Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
File: fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft (raw, json)
Hash identifier: ROVHi5ynTkcDhtK3q33AD8LLnSwdZL+vSCLX2R82YXY=
Subject key identifier: E2:93:0A:B3:A5:D0:41:CE:D9:82:3A:CA:A6:FB:76:67:AE:5F:A2:07
Authority key identifier: 7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4
Certificate issuer: /CN=7f0757c331981e042b7471373527d0f64a1356b4
Certificate serial: 01974A7BAA336D7D9259D61CD946EBB96984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
Manifest number: 1120
Signing time: Sat 07 Jun 2025 13:01:47 +0000
Manifest this update: Sat 07 Jun 2025 13:01:47 +0000
Manifest next update: Sun 08 Jun 2025 13:01:47 +0000
Files and hashes: 1: fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl (hash: pbflrBIr56iGNAydzbwXzBgGrmqB1K/lAYLp30VKnTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:aa:33:6d:7d:92:59:d6:1c:d9:46:eb:b9:69:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f0757c331981e042b7471373527d0f64a1356b4
Validity
Not Before: Jun 7 13:01:47 2025 GMT
Not After : Jun 8 13:01:47 2025 GMT
Subject: CN=e2930ab3a5d041ced9823acaa6fb7667ae5fa207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:84:1b:90:bf:52:f3:d8:be:bb:1a:ef:de:
43:56:f2:a7:7f:78:ed:f2:2f:7b:08:1d:86:63:80:
8b:14:93:79:7d:ae:86:cb:47:76:d4:00:46:a4:87:
59:61:23:d9:04:08:f4:74:bd:1b:1f:6f:d4:2a:ea:
3c:b4:4d:37:0d:66:50:d6:39:b0:dd:1a:be:b3:84:
92:05:73:c4:38:52:5b:fe:19:b0:57:de:a9:d9:7d:
ec:82:8d:a3:4c:33:6c:4b:a1:4b:cf:c4:2a:75:86:
01:50:35:16:e1:f7:bd:e0:45:d4:42:62:b3:9c:a1:
11:ef:13:dd:65:68:fc:ba:0e:7e:9e:d3:ca:22:3c:
f8:c6:81:58:51:5e:9f:ba:95:52:91:6a:72:29:24:
b1:78:fb:7f:b4:41:a6:38:1f:41:13:c6:a8:74:f2:
ee:bc:01:db:41:95:2c:0e:5e:c3:1b:6d:2e:9d:b1:
9f:ad:ea:18:06:a4:cd:8b:d5:e5:8a:5f:3f:77:f2:
60:ee:1e:9f:fe:15:82:3a:52:18:ef:52:70:27:fb:
b1:b9:33:02:d0:49:da:83:55:0b:f5:20:f8:93:f1:
ad:9d:f9:4d:67:ee:72:af:d4:a6:b1:49:6f:97:2c:
d5:1b:b0:04:82:2a:dc:c1:dc:29:19:8b:f2:9f:ab:
10:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:93:0A:B3:A5:D0:41:CE:D9:82:3A:CA:A6:FB:76:67:AE:5F:A2:07
X509v3 Authority Key Identifier:
keyid:7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:77:ef:5e:b5:53:28:9b:13:8f:5d:3a:46:53:b5:d7:ec:c1:
34:37:8f:3e:97:8c:c3:64:b6:45:f0:a4:ff:85:3d:fb:7c:16:
65:25:7c:6b:61:b2:e6:4e:65:86:c7:3e:3f:af:23:cc:ec:95:
d3:e9:da:18:ae:29:ce:0f:bd:35:61:8d:4e:6f:81:79:29:28:
ab:9e:f6:d6:68:3a:18:9f:87:d0:db:44:af:31:aa:5f:ee:19:
32:1c:67:23:37:a0:f1:58:6e:18:e9:22:8b:90:9b:ca:a8:54:
33:e5:83:6f:bd:63:45:61:f8:00:f8:d1:1d:e6:0e:3f:63:f2:
5c:d5:02:f1:a3:2a:62:24:fb:7f:64:df:23:e3:4d:d3:67:23:
95:4f:ca:b0:f9:4c:13:14:93:20:cd:b0:93:4f:50:22:fa:07:
fe:90:11:78:48:2e:22:16:73:8d:87:46:ff:8a:6c:9f:8a:81:
39:c6:e4:84:0c:c1:ad:71:ed:f2:30:0b:5a:5d:71:60:88:22:
24:e4:a9:13:b9:14:52:c9:07:1c:7e:5d:50:de:34:d9:e7:7c:
e4:85:b3:c0:79:ba:6f:52:6e:6a:f0:d1:aa:7f:37:cd:38:a0:
0d:e1:bd:e2:54:54:45:a2:d9:86:f2:f7:f7:dc:8c:ae:d7:d6:
69:80:35:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:14:28 2025 by rpki-client