Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
File: Frtbm9zrvdkzgc878jtIVFE1b58.mft (raw, json)
Hash identifier: QcVXRrm3SrNvG5EbC7CbzH3Kfl2Rg4Enk4txW85TR4o=
Subject key identifier: 11:63:93:12:08:0E:E5:3B:64:96:81:01:B5:36:9A:E4:B4:90:87:9E
Authority key identifier: 16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
Certificate issuer: /CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Certificate serial: 01975800030CDA10FBCEEE0C9741C5AB69E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
Manifest number: 1580
Signing time: Tue 10 Jun 2025 04:01:25 +0000
Manifest this update: Tue 10 Jun 2025 04:01:25 +0000
Manifest next update: Wed 11 Jun 2025 04:01:25 +0000
Files and hashes: 1: Frtbm9zrvdkzgc878jtIVFE1b58.crl (hash: iryBgZJUb3nmQqI3PQwgsTbMZYBSAjH3tqu09MpHamo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:00:03:0c:da:10:fb:ce:ee:0c:97:41:c5:ab:69:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Validity
Not Before: Jun 10 04:01:25 2025 GMT
Not After : Jun 11 04:01:25 2025 GMT
Subject: CN=11639312080ee53b64968101b5369ae4b490879e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:34:7b:4a:97:af:e9:b1:f8:8f:37:ac:b1:
0d:83:68:1b:89:7f:20:6d:b5:5a:95:b2:a6:88:62:
f5:2e:e2:fa:6f:49:c9:59:b5:58:40:e2:f6:dc:b4:
58:f3:64:16:51:39:1e:b9:13:32:4b:67:68:48:c8:
78:47:39:06:fe:9c:8a:2c:e2:e5:db:21:04:47:c0:
cc:dd:04:bf:2d:ae:87:e2:5c:a3:22:2b:a2:d6:33:
9e:89:b0:32:b5:1b:47:08:c5:8a:76:68:a6:c7:30:
6b:cb:84:39:c3:c2:2a:d4:a7:31:10:65:40:bb:19:
89:56:ae:bc:96:79:9f:79:29:c8:71:8d:3e:ae:a8:
83:f8:e8:bd:ed:17:bb:41:60:55:00:15:20:d8:a2:
1c:f4:fe:7e:c0:ba:37:ab:24:50:7b:7d:1e:f4:58:
89:23:93:69:44:39:e5:41:3d:86:c0:33:5d:66:b5:
8f:a5:d5:e9:92:18:7d:fc:4a:0c:b4:d0:e3:96:5e:
d3:b1:f0:9b:47:ee:6f:84:1a:a4:80:2d:2a:75:14:
2e:36:43:44:02:00:4f:66:08:16:8f:08:3d:73:cc:
58:dd:28:22:a5:ed:42:8e:80:00:ad:26:9d:6a:08:
0a:fc:21:4f:11:e5:26:65:85:54:53:72:c8:3c:7c:
5b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:63:93:12:08:0E:E5:3B:64:96:81:01:B5:36:9A:E4:B4:90:87:9E
X509v3 Authority Key Identifier:
keyid:16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:50:4c:f2:c6:62:d8:36:67:2f:36:cf:b7:ca:e2:14:e6:e1:
ae:6d:e8:f2:1e:de:4c:2a:bd:e3:2f:97:f6:7c:fd:ef:26:d4:
23:d9:e5:f1:20:df:1e:79:62:a8:a6:5f:44:67:bf:71:8b:db:
8c:eb:5e:12:cd:0b:39:03:5d:2c:ef:45:70:9f:94:c5:7e:15:
a9:db:bb:2e:86:c5:58:24:53:eb:2b:80:89:f3:3c:e4:ca:2d:
a1:4a:89:d4:fa:d3:53:02:4e:a9:93:df:49:e3:22:eb:99:7e:
24:0e:33:78:f4:0b:a1:8c:51:1c:2d:c5:3e:72:34:c9:c9:c0:
4a:01:f0:a2:dc:7b:3d:c4:62:fa:21:b3:a8:57:f8:ba:16:cd:
ac:bb:fd:cc:5a:7f:70:a8:67:f7:67:61:90:97:94:47:1b:50:
e8:81:3a:97:9f:05:8a:32:0a:84:c5:f7:25:4e:d5:dd:0f:e7:
d2:43:fd:76:c2:40:89:d5:34:8b:f7:57:8a:4a:46:c8:d5:92:
72:5a:3b:f4:c2:03:51:db:b7:6c:07:61:37:50:0c:9b:95:16:
eb:21:b5:a0:47:8f:2b:17:6c:18:59:6c:f7:57:14:1b:42:39:
bf:94:98:5b:76:e3:75:9a:dc:18:18:f4:77:78:f7:83:31:47:
8a:d0:a8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:20:03 2025 by rpki-client