Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
File: rfjUKjroBc6WqpT66fW0QG_0VZk.mft (raw, json)
Hash identifier: 7qWFxUF06HndmlzGK4gP6Le44fA/s5BPpJQrHvJacCk=
Subject key identifier: 01:BD:A0:A6:AF:B2:E0:73:CA:72:2C:3F:A8:9C:70:82:49:98:A4:26
Authority key identifier: AD:F8:D4:2A:3A:E8:05:CE:96:AA:94:FA:E9:F5:B4:40:6F:F4:55:99
Certificate issuer: /CN=adf8d42a3ae805ce96aa94fae9f5b4406ff45599
Certificate serial: 01976FD10FDC4626CFB818266EB5AD6371CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfjUKjroBc6WqpT66fW0QG_0VZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
Manifest number: 02F7
Signing time: Sat 14 Jun 2025 19:01:01 +0000
Manifest this update: Sat 14 Jun 2025 19:01:01 +0000
Manifest next update: Sun 15 Jun 2025 19:01:01 +0000
Files and hashes: 1: rfjUKjroBc6WqpT66fW0QG_0VZk.crl (hash: N3MbaK5QfTO0a3wbqpOyLEQPduGh4eA9St/dy8FcwA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfjUKjroBc6WqpT66fW0QG_0VZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:0f:dc:46:26:cf:b8:18:26:6e:b5:ad:63:71:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf8d42a3ae805ce96aa94fae9f5b4406ff45599
Validity
Not Before: Jun 14 19:01:01 2025 GMT
Not After : Jun 15 19:01:01 2025 GMT
Subject: CN=01bda0a6afb2e073ca722c3fa89c70824998a426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:68:31:24:0b:9a:d6:b6:d6:f3:5b:88:02:
18:66:9a:df:51:99:c7:fc:fc:19:aa:3d:8e:f8:76:
0d:c0:18:79:7d:a2:c3:a8:08:a6:80:00:93:95:7d:
5f:da:cd:29:0c:29:74:c2:8e:0a:70:93:1d:0d:52:
82:d2:66:3e:e1:1b:4e:d8:52:59:c0:09:27:67:a9:
9e:48:60:6d:c7:26:cd:a2:ab:5e:35:93:b6:af:78:
35:a7:1a:80:90:e4:47:67:4e:f5:3e:9a:be:ba:79:
3d:6a:1d:14:f7:a7:66:c5:1b:47:2a:48:8b:a4:6d:
89:f3:9b:70:67:8a:a6:98:5f:29:df:45:95:63:ed:
d3:ff:2d:c3:3c:34:4a:0f:69:f2:31:19:c5:4e:9a:
a3:61:22:f4:b6:a3:d1:4a:82:7e:30:09:ba:56:09:
12:be:b6:12:67:72:17:60:f0:70:4b:a0:b0:89:34:
29:a9:ca:92:41:3d:3e:3e:ee:1a:55:e9:b4:97:11:
93:56:d3:a1:67:c7:2f:c5:1c:6e:1a:6d:52:b2:a3:
0d:52:e5:0a:f5:87:97:64:94:ff:41:fc:2c:68:9e:
21:c7:eb:88:fa:ee:27:50:f3:d9:2a:12:5d:bc:a8:
f2:12:2e:93:c2:cb:5d:ad:fe:ec:9a:7f:24:77:a4:
a7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BD:A0:A6:AF:B2:E0:73:CA:72:2C:3F:A8:9C:70:82:49:98:A4:26
X509v3 Authority Key Identifier:
keyid:AD:F8:D4:2A:3A:E8:05:CE:96:AA:94:FA:E9:F5:B4:40:6F:F4:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfjUKjroBc6WqpT66fW0QG_0VZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6a:fa:22:1b:a8:66:de:03:d0:58:f0:6d:4f:63:ae:4b:b4:
2f:bc:1e:d7:7e:a9:ee:80:2e:49:9f:2d:2c:7d:6c:c3:d9:a5:
63:28:3d:a2:cb:e6:6a:51:81:d0:6a:91:b3:6d:f1:26:80:f6:
ed:0f:f6:75:03:5f:2c:13:82:17:6b:c2:27:42:e0:47:95:b7:
d1:5c:8d:ab:10:d6:35:22:51:cb:b9:43:27:69:23:43:b5:29:
e4:21:1f:ec:53:99:fe:38:f9:37:99:5c:40:44:d0:17:79:1c:
9b:08:a0:e0:6c:81:d7:2b:e2:90:6d:0e:db:28:d7:3b:d3:c5:
2f:fe:d0:a4:a2:50:7d:34:a0:d6:c0:15:d8:90:6d:27:8f:19:
b4:c0:b5:71:0b:19:88:4c:c2:e7:17:03:b1:75:f0:a3:04:ad:
5f:d5:87:4f:6b:64:40:25:7e:8c:06:b2:50:5e:a2:29:5f:52:
e3:5c:36:29:6f:40:51:78:5f:1b:7e:78:e2:f2:7c:6e:0f:86:
eb:97:a6:19:d1:b6:56:ca:9a:ce:f5:9a:a6:ee:2c:60:eb:29:
a9:34:06:50:da:d6:61:d0:0d:9a:4d:27:72:8c:c7:50:1d:f8:
80:6a:1f:23:b8:81:ea:ea:c7:55:4d:74:00:4f:9a:5c:88:80:
dc:84:de:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:47:21 2025 by rpki-client