Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
File: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft (raw, json)
Hash identifier: gbCJi6rAT4cnmi5eYT+Vg62HMJSL7/6UAnZTPbmtg2Y=
Subject key identifier: 90:6D:FD:AF:A4:3F:6C:6C:04:5A:74:00:43:14:18:4A:1E:87:C2:D5
Authority key identifier: F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
Certificate issuer: /CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Certificate serial: 019752D8FA64B406042EACAEF05DF9DC6EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
Manifest number: 0653
Signing time: Mon 09 Jun 2025 04:00:40 +0000
Manifest this update: Mon 09 Jun 2025 04:00:40 +0000
Manifest next update: Tue 10 Jun 2025 04:00:40 +0000
Files and hashes: 1: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl (hash: /c+KVKkrnSTe7lPINpiQvo8dfy1vTz4tfpI9Ly3Zuzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d8:fa:64:b4:06:04:2e:ac:ae:f0:5d:f9:dc:6e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Validity
Not Before: Jun 9 04:00:40 2025 GMT
Not After : Jun 10 04:00:40 2025 GMT
Subject: CN=906dfdafa43f6c6c045a74004314184a1e87c2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1f:3a:33:85:30:ec:eb:8a:00:1f:32:c9:5c:
e8:a3:37:e0:31:17:17:1b:25:0e:06:7a:fd:c4:92:
03:6b:9e:84:6c:2a:99:fe:81:8d:8a:36:aa:88:6d:
87:c2:35:89:c7:2d:40:02:56:e0:e3:70:2f:31:8a:
50:67:5b:39:89:8c:74:0e:b1:18:34:82:82:90:93:
13:23:51:27:4a:4e:a1:f6:dd:4a:e6:0d:e6:4a:74:
0a:36:a0:6d:72:b9:ec:90:ce:73:88:1f:80:82:10:
f8:54:14:82:1f:da:05:71:98:1f:a5:82:66:81:c6:
f0:9d:03:35:41:8f:e7:f6:3b:a0:9b:cc:0a:51:13:
78:39:cd:7e:d5:99:cf:e1:66:20:77:2c:a8:e1:08:
09:ab:81:c5:72:ee:f2:f2:b5:d4:50:00:d5:65:88:
b7:2e:6f:eb:6f:50:c3:60:19:41:2e:42:0a:90:65:
15:60:8d:30:05:29:97:ef:86:d2:bb:95:76:3b:3b:
fa:e6:d3:f0:10:53:61:70:f0:a5:f8:20:44:c2:1e:
ba:23:b4:81:51:a8:93:87:ab:a3:99:ce:ec:cc:8d:
6a:ca:3e:54:8d:ff:4e:42:66:a0:8c:53:e9:66:d6:
d1:fa:83:8b:85:3e:83:8f:7c:4f:2e:38:11:e6:ab:
1a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6D:FD:AF:A4:3F:6C:6C:04:5A:74:00:43:14:18:4A:1E:87:C2:D5
X509v3 Authority Key Identifier:
keyid:F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c7:2f:17:92:35:05:4b:29:37:f6:a6:69:3b:eb:77:0a:04:
a6:60:31:79:fe:38:79:2c:8f:98:3d:33:a8:d9:74:5a:0d:f6:
96:76:2a:59:0f:e7:3c:bb:64:85:aa:22:1d:ba:20:e7:6e:7c:
03:1a:56:8d:ee:08:54:ba:4a:7c:66:9e:c8:8a:ef:19:25:6c:
f0:f5:e3:40:9a:fd:6a:62:1a:34:6b:8a:47:dd:db:d5:84:52:
88:ab:ab:05:d7:d8:de:e3:b0:11:67:c2:d7:c4:ca:36:34:4a:
21:f4:15:e9:ec:d1:3d:33:d9:07:98:1d:30:1b:84:cb:bc:2e:
6a:9d:58:fc:ff:d2:09:ae:3c:87:c7:bf:5a:a2:2f:01:ac:60:
24:3b:db:d1:8e:66:e7:06:f9:da:9e:e0:c5:c3:1b:24:ce:ec:
7a:0c:40:9b:4b:83:9f:00:50:ad:4e:73:7e:bf:77:df:e6:2a:
2e:9b:ad:94:5d:ea:5e:a3:9a:c6:c0:9d:fd:17:aa:e0:88:68:
54:e0:4d:0e:8c:ac:a4:e9:8e:7e:8b:b1:06:e0:b0:4a:aa:d2:
be:4e:95:3f:9d:74:69:53:50:4c:57:38:e6:a6:a7:a0:49:1b:
94:0f:23:d2:ad:b9:29:93:1b:6c:48:5d:3b:19:22:79:89:4b:
97:b7:c1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:52:15 2025 by rpki-client