Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
File: Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft (raw, json)
Hash identifier: pEc3rgzZlYU9VpPiiGIref0KOvcjj0WnXFLkl83d5sU=
Subject key identifier: 1E:67:48:B8:BF:42:07:4A:E4:EE:EB:AB:FE:17:52:22:57:12:EF:6B
Authority key identifier: 16:1E:0E:AE:77:A9:8C:36:23:D1:78:1F:9A:F4:55:7D:35:41:D2:BA
Certificate issuer: /CN=161e0eae77a98c3623d1781f9af4557d3541d2ba
Certificate serial: 019750B3E901C09C55721C5754ACABE21F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 18:00:57 +0000
Manifest this update: Sun 08 Jun 2025 18:00:57 +0000
Manifest next update: Mon 09 Jun 2025 18:00:57 +0000
Files and hashes: 1: Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl (hash: DltotWsoxoHyaqoyjhXOLgTS+wU+d1ujkXsG9247bX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:e9:01:c0:9c:55:72:1c:57:54:ac:ab:e2:1f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=161e0eae77a98c3623d1781f9af4557d3541d2ba
Validity
Not Before: Jun 8 18:00:57 2025 GMT
Not After : Jun 9 18:00:57 2025 GMT
Subject: CN=1e6748b8bf42074ae4eeebabfe1752225712ef6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4a:e8:71:3e:92:db:07:a9:e1:26:38:e7:a8:
01:b5:1d:84:7a:c7:df:0c:b7:ef:99:66:11:2d:41:
98:69:60:87:58:5b:71:c2:6b:fa:02:19:26:89:8e:
8b:96:fc:9d:44:b8:00:10:bb:45:cd:60:46:78:f8:
16:3d:9b:3b:7b:23:2c:a2:8d:68:ed:10:1c:8a:7b:
84:40:09:33:5c:43:44:60:db:e9:ec:3c:ef:c4:f6:
7c:b4:68:a4:bc:16:e9:9c:7f:dc:25:4d:76:c8:ce:
a1:ad:51:31:3b:14:4a:f5:06:7b:10:57:d0:cb:fe:
8a:35:20:c6:4e:cf:3e:26:81:47:61:b7:9d:69:e5:
8b:77:d7:7e:c9:5c:db:0b:de:7c:3f:dc:a8:ca:9d:
bc:52:8b:f4:2c:c6:b3:5b:7c:2a:93:7b:8d:82:15:
8c:c9:f2:20:77:c8:e4:68:e3:7c:20:74:20:e9:8b:
41:7c:a0:6e:9d:58:a0:7f:e0:cd:d3:ae:2a:e0:ce:
f9:7f:f2:a3:37:b0:dc:7f:ce:30:cd:23:29:75:6f:
e0:be:5d:6a:00:92:50:f5:07:20:fe:98:a3:31:72:
23:75:0d:71:4d:31:f9:8e:b3:f3:53:ca:76:79:49:
8a:8b:0c:b8:a6:63:97:7c:d5:35:ba:ed:9f:43:90:
b3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:67:48:B8:BF:42:07:4A:E4:EE:EB:AB:FE:17:52:22:57:12:EF:6B
X509v3 Authority Key Identifier:
keyid:16:1E:0E:AE:77:A9:8C:36:23:D1:78:1F:9A:F4:55:7D:35:41:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a8:91:c0:3f:82:c7:30:36:c7:e9:ab:9f:d7:69:8d:74:bf:
b4:03:cc:0d:31:1a:4d:71:fb:2b:08:9a:49:c4:41:38:3a:06:
c1:df:98:e7:33:8f:5c:ff:1a:f0:a0:1d:83:6d:a4:7c:3b:08:
5f:84:07:08:f0:d2:1d:51:50:48:5e:e2:29:3a:bf:87:54:bb:
57:11:b0:f3:aa:c9:5b:cd:9d:06:7e:c1:45:cf:70:22:08:0e:
ad:c0:7c:93:97:1d:e0:0a:1d:8b:51:ac:24:95:a4:ec:4d:55:
fb:bb:d0:a1:78:c8:d3:90:ed:1d:bc:1a:3e:1c:5a:e2:6d:27:
10:6b:8b:e7:0a:a1:13:1a:16:dc:b9:bd:69:02:c5:fd:b6:32:
15:3b:59:65:bc:f7:25:36:e0:81:3d:25:ce:03:30:b0:d2:17:
a7:a4:78:06:fb:7f:91:1c:1c:68:8f:b7:7f:36:59:62:04:d2:
bf:eb:09:5b:97:f5:12:d8:16:42:68:2f:1d:8e:ff:93:0c:80:
e5:ba:87:5e:49:90:ac:08:3e:9a:a6:a7:fd:5f:c3:f7:b7:e2:
95:5e:f5:da:c7:0a:77:4e:4c:f2:cc:12:52:81:db:4f:89:18:
75:80:fd:a9:79:3e:28:2d:c6:92:9a:55:75:b8:f6:0e:40:0b:
d6:40:51:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:49:39 2025 by rpki-client