Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
File: frYDcECoYM2RunejcY7VgMrfXdg.mft (raw, json)
Hash identifier: jU2W9j+aVKeMEbgnvTqKZKPJTUDSCMZ63evPK5Oa4xk=
Subject key identifier: 0E:45:39:CA:C5:26:5F:D3:0C:92:F6:60:96:A5:75:A5:FF:9C:A3:6A
Authority key identifier: 7E:B6:03:70:40:A8:60:CD:91:BA:77:A3:71:8E:D5:80:CA:DF:5D:D8
Certificate issuer: /CN=7eb6037040a860cd91ba77a3718ed580cadf5dd8
Certificate serial: 01975CB78397744EBFAAA479CC79B60A1C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
Manifest number: 0568
Signing time: Wed 11 Jun 2025 02:00:19 +0000
Manifest this update: Wed 11 Jun 2025 02:00:19 +0000
Manifest next update: Thu 12 Jun 2025 02:00:19 +0000
Files and hashes: 1: frYDcECoYM2RunejcY7VgMrfXdg.crl (hash: 7RI2w7yidE/yW4jEXwDtSljc78bQewXmih32nHxcaLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:b7:83:97:74:4e:bf:aa:a4:79:cc:79:b6:0a:1c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb6037040a860cd91ba77a3718ed580cadf5dd8
Validity
Not Before: Jun 11 02:00:19 2025 GMT
Not After : Jun 12 02:00:19 2025 GMT
Subject: CN=0e4539cac5265fd30c92f66096a575a5ff9ca36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b6:b8:ea:85:65:07:10:0c:1a:58:42:d0:9d:
8d:d8:cf:c7:2c:1c:70:c7:d2:0c:07:27:40:45:fc:
03:9b:99:ca:36:57:a0:bc:86:f0:73:d6:d7:4d:8f:
32:af:24:33:bb:da:79:4a:ad:b8:71:6a:cd:a3:84:
14:7b:f1:8a:d4:e6:d2:12:fb:8d:b1:f0:fa:c5:cd:
c4:08:17:47:9f:fd:59:7a:4d:a0:a5:ae:f5:3e:dc:
f0:6c:0e:e9:2b:70:b5:50:f4:e4:c1:1b:1f:bf:01:
f1:7c:99:04:8b:a1:66:91:08:d4:32:d8:12:1d:25:
c1:2d:a1:2c:1d:46:8e:5b:53:c6:15:6e:dc:0d:91:
99:7d:80:32:e5:82:87:7a:5a:f1:ec:7f:c1:82:4c:
d9:65:da:6f:62:ef:e7:a2:e1:a6:ae:f9:0f:8f:96:
14:91:e6:3f:60:be:96:a0:99:05:fc:e8:47:6d:88:
5a:af:d9:a0:49:ae:28:92:e9:83:2c:f2:f6:1b:2a:
d3:63:eb:46:c9:90:d8:57:84:96:fd:c5:9d:75:1a:
58:a4:ea:24:6f:7a:10:2e:e0:d7:2d:a2:7c:21:3b:
f9:51:52:b8:55:b5:2b:79:aa:cb:c2:4d:c1:0f:58:
af:d8:05:72:56:e6:31:51:76:cc:37:33:ba:46:ad:
df:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:45:39:CA:C5:26:5F:D3:0C:92:F6:60:96:A5:75:A5:FF:9C:A3:6A
X509v3 Authority Key Identifier:
keyid:7E:B6:03:70:40:A8:60:CD:91:BA:77:A3:71:8E:D5:80:CA:DF:5D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:5e:2a:dd:dd:d8:b2:4c:f6:f1:c2:dd:8a:7c:51:e5:f5:15:
86:62:c5:ef:c2:c2:11:0a:40:0b:0b:9a:86:58:f8:fc:c2:32:
7d:7c:42:b2:51:91:4d:f7:47:22:5e:7f:58:5b:59:b8:b0:cf:
28:dc:72:51:c6:5c:a4:b6:36:25:a7:94:72:3b:f2:b6:c8:55:
1f:bc:29:af:8d:44:c5:38:64:3e:7a:b6:bc:3d:5e:01:03:3f:
0d:92:fb:86:1d:81:23:f4:af:33:41:e2:95:41:9f:33:47:83:
3f:df:af:02:fd:fc:31:61:de:fa:0a:4a:b9:b4:93:96:c8:2d:
5c:4b:28:54:e1:8c:e5:99:70:d3:9d:64:43:62:17:4a:fc:e5:
d5:e6:d7:05:bf:e6:43:8d:5e:85:60:81:f6:4a:1d:40:60:bf:
ce:df:76:79:cb:e6:25:57:d3:81:9d:49:57:4c:cc:56:c9:f4:
6d:dd:bf:95:ef:31:bc:cb:8e:78:17:61:f9:4f:b2:e9:71:15:
df:77:f9:90:6c:ea:71:9a:da:24:5a:8c:0a:ed:ef:67:87:16:
f7:a3:08:c7:23:3b:d7:53:d9:9d:22:0a:ac:12:02:ca:dd:89:
5b:1f:2a:da:8f:7f:42:65:35:9e:80:47:21:42:b1:38:8b:16:
88:c4:c6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:26:58 2025 by rpki-client