
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
File: fM2Lj3l51soXEsHVCkDU5VXJThM.mft (raw, json)
Hash identifier: IwZvbYGKdOSNvMNA/GXF6nLfteH7Lw3mcm3UJqnVob8=
Subject key identifier: F0:5E:F1:C3:3B:93:E9:30:24:BC:CE:24:74:9E:F3:8E:C9:78:90:F1
Authority key identifier: 7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
Certificate issuer: /CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Certificate serial: 01974AE8603857B14322B35C45D0111A94AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
Manifest number: 0910
Signing time: Sat 07 Jun 2025 15:00:32 +0000
Manifest this update: Sat 07 Jun 2025 15:00:32 +0000
Manifest next update: Sun 08 Jun 2025 15:00:32 +0000
Files and hashes: 1: fM2Lj3l51soXEsHVCkDU5VXJThM.crl (hash: oqowN/IreEImHM7AxqdGV1Jzp1L2znpFlBOGbc/uF10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:60:38:57:b1:43:22:b3:5c:45:d0:11:1a:94:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Validity
Not Before: Jun 7 15:00:32 2025 GMT
Not After : Jun 8 15:00:32 2025 GMT
Subject: CN=f05ef1c33b93e93024bcce24749ef38ec97890f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:05:8c:3c:e5:03:64:17:05:bb:b9:6a:39:50:
09:e4:99:9e:2e:69:fe:31:9e:da:33:d2:b8:4f:2b:
2d:50:e7:d2:4b:d3:d2:e9:47:7c:17:c1:63:db:f5:
03:77:58:8c:b0:93:bd:74:46:5d:5d:41:f7:1c:ae:
bb:c0:8a:aa:61:4b:01:1d:21:38:cf:ef:5b:fa:a3:
3a:4c:3c:3d:80:04:37:86:74:cf:c2:aa:68:8e:fb:
35:15:a4:99:04:37:a4:a4:53:e2:63:5d:20:e1:f4:
98:db:69:fc:fc:61:ea:5c:ed:de:88:84:d4:f7:48:
da:ce:a3:81:35:f2:af:54:94:a8:97:cd:60:f7:ce:
c8:c5:b0:4b:8f:7c:3a:8a:17:90:cd:5a:40:40:c3:
30:d1:71:bf:d6:1f:8d:a2:9a:dc:33:4f:f7:d1:5e:
3b:b2:a8:45:73:0d:88:32:97:26:8a:44:a2:54:4d:
37:4b:5d:9a:dd:f0:b5:40:e7:43:25:49:c6:02:90:
1d:df:8a:0b:d5:75:81:eb:75:b6:ef:b0:c4:ca:a8:
b5:2c:31:f5:7f:f0:12:b0:ed:21:98:14:75:66:a6:
f6:70:26:32:0d:1f:14:67:a4:cb:b3:a8:fb:e0:b4:
3d:78:82:29:c4:00:5d:11:ab:c5:f3:fa:9c:a2:ad:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5E:F1:C3:3B:93:E9:30:24:BC:CE:24:74:9E:F3:8E:C9:78:90:F1
X509v3 Authority Key Identifier:
keyid:7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7b:83:0b:7e:50:53:e3:25:7f:ca:a8:74:e0:8f:ef:08:ac:
8d:e6:d4:d8:96:10:87:b1:4e:98:0c:29:62:75:c4:83:5c:fe:
a2:5b:12:c7:fa:de:78:e6:10:59:fd:84:de:47:88:e0:ed:9e:
e0:66:6c:86:eb:41:1c:f9:e5:a6:7b:a4:7a:84:10:53:03:7e:
e9:d2:d1:8f:41:36:19:5b:e0:2d:2a:73:06:a4:dd:57:fe:3c:
ab:53:04:2b:5e:52:70:c0:3d:91:b9:56:a1:c7:51:3c:09:bf:
fd:62:cd:c5:cd:28:d6:d5:8c:e9:d5:e8:4a:3e:4e:86:a5:2d:
8b:3f:f0:09:de:03:d8:61:96:28:f5:3e:b2:73:05:14:8a:0e:
83:94:44:ac:f0:10:d6:fd:f8:45:11:70:38:17:57:46:b3:05:
7c:81:f1:bc:42:40:06:2f:94:a6:e9:98:8b:30:c9:f5:e7:8d:
38:4e:01:aa:ab:93:74:48:7b:09:2e:ad:fd:83:63:b8:4b:8b:
9a:d6:8f:06:38:eb:a7:36:9c:8b:07:3c:08:e5:a7:92:fd:09:
93:fb:aa:31:0f:9f:f1:77:9b:24:3b:ea:e2:79:af:f5:d4:74:
3f:8a:43:b0:13:96:c8:ce:a2:37:24:e9:77:b7:74:7e:76:70:
0b:1a:e0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:07:08 2025 by rpki-client