Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
File: fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft (raw, json)
Hash identifier: zzpPXrPtKVfsCoF3VplofV50u2EdQLFkn2Rf0MNCurg=
Subject key identifier: 88:3A:AC:BD:00:75:DC:B5:23:83:01:66:B2:7D:81:E2:AC:64:75:F8
Authority key identifier: 7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5
Certificate issuer: /CN=7dc55ddda414240269f05bf8e8cd708135dd7de5
Certificate serial: 01974DE97EF3CD2819F369ACD8F046336E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
Manifest number: 028B
Signing time: Sun 08 Jun 2025 05:00:37 +0000
Manifest this update: Sun 08 Jun 2025 05:00:37 +0000
Manifest next update: Mon 09 Jun 2025 05:00:37 +0000
Files and hashes: 1: fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl (hash: tiVe7rcyMltU4SBSaJXzVuyAnUhN+VgJ+Q05kRL6LUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:7e:f3:cd:28:19:f3:69:ac:d8:f0:46:33:6e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc55ddda414240269f05bf8e8cd708135dd7de5
Validity
Not Before: Jun 8 05:00:37 2025 GMT
Not After : Jun 9 05:00:37 2025 GMT
Subject: CN=883aacbd0075dcb523830166b27d81e2ac6475f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2e:9e:68:e7:5b:c9:2c:dc:b5:01:9d:f9:fb:
2d:f9:0f:9a:53:5c:60:16:28:4d:ef:ce:a8:cb:ad:
14:42:26:91:f1:e4:9b:aa:c2:83:10:93:51:6e:3b:
5f:c1:95:0b:ec:2f:92:68:75:ff:3b:98:cc:cb:44:
37:e4:ff:68:70:39:71:7e:97:0c:49:d1:fb:c0:91:
f9:8c:90:7f:53:e0:be:3d:90:6b:a7:4a:2a:23:a7:
7b:a3:7d:25:1a:5f:2d:72:11:cd:30:35:f0:58:76:
04:99:dd:86:24:69:41:de:db:0f:85:20:91:7b:c1:
80:62:7e:c7:df:61:01:a7:0d:01:cb:6f:07:b1:b9:
4a:21:ec:9a:fa:75:1c:e8:51:b2:7a:2e:9d:0b:c0:
48:d1:d2:a0:57:e9:19:84:53:fa:c0:fe:b1:cd:b9:
a1:b3:20:f4:26:54:f5:87:4c:c8:18:3f:ff:e0:d4:
3e:06:38:dd:06:94:8d:22:fa:21:4c:e2:5e:d6:ee:
9f:3e:bc:c6:79:27:e3:b6:57:69:39:10:bd:28:2c:
dc:ce:38:fd:88:4d:fd:a9:9e:2a:0d:43:51:f8:b0:
c1:3e:ea:9a:63:fe:91:5a:57:2a:92:a9:c9:38:bc:
42:77:61:1a:b7:ba:36:13:a9:0d:85:19:54:af:60:
e8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3A:AC:BD:00:75:DC:B5:23:83:01:66:B2:7D:81:E2:AC:64:75:F8
X509v3 Authority Key Identifier:
keyid:7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a1:0b:ad:00:0a:73:7b:47:be:e3:f5:22:3d:eb:6b:6e:82:
a8:3e:81:e2:57:ae:ac:5f:7d:5f:b3:cc:04:df:93:64:e7:3b:
ab:5f:44:22:69:25:48:37:d1:a1:a2:46:ec:a9:d7:18:88:0c:
6b:9d:d8:36:9d:f7:98:51:ed:60:a8:3d:87:b7:b7:5d:77:2b:
ac:0a:b7:75:f3:f0:00:29:11:c4:f4:6e:b0:4a:d2:6c:4d:35:
51:4d:3b:48:de:30:51:95:1c:c4:f5:6e:d2:c9:b9:d9:7b:92:
29:b3:a4:3e:f9:50:33:96:e4:d7:2e:36:04:8d:73:9c:a8:f7:
6e:86:1e:c3:1a:72:29:b1:6e:95:0a:83:5e:2f:db:ab:f7:a0:
1d:cb:0b:2c:a8:35:f1:17:8f:df:54:62:54:03:91:97:84:af:
31:1c:39:2a:ad:32:4f:c3:37:17:61:0c:d5:fb:f6:e6:07:09:
90:5e:81:7d:f2:9f:33:c6:2f:82:6c:74:6c:80:b3:f6:a1:79:
30:6a:1a:80:32:eb:eb:57:c9:76:cf:df:57:0d:bf:9a:5a:42:
92:a1:56:cf:5b:15:56:20:e4:85:84:d5:26:74:9e:08:95:1c:
73:6d:ad:99:c0:ab:a3:29:ba:dd:11:09:39:70:63:7c:e5:f5:
9f:09:7b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:06:22 2025 by rpki-client