Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
File: f3NriKAkBNQwS92tX_VQSmgz57c.mft (raw, json)
Hash identifier: 5zNfErPFmGMNVL3YMmZoA+ObEmy1MX5QTTHryx8E84c=
Subject key identifier: 89:75:3D:CF:07:36:0E:99:54:19:3E:6D:28:B9:76:40:24:0B:ED:59
Authority key identifier: 7F:73:6B:88:A0:24:04:D4:30:4B:DD:AD:5F:F5:50:4A:68:33:E7:B7
Certificate issuer: /CN=7f736b88a02404d4304bddad5ff5504a6833e7b7
Certificate serial: 01974A7B59736948125A66AB74A1BCDB2849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 13:01:27 +0000
Manifest this update: Sat 07 Jun 2025 13:01:27 +0000
Manifest next update: Sun 08 Jun 2025 13:01:27 +0000
Files and hashes: 1: f3NriKAkBNQwS92tX_VQSmgz57c.crl (hash: fXOuV9ww0XG8irn5fyV3ySCYwQygbYP1Az5G1OeK3Kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:59:73:69:48:12:5a:66:ab:74:a1:bc:db:28:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f736b88a02404d4304bddad5ff5504a6833e7b7
Validity
Not Before: Jun 7 13:01:27 2025 GMT
Not After : Jun 8 13:01:27 2025 GMT
Subject: CN=89753dcf07360e9954193e6d28b97640240bed59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b0:c1:50:08:4d:53:2f:d0:e2:34:31:c6:7e:
ca:bf:f3:3b:62:47:e4:b9:d8:b4:81:97:ef:74:e2:
1a:70:89:a4:28:b8:de:dd:b6:cf:e1:ea:a5:b6:c7:
00:f1:58:9e:cd:f3:d8:00:dd:17:45:03:e3:b5:e5:
57:81:24:28:5b:2f:0c:9a:e4:74:79:58:f1:95:c1:
20:92:17:0f:a6:85:77:a1:0d:dc:a6:d1:7f:39:24:
09:9b:ba:35:04:0f:84:82:43:04:e9:6e:49:28:e0:
1e:ca:a4:56:ab:8e:81:52:40:00:82:ab:fc:e5:39:
05:ba:62:e2:a0:d8:14:78:56:cd:dd:7c:93:79:4b:
3a:cb:cd:76:5d:f5:9a:39:57:5e:82:ea:3e:cc:3d:
27:e4:00:74:7a:a0:49:e0:73:a9:5f:9d:c2:b3:ae:
6a:bd:a2:1a:fc:38:7e:f8:9c:45:0b:c4:06:cf:a9:
0d:fa:2c:5b:58:10:41:1d:e2:eb:3a:3a:f9:b6:ad:
49:f8:cd:d2:47:3a:f7:08:ea:2b:07:b6:28:9a:de:
b0:3e:0c:a4:b4:47:4b:2b:d7:a6:7f:36:e2:90:ce:
ae:fb:1d:51:7a:bc:53:66:b9:89:81:35:6a:5b:f1:
bc:47:fd:43:0d:ab:92:84:a3:c2:f3:9d:aa:8b:56:
c2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:75:3D:CF:07:36:0E:99:54:19:3E:6D:28:B9:76:40:24:0B:ED:59
X509v3 Authority Key Identifier:
keyid:7F:73:6B:88:A0:24:04:D4:30:4B:DD:AD:5F:F5:50:4A:68:33:E7:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7f:89:4f:5f:96:8e:39:6a:6f:a7:9b:d5:15:87:e8:09:9f:
40:6f:3d:6b:4f:6f:40:12:45:3b:df:69:00:0d:85:bd:cf:ab:
6d:0c:61:ef:7f:f1:21:68:d3:11:d2:c7:cb:aa:1c:cd:09:1a:
57:1a:51:57:a9:12:7e:77:c2:b4:d4:20:38:2f:59:45:34:bf:
d8:64:8b:e7:c9:9f:16:38:a7:69:f1:69:b8:b8:e7:da:8a:20:
61:6f:46:54:95:18:be:32:f5:93:f7:21:57:47:28:53:58:f7:
a6:ad:9d:ac:6d:d1:19:da:b8:80:44:d8:1c:4c:14:7d:83:15:
6a:23:f1:6e:d0:b0:b8:a5:e7:24:f3:97:6a:80:48:d0:a5:5f:
0b:1a:96:a6:fd:d7:10:d1:52:e8:5e:91:40:26:20:68:7c:af:
be:a8:3b:a3:3e:ba:0c:49:26:3a:6b:00:aa:f2:a0:ba:f3:ea:
b5:14:f0:cc:95:1c:52:1f:03:69:a2:bb:b1:fd:8e:ad:bc:26:
07:0b:30:0b:b7:64:65:6e:23:0f:7f:29:ec:6f:48:dc:32:41:
01:97:e4:d5:38:bd:e9:1a:06:51:b5:6a:9f:0c:5b:33:3f:c0:
f6:b1:f6:3b:0e:43:32:29:4d:c5:2f:6a:09:e6:52:60:2c:2d:
01:91:e7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:02:24 2025 by rpki-client