Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
File: FXll7fKBfF_wlm8i1yscqI4NNyw.mft (raw, json)
Hash identifier: UdWuJ6fL5iHzKUQrK+9O+fbqtbg/XD2kD12dEWddsws=
Subject key identifier: 3B:4B:6C:89:11:80:A6:2B:EE:EC:35:C1:80:56:4C:E2:29:96:54:39
Authority key identifier: 15:79:65:ED:F2:81:7C:5F:F0:96:6F:22:D7:2B:1C:A8:8E:0D:37:2C
Certificate issuer: /CN=157965edf2817c5ff0966f22d72b1ca88e0d372c
Certificate serial: 01974A7B95DF3F79A72CE382AFB182C87FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXll7fKBfF_wlm8i1yscqI4NNyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
Manifest number: 1577
Signing time: Sat 07 Jun 2025 13:01:42 +0000
Manifest this update: Sat 07 Jun 2025 13:01:42 +0000
Manifest next update: Sun 08 Jun 2025 13:01:42 +0000
Files and hashes: 1: FXll7fKBfF_wlm8i1yscqI4NNyw.crl (hash: AnYNB/pbzPATgrBTGyQSYm4nbk/xjzkRZxx6H87ZKEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXll7fKBfF_wlm8i1yscqI4NNyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:95:df:3f:79:a7:2c:e3:82:af:b1:82:c8:7f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157965edf2817c5ff0966f22d72b1ca88e0d372c
Validity
Not Before: Jun 7 13:01:42 2025 GMT
Not After : Jun 8 13:01:42 2025 GMT
Subject: CN=3b4b6c891180a62beeec35c180564ce229965439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:66:21:30:28:f2:82:5b:ef:e1:3d:41:2a:fa:
e2:2a:18:42:92:18:83:7d:f9:92:9b:f4:e6:ed:96:
93:d0:30:21:46:ab:4a:5b:6a:58:f2:cc:8f:a5:2a:
4a:f1:e6:92:4b:09:98:1c:db:d2:74:80:4e:5e:0d:
09:a2:96:32:16:e7:de:50:87:71:75:01:10:5e:90:
61:c4:65:b9:79:7a:67:05:96:ba:db:93:ee:14:24:
ed:3c:87:b9:73:7c:7a:5d:7a:ab:19:5e:cb:d6:29:
90:9b:e1:2b:91:0f:d8:62:4c:9a:fc:a3:b9:a5:9c:
21:18:0a:df:3f:a8:5f:21:f0:e5:bb:46:e6:c5:09:
74:11:e5:9e:e4:3e:ba:c6:93:db:66:d9:24:bb:f2:
ab:58:8e:cf:f9:f4:1b:bd:41:10:f0:ea:dc:84:24:
b1:94:2c:0b:e0:34:5f:84:3f:39:0b:67:3c:cc:8e:
ab:8f:42:87:fe:2d:c1:fa:50:c6:51:1b:38:db:7e:
02:3e:0a:d8:ab:e7:fa:62:e3:60:60:32:45:3b:ae:
ca:de:dd:7f:b0:b1:b7:f6:6a:12:53:ca:50:da:94:
49:5f:17:3b:c1:59:e3:0f:a0:9c:a0:9d:f6:04:f4:
8a:03:6c:04:fc:b9:da:95:cc:ea:a6:be:81:9d:53:
0d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4B:6C:89:11:80:A6:2B:EE:EC:35:C1:80:56:4C:E2:29:96:54:39
X509v3 Authority Key Identifier:
keyid:15:79:65:ED:F2:81:7C:5F:F0:96:6F:22:D7:2B:1C:A8:8E:0D:37:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXll7fKBfF_wlm8i1yscqI4NNyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4b:c1:8b:ea:58:40:13:b2:db:b8:02:b0:26:c6:9c:fb:89:
e4:92:81:60:7f:12:b8:d1:74:fc:56:ae:67:89:76:c2:22:f4:
dd:f1:a8:90:37:5a:61:c5:33:82:14:01:db:f4:8a:56:6c:d0:
89:04:ab:52:10:8a:65:f6:e7:a6:69:75:ac:fb:c1:1e:3c:58:
88:e0:b7:1e:f7:41:7e:0c:7f:20:21:48:39:dd:84:57:34:9f:
a5:70:90:9a:6d:27:75:ca:29:9b:06:1b:fc:7e:b9:13:61:cc:
21:2e:a8:4f:b0:d0:a2:27:81:73:fa:8f:ad:e6:24:96:37:3a:
16:81:b6:32:49:7c:31:53:74:4e:b5:e2:f2:75:d6:47:65:9b:
ad:a0:f9:ea:44:3e:d5:c0:9b:a4:82:db:70:ef:f3:b7:90:fd:
4e:98:87:74:1c:5b:ca:9a:fc:f1:9a:d9:df:a9:00:f3:3a:18:
6e:ba:f2:b0:ea:23:76:c7:d6:67:7f:70:72:57:10:f6:a1:00:
99:69:f0:6f:ae:09:91:5d:06:17:cb:d0:7f:35:43:a6:8f:9b:
55:bc:ed:56:5f:20:60:91:ba:15:a9:f7:ce:9e:c2:95:a9:d1:
17:94:d7:26:9c:a0:3d:16:b8:69:00:47:e9:41:28:d3:cd:18:
a7:a9:43:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:32:30 2025 by rpki-client