Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
File: Frtbm9zrvdkzgc878jtIVFE1b58.mft (raw, json)
Hash identifier: nU20IqlwOpmXmSbmD6MyMW8JOWXy9lQogME9e7aMW60=
Subject key identifier: 3E:C3:B6:07:5B:A9:DD:CD:99:2C:38:ED:29:37:26:F8:48:F8:6F:2B
Authority key identifier: 16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
Certificate issuer: /CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Certificate serial: 019752348E48506C7ED733B6463318B1E71E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
Manifest number: 157D
Signing time: Mon 09 Jun 2025 01:01:05 +0000
Manifest this update: Mon 09 Jun 2025 01:01:05 +0000
Manifest next update: Tue 10 Jun 2025 01:01:05 +0000
Files and hashes: 1: Frtbm9zrvdkzgc878jtIVFE1b58.crl (hash: e5lrZjS/N4humVR6FxdPy4xk7lZYuRXDLmM9niIgnAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:8e:48:50:6c:7e:d7:33:b6:46:33:18:b1:e7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Validity
Not Before: Jun 9 01:01:05 2025 GMT
Not After : Jun 10 01:01:05 2025 GMT
Subject: CN=3ec3b6075ba9ddcd992c38ed293726f848f86f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:30:19:4f:ba:0a:0b:e4:46:33:b3:88:a6:
09:7b:ea:63:47:5e:db:23:7a:4a:be:11:f9:f9:73:
a2:2a:e8:8c:2a:42:c9:02:06:06:34:0b:60:58:be:
30:1c:94:83:39:86:2e:3e:65:ad:7d:88:d3:bf:55:
fc:0d:7c:0c:eb:d5:35:c8:eb:17:dd:c5:9b:84:11:
b6:1e:95:aa:60:97:f8:47:02:5f:4c:47:b4:d7:2f:
85:23:e3:c8:a7:cb:93:6b:3b:79:03:8f:a3:ea:cd:
a7:54:4c:2a:4b:6d:0b:04:05:3e:3f:44:c1:67:18:
0b:2e:27:2a:d5:76:f5:fc:c6:82:8f:44:4f:0b:3c:
1f:b8:58:1a:64:6e:df:10:af:30:46:df:45:f4:9c:
2b:c2:09:79:31:e1:30:51:0e:40:01:bc:0e:27:b9:
b0:7a:d3:2f:8f:e0:0c:ff:90:4a:4e:d6:f2:ee:51:
8e:e1:a8:88:d6:a2:4e:8a:1c:b3:7a:ee:62:06:12:
13:56:4a:02:95:45:cc:98:c8:c7:f4:41:75:40:58:
ed:65:c1:15:c4:01:27:94:fd:86:4b:ed:4b:b6:3c:
e3:45:14:f0:18:cd:3f:36:85:74:6d:25:42:c2:27:
c4:5d:51:9c:e2:48:d9:8e:12:ee:15:ea:19:78:ce:
22:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C3:B6:07:5B:A9:DD:CD:99:2C:38:ED:29:37:26:F8:48:F8:6F:2B
X509v3 Authority Key Identifier:
keyid:16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:28:b5:f2:5d:ba:8c:ef:67:15:c6:e4:8a:26:48:2a:30:d7:
a6:ab:49:65:d2:67:95:db:87:cd:e3:31:a8:20:ff:68:0f:c9:
0c:f3:97:df:91:6c:12:94:18:13:b2:e0:d3:48:3f:15:ee:f5:
38:9c:7c:87:6e:dc:9a:10:9d:1d:13:9f:d9:58:9c:5a:6e:ba:
37:a7:d7:3a:10:dd:8d:c0:01:62:cd:d9:35:73:07:35:23:09:
b9:e3:9f:4c:3d:3a:88:6d:4c:44:75:a0:3b:5c:17:5f:ed:1e:
aa:c5:b1:d0:b3:9b:c2:43:4c:4e:3e:7d:ba:11:fe:52:91:0e:
d6:e4:68:5f:68:0b:52:f6:00:d0:e4:07:5c:81:fc:e4:94:1b:
0e:6b:6e:75:e3:a4:4d:8e:31:29:0a:03:13:ec:81:f9:1f:a6:
91:dd:af:34:75:10:cc:0d:8c:55:15:b4:40:3d:75:fd:be:f4:
fe:3e:87:35:84:14:e0:31:65:c5:5c:33:1d:bc:d7:96:f2:b0:
60:ef:58:1c:07:6f:2d:98:2c:55:1c:27:5a:bc:f0:7c:0b:e0:
e5:9f:aa:6e:25:c8:ca:02:55:17:88:cf:b3:19:52:db:05:c2:
24:0b:41:91:03:37:53:ad:d2:44:34:de:cc:e9:d3:82:eb:a0:
4a:4f:e9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:29:41 2025 by rpki-client