ca:78:e7:65:67:77:35:9c:92:12:6d:94:92:dd:d9:ec:1e:88:
66:13:70:24:d4:73:68:f0:b7:db:c0:30:f7:bf:f5:c4:56:6e:
b0:23:5a:e5:37:66:2b:54:44:7d:0c:41:3d:01:99:f9:d8:91:
11:28:de:f4:ce:ef:23:42:1b:f0:5a:66:f2:ad:91:bf:d5:c3:
e8:32:3d:fd:56:d1:83:c2:a5:e7:6f:c0:1e:b3:a0:05:ca:18:
7f:c5:31:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:52:00 2025 by rpki-client