Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
File: FqX_fn4arzjlmWnWCYBKOz8Fvog.mft (raw, json)
Hash identifier: IkCU0aBqE2SPaO+C7LXyqhiJcN1bL2WyNuxs7b8S9Nw=
Subject key identifier: 85:37:5D:39:09:FC:5D:16:D2:77:F9:05:1A:3F:79:43:3D:D1:F6:DE
Authority key identifier: 16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88
Certificate issuer: /CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88
Certificate serial: 01974EC54C2ACB5A19FC4893020E84CCC853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
Manifest number: 03C6
Signing time: Sun 08 Jun 2025 09:00:42 +0000
Manifest this update: Sun 08 Jun 2025 09:00:42 +0000
Manifest next update: Mon 09 Jun 2025 09:00:42 +0000
Files and hashes: 1: FqX_fn4arzjlmWnWCYBKOz8Fvog.crl (hash: G1zm91o5KyUgAf8X/lyjEWEypW2aKfzbztV74r1ITrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:4c:2a:cb:5a:19:fc:48:93:02:0e:84:cc:c8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88
Validity
Not Before: Jun 8 09:00:42 2025 GMT
Not After : Jun 9 09:00:42 2025 GMT
Subject: CN=85375d3909fc5d16d277f9051a3f79433dd1f6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9f:03:78:b9:20:ff:11:18:3d:13:e4:28:84:
0e:f2:80:d9:03:78:93:5f:4d:b7:fa:8e:ca:9c:d6:
66:0e:02:96:43:7f:22:dc:8f:10:ae:70:e2:a1:61:
54:a0:23:1a:48:8b:11:f4:f6:ac:8d:32:70:7d:e3:
a9:64:c0:09:9f:d8:3d:42:2a:81:e5:b7:3c:2b:22:
5a:fc:29:bf:28:8c:39:73:c0:fe:c4:6d:59:f8:f2:
4c:19:96:3c:28:04:62:c4:9f:93:47:3d:7f:cc:24:
9a:9f:07:c3:9e:8b:f4:62:ad:3a:87:3f:67:21:7b:
b3:50:98:9d:f8:a8:2f:0f:8a:49:69:bc:71:ed:bc:
e3:85:70:58:8a:c1:0a:eb:98:e6:a2:ec:c2:2d:3e:
02:f2:81:9b:1e:a1:e6:72:d7:3b:c5:33:00:82:af:
5e:28:6b:61:2d:c9:5f:25:c9:88:88:f7:ae:61:5b:
9c:b1:25:94:97:9d:16:05:21:53:c6:d9:7a:1a:9a:
71:c8:8e:23:88:6c:1d:61:40:9a:6a:72:73:e0:08:
f6:dc:d0:53:8b:d1:d9:d3:2e:07:05:97:2d:4e:96:
07:2e:03:dc:26:d3:1f:03:cf:b5:56:9b:0c:f1:21:
3d:3b:b9:b0:66:84:c0:d6:54:8a:25:f8:6b:7d:e2:
a3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:37:5D:39:09:FC:5D:16:D2:77:F9:05:1A:3F:79:43:3D:D1:F6:DE
X509v3 Authority Key Identifier:
keyid:16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5b:02:00:fd:b6:96:6d:f2:54:51:d1:75:a6:9e:c7:f4:7a:
5b:8e:89:2c:b9:8f:7a:8b:fd:2c:0f:db:32:5a:e9:64:15:81:
9b:b8:e7:8d:05:a5:e9:65:05:50:97:c3:1b:2e:2d:bf:12:d8:
10:ce:38:6d:72:cf:0f:78:ce:77:5d:a3:3e:90:8e:bf:5d:0f:
3a:8d:cd:2a:c7:af:be:d3:c2:e2:a7:3b:ed:42:2d:15:f9:80:
32:ab:aa:a5:49:1d:c3:5f:55:36:c9:39:cb:ac:aa:ba:a6:04:
0d:24:16:d3:b2:d7:10:b9:0d:21:e1:cb:c3:a7:a9:20:a8:c3:
4c:78:2e:ee:f0:f2:c2:e1:67:b0:34:b9:fd:82:70:30:28:df:
a8:30:94:66:48:ca:7b:b5:48:f5:c1:5c:62:5a:ba:ff:37:75:
74:c5:04:26:77:83:56:c6:97:0c:48:76:41:24:72:eb:cb:80:
50:e0:f0:8a:17:c0:77:49:c9:9d:12:8b:9c:32:e9:83:a7:b3:
37:29:74:25:f1:05:e9:e9:22:54:11:ca:b5:25:1b:9b:40:a2:
71:dc:a5:ee:b1:61:2f:77:81:60:99:a5:74:57:ab:05:3c:eb:
18:fa:6b:e6:77:59:26:53:ea:d0:62:44:8d:d8:c0:f5:70:7a:
8f:f6:1d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:30:53 2025 by rpki-client