Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
File: Frtbm9zrvdkzgc878jtIVFE1b58.mft (raw, json)
Hash identifier: edZwTje7WDuhSUpf9rcgfB1e7z/HpnxZa1b4HyecAjQ=
Subject key identifier: FC:82:78:17:7B:06:B3:BD:C5:6D:02:94:94:9B:E3:A3:B4:C3:C4:1B
Authority key identifier: 16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
Certificate issuer: /CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Certificate serial: 019767722E5BD91A2A3707B77A0D69439256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
Manifest number: 1588
Signing time: Fri 13 Jun 2025 04:00:25 +0000
Manifest this update: Fri 13 Jun 2025 04:00:25 +0000
Manifest next update: Sat 14 Jun 2025 04:00:25 +0000
Files and hashes: 1: Frtbm9zrvdkzgc878jtIVFE1b58.crl (hash: 6bCUDmMDr8GHkbi2+reeL3BoYbWHT4Lkfpyd1CsLzJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:72:2e:5b:d9:1a:2a:37:07:b7:7a:0d:69:43:92:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Validity
Not Before: Jun 13 04:00:25 2025 GMT
Not After : Jun 14 04:00:25 2025 GMT
Subject: CN=fc8278177b06b3bdc56d0294949be3a3b4c3c41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:4c:20:d7:b1:f2:b0:ca:04:52:31:df:d1:
8e:b1:9b:41:66:eb:be:bf:01:c4:f9:7c:b5:16:d6:
d5:8d:71:ef:57:2a:a4:08:88:e0:2f:e7:4c:a1:84:
63:f0:cd:14:f7:85:5e:6a:f2:fe:50:1b:1d:a7:7a:
3b:af:39:d9:2e:f5:fa:52:d5:80:c1:63:44:66:8c:
32:f7:64:5a:e1:27:95:f1:f6:ca:d2:ec:a5:ce:fd:
78:e8:bc:a5:95:1f:0d:fe:e1:81:df:e9:97:ac:41:
6b:47:c2:98:1d:73:c7:78:fe:ee:3f:9d:90:50:f8:
d4:29:e4:45:74:69:41:51:60:e7:49:4d:6f:e9:ff:
46:70:c6:e7:35:2d:24:3e:18:cb:f6:3c:ee:b7:54:
45:b7:48:f6:96:c9:66:63:a8:c7:f4:31:e9:38:83:
6e:0f:e2:f1:9f:56:90:4c:75:b9:eb:6f:32:a5:d3:
34:b2:10:c6:81:43:8e:ac:e3:3a:2c:3f:1f:36:7e:
e6:3c:a0:c1:ab:12:0a:ea:16:91:32:c2:24:c6:5a:
33:f1:f3:e6:ef:b2:dc:d6:63:a6:32:bc:87:86:bb:
24:a6:e8:35:1b:1e:70:0f:51:bb:57:18:aa:40:8f:
9b:06:c2:d0:af:98:55:41:40:8b:50:27:09:1f:43:
f0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:82:78:17:7B:06:B3:BD:C5:6D:02:94:94:9B:E3:A3:B4:C3:C4:1B
X509v3 Authority Key Identifier:
keyid:16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:db:2d:6b:d2:78:de:93:6b:75:8f:d5:21:ae:e7:a4:57:52:
d1:04:ef:94:2b:66:18:bb:41:06:c7:fb:65:8e:15:f9:2b:a0:
25:ed:8c:a5:33:97:40:c5:5e:d4:32:95:4d:72:f9:e3:5e:ca:
b7:65:88:4f:a4:57:0a:c3:78:62:02:ee:3e:32:59:b4:60:54:
15:ba:11:c6:40:b3:2b:04:38:3c:72:33:f4:a4:e3:d5:37:6d:
c4:bd:04:13:4f:dc:ed:9f:03:ab:e7:e1:7c:e0:3c:c3:ce:01:
2f:41:f3:9d:99:76:09:ba:e8:a0:e3:07:18:1b:ae:d3:db:0a:
bb:af:41:ae:f9:8c:09:8b:9a:04:2b:5c:92:7f:11:c5:b4:ec:
10:d7:e8:dd:36:0d:ca:7f:ae:81:fb:99:64:fb:78:5c:77:84:
e2:0d:de:5d:79:a4:b0:f6:b3:82:69:50:b0:ac:f9:06:0e:b3:
a5:0c:61:45:cf:be:e7:d2:f7:c1:64:dc:38:1c:70:d2:35:f1:
70:a5:05:b0:b6:5e:0f:18:d5:aa:07:96:d5:45:1d:59:43:d7:
1f:17:cb:b6:7b:4f:77:ae:0e:55:8b:b8:ce:fa:17:23:91:e7:
fc:c8:32:6a:40:c9:d3:9c:60:64:b8:43:c6:de:e4:96:91:54:
75:d0:39:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:43:28 2025 by rpki-client