Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
File: fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft (raw, json)
Hash identifier: 3WLhZ90bJYIP0c6WYViRdjkytaanNJieyf9XVmNKoTI=
Subject key identifier: AA:D0:12:0D:AF:1A:24:03:47:4F:7E:E5:70:61:32:DE:30:19:3F:3B
Authority key identifier: 7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8
Certificate issuer: /CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
Certificate serial: 0197470C559EAE0DDC8550A7F6FE539B1155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
Manifest number: 1577
Signing time: Fri 06 Jun 2025 21:01:20 +0000
Manifest this update: Fri 06 Jun 2025 21:01:20 +0000
Manifest next update: Sat 07 Jun 2025 21:01:20 +0000
Files and hashes: 1: fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl (hash: q9TCYqzIdOJEeYxZvU41sB/cFDPekxa8CjJa3vgi8ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:55:9e:ae:0d:dc:85:50:a7:f6:fe:53:9b:11:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
Validity
Not Before: Jun 6 21:01:20 2025 GMT
Not After : Jun 7 21:01:20 2025 GMT
Subject: CN=aad0120daf1a2403474f7ee5706132de30193f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:a0:fe:a2:9c:b4:74:00:7e:67:29:df:b2:
af:93:c5:b4:92:51:28:3f:c1:20:d0:04:cc:2d:61:
08:cd:4d:3d:79:9a:bc:46:c4:e4:20:7b:b1:97:e5:
3c:1c:12:5e:58:cb:ad:7b:f0:a9:7c:2b:51:cf:7d:
b0:ca:ab:46:c0:cb:eb:d5:64:b7:e8:dc:d2:77:8d:
2b:d9:a0:43:1c:66:07:d5:d2:e4:e3:37:fc:e4:0c:
73:09:0f:12:d0:43:b6:e0:58:7e:48:8b:8f:b1:14:
bf:e2:02:5c:82:97:0a:98:08:12:a0:da:7b:20:8a:
37:65:5b:b0:b1:52:fe:a5:29:83:7c:93:fa:1b:57:
e8:f3:6f:ef:aa:7b:76:87:0a:a8:46:dd:2e:7b:7f:
b3:61:58:66:b9:1d:31:18:b5:49:b0:a4:77:48:f2:
26:76:b7:0c:08:c7:2e:14:03:85:de:a9:00:3e:7d:
85:ab:53:42:b1:e2:a7:55:88:d4:93:9f:29:ba:d7:
06:9a:85:e1:5f:e6:ae:87:2f:fe:2a:32:48:03:45:
2b:da:ed:13:d1:98:10:3e:50:bf:ce:86:5b:9b:8d:
c3:f1:0b:b7:52:92:26:98:ce:81:d1:e3:79:89:a3:
7d:a5:62:72:c5:9e:40:99:9c:06:40:64:d7:56:0e:
65:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D0:12:0D:AF:1A:24:03:47:4F:7E:E5:70:61:32:DE:30:19:3F:3B
X509v3 Authority Key Identifier:
keyid:7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a7:8a:82:9b:18:dc:e2:f6:71:6a:49:fb:8a:3e:68:eb:fa:
32:2d:67:08:e9:32:3e:4e:97:26:a8:5d:ee:82:e6:9c:e4:39:
7d:b4:f4:65:8a:f9:4d:64:97:35:99:77:55:32:b8:e8:c1:75:
a9:bf:a0:38:5e:9d:13:5c:ac:eb:9a:7b:56:fb:72:9d:ce:9e:
85:ce:31:e2:20:71:e6:56:86:5e:82:03:fc:01:66:50:5c:7d:
17:98:e0:52:40:c7:b9:6a:4c:f4:95:d0:ca:a0:70:9c:f4:97:
e3:ab:17:8c:41:17:a0:cf:b4:bf:bc:54:0b:23:a6:c7:e2:29:
1a:c5:f0:36:90:96:84:e6:c8:f2:08:d9:92:c1:a0:b5:c4:36:
5c:cf:67:b1:eb:99:f2:2d:cf:5a:8f:51:2e:66:82:08:39:3a:
e8:08:e1:65:b9:82:59:1f:dd:bc:83:90:46:26:3f:f9:72:b1:
eb:1d:88:4c:97:02:6b:2d:b6:37:41:f9:28:3b:e1:8d:86:03:
6a:aa:d0:7c:d5:ee:22:74:79:4a:c5:ed:51:e4:3f:3b:0c:f7:
7e:e1:0e:67:29:80:fc:5e:5f:6a:ac:7c:2d:22:e5:b5:54:be:
f4:c6:ec:12:56:82:78:9d:ab:ba:a1:0e:5e:74:cc:cd:4a:ef:
45:c8:4b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:11:41 2025 by rpki-client