Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
File: fjGzT4SD1T_rGSrhFFSs43vH9YE.mft (raw, json)
Hash identifier: WXPHfmHUH7vuCMPxxkTVYndH8M11QQTX8wdnwAz4CDI=
Subject key identifier: C4:F1:7F:68:B8:21:08:DE:67:6D:C2:46:A0:05:8C:CE:5F:C3:D3:0F
Authority key identifier: 7E:31:B3:4F:84:83:D5:3F:EB:19:2A:E1:14:54:AC:E3:7B:C7:F5:81
Certificate issuer: /CN=7e31b34f8483d53feb192ae11454ace37bc7f581
Certificate serial: 0197470BF9DB41491F3B21635B70C448B9F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
Manifest number: 0349
Signing time: Fri 06 Jun 2025 21:00:56 +0000
Manifest this update: Fri 06 Jun 2025 21:00:56 +0000
Manifest next update: Sat 07 Jun 2025 21:00:56 +0000
Files and hashes: 1: fjGzT4SD1T_rGSrhFFSs43vH9YE.crl (hash: 2EGpGpgnXpWrxuuu3sMmH+ERFopaLofRg8yL0SW0obs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:f9:db:41:49:1f:3b:21:63:5b:70:c4:48:b9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e31b34f8483d53feb192ae11454ace37bc7f581
Validity
Not Before: Jun 6 21:00:56 2025 GMT
Not After : Jun 7 21:00:56 2025 GMT
Subject: CN=c4f17f68b82108de676dc246a0058cce5fc3d30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:8a:09:61:cd:68:cd:42:f4:16:75:29:97:
64:9a:b5:af:ed:25:68:3e:64:dd:fc:48:f1:05:7e:
f9:25:e0:87:e6:e0:8d:89:73:b7:c1:fb:26:97:87:
07:5a:4c:17:fe:8e:7f:d9:49:8c:b2:52:68:f1:01:
7d:a4:c5:4a:bf:5b:1e:90:c1:3e:ba:11:2e:36:50:
72:37:29:74:f2:79:98:82:14:ab:9f:69:04:ce:8a:
a6:a5:ee:f3:c4:d2:b1:ee:86:bc:87:6b:80:f1:5a:
99:e6:64:31:f2:e6:ac:66:ad:e8:f9:65:64:ef:42:
f9:b6:22:61:4d:df:9e:02:43:f1:08:ce:0d:dc:25:
45:b2:69:2c:3f:f9:3d:a9:4f:22:ca:ef:d7:d2:59:
bc:48:c2:8b:8d:8b:ed:12:74:b4:b8:0e:5c:d0:39:
73:1f:5c:4e:fb:f2:9a:06:96:ad:a2:46:9e:5d:c3:
b1:e5:36:5b:2d:07:ba:05:11:b8:1a:00:17:d4:24:
02:88:54:1b:19:be:7e:96:a8:d3:9e:d4:b9:ad:c4:
81:1f:f5:fd:57:8a:62:1f:0e:11:35:03:f6:22:3d:
c5:5d:c9:33:30:6a:a2:14:e5:b3:a9:6b:81:f7:9f:
ac:7b:b2:02:83:bd:bb:f2:ff:54:c3:50:04:fa:94:
ad:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F1:7F:68:B8:21:08:DE:67:6D:C2:46:A0:05:8C:CE:5F:C3:D3:0F
X509v3 Authority Key Identifier:
keyid:7E:31:B3:4F:84:83:D5:3F:EB:19:2A:E1:14:54:AC:E3:7B:C7:F5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2c:77:12:08:c2:4b:46:01:a4:3f:68:b0:0b:76:d5:95:ce:
55:fc:55:88:21:95:1f:e9:56:1e:7b:58:bf:aa:4b:b8:fd:e4:
99:cc:05:3a:33:c8:ad:85:b0:0d:5b:ad:11:06:ac:c4:e1:52:
b1:f3:e0:6b:31:4f:61:7c:9e:d6:f4:7e:c2:c8:a5:dc:fc:dd:
32:ee:51:c9:67:49:86:b6:7c:1d:ce:39:3a:a7:1a:1a:5c:9c:
0a:c4:9e:fa:06:11:a2:d2:94:9f:b3:f7:e4:34:fd:a1:29:b9:
8e:60:b5:49:ba:13:67:be:36:43:86:39:91:d0:6d:66:b5:ad:
28:18:e7:6f:9e:57:60:00:7f:c0:43:4c:92:5e:60:bf:64:90:
7e:b0:47:31:fb:42:66:5e:7d:9f:5b:c6:e7:6a:c6:c8:e4:e7:
9e:78:5b:f0:0d:f0:c2:97:bc:29:80:b8:c9:62:d0:c2:4a:b8:
4f:59:80:47:f9:ea:93:e5:45:c3:f9:4d:d5:b2:91:6d:0e:4d:
8e:a6:ec:7d:c6:6c:e1:30:55:eb:f3:24:81:da:1a:e2:0f:15:
9e:34:4b:aa:82:60:23:06:65:2c:49:76:43:21:7e:6c:1f:56:
1e:c5:cb:3a:90:ce:0b:ca:72:5d:98:e1:49:18:d1:cd:53:d1:
0a:05:e8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:30 2025 by rpki-client