Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
File: fsXxiW6aRDV8nXis831I9HgFINk.mft (raw, json)
Hash identifier: fr5/CdSRcmSJSqafQ17zOTNCKvZ+t9FAg+/j+XaIYjc=
Subject key identifier: 50:87:11:62:93:53:EC:7C:37:CB:EA:98:32:28:E2:59:8B:EB:27:15
Authority key identifier: 7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
Certificate issuer: /CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Certificate serial: 01975045A769A30C64942B5101399FE7751A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 16:00:31 +0000
Manifest this update: Sun 08 Jun 2025 16:00:31 +0000
Manifest next update: Mon 09 Jun 2025 16:00:31 +0000
Files and hashes: 1: fsXxiW6aRDV8nXis831I9HgFINk.crl (hash: /h5lnzlHAPZtPwYzo9JBk+5FMflShCQ4oQsVSDnbY3M=)
2: tIBVHEbpT3B92jmv17nHEdfPfME.roa (hash: F4q9q1phtloOjlG43lA2x7BlugORaBByvlUxXUgAa14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:a7:69:a3:0c:64:94:2b:51:01:39:9f:e7:75:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Validity
Not Before: Jun 8 16:00:31 2025 GMT
Not After : Jun 9 16:00:31 2025 GMT
Subject: CN=508711629353ec7c37cbea983228e2598beb2715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8d:fd:39:4b:b4:6b:33:44:c8:45:cb:f7:a2:
41:34:44:00:b9:78:c6:5b:5d:d5:a6:6a:f3:c8:4f:
61:44:09:22:9b:71:32:fa:31:eb:44:fd:5a:d2:7f:
0e:e7:a7:e2:85:75:6f:98:11:7a:f3:5d:62:cb:4e:
36:46:07:d6:33:79:83:a7:1c:c0:5b:d5:e7:d3:28:
03:99:ce:c4:20:93:aa:54:8b:23:8c:a7:53:c9:2b:
89:e3:5d:65:a1:c8:69:ba:b0:72:67:6c:d8:3d:96:
ec:71:48:6b:3f:40:3e:d8:5c:6c:6e:e7:36:46:cf:
f0:2b:33:19:28:76:d9:c2:65:39:02:ae:1d:8b:b6:
85:29:5f:79:b8:c5:ae:e8:e4:e7:14:de:f3:ee:1a:
92:7e:4c:4a:5c:35:3f:8e:6a:3b:18:b9:18:5d:bb:
a8:42:eb:30:f4:3b:66:38:0a:69:f3:c9:67:f6:a0:
79:dd:cd:b2:42:b2:42:dc:cf:48:ee:8e:da:9a:df:
ad:fc:28:b4:81:8a:15:df:ba:f4:d0:8f:92:de:3b:
09:f9:3a:8d:aa:9b:48:82:52:12:67:07:9c:de:e5:
e0:25:a9:f5:e8:01:12:5e:8b:d5:1a:aa:cd:7b:c2:
85:cd:54:6d:e4:22:3c:68:d3:78:de:5e:cc:da:30:
e4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:87:11:62:93:53:EC:7C:37:CB:EA:98:32:28:E2:59:8B:EB:27:15
X509v3 Authority Key Identifier:
keyid:7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d9:51:41:95:2a:39:8c:a6:f9:63:bc:d7:da:8d:2b:93:fe:
05:e6:26:c4:de:c5:88:dc:d4:50:da:92:66:9c:2c:a8:77:9f:
72:09:8d:f0:d7:40:43:0e:aa:31:96:5d:be:ea:22:9e:de:c2:
d5:3a:0c:c7:cc:94:3f:e8:aa:79:7e:02:9b:48:c8:7f:e4:e2:
ef:5e:57:d7:0c:cb:f2:3c:3b:48:e0:a1:2d:02:e7:73:05:81:
c8:42:c5:42:c7:32:a9:41:43:b9:04:e5:79:76:a9:df:04:93:
39:45:59:e9:d2:7d:ad:ae:91:43:08:a2:9a:d4:48:a3:14:9c:
d1:45:06:c4:71:94:53:00:d0:a8:aa:bf:92:46:8f:9f:ed:6a:
3e:5c:99:12:9b:02:50:39:7d:13:83:24:5d:95:34:2a:3f:8f:
f3:52:74:8a:bc:b0:aa:47:51:3b:4a:d4:50:79:d0:ed:0f:47:
c8:70:92:8a:d1:6d:ee:49:97:46:c7:2c:43:3c:db:b0:2b:1d:
52:9b:15:a9:a3:15:32:74:23:f5:7e:05:8a:92:47:b2:fd:0b:
6e:ab:74:be:e4:c4:f5:f0:ef:e5:1a:16:a6:4f:0e:55:11:21:
17:b8:c1:c5:db:25:2f:92:cc:ae:c1:b5:9f:24:f6:34:da:26:
d4:cb:5a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:08:54 2025 by rpki-client