Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
File: fKWYMippkFpcbgKVoMoftVZmwUs.mft (raw, json)
Hash identifier: j9vye1BAnuFZBZ8ipNBvkqN/QY/3vOJmKEU6SZCSXVc=
Subject key identifier: C1:DE:C4:9D:6D:47:7E:A6:22:6D:7A:B8:09:87:E7:4A:CE:7B:4E:BE
Authority key identifier: 7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
Certificate issuer: /CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Certificate serial: 01974A7AAC8ED7464216BFA3857A75611ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
Manifest number: 0521
Signing time: Sat 07 Jun 2025 13:00:42 +0000
Manifest this update: Sat 07 Jun 2025 13:00:42 +0000
Manifest next update: Sun 08 Jun 2025 13:00:42 +0000
Files and hashes: 1: fKWYMippkFpcbgKVoMoftVZmwUs.crl (hash: ja5QYcrm8ufAnKlVqq6ZWykyIPbrXFNOh2U1NqXzVQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:ac:8e:d7:46:42:16:bf:a3:85:7a:75:61:1a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Validity
Not Before: Jun 7 13:00:42 2025 GMT
Not After : Jun 8 13:00:42 2025 GMT
Subject: CN=c1dec49d6d477ea6226d7ab80987e74ace7b4ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ef:27:b3:32:97:15:f3:0d:1a:7e:e0:c4:b5:
87:6a:50:95:e6:6f:02:c4:5c:06:c4:79:bb:a7:04:
89:5f:ff:83:24:22:71:1f:47:3e:1b:57:f6:7b:e8:
9c:81:d6:2d:02:4a:9f:9e:f1:7e:30:85:73:cb:2c:
32:6f:7c:8e:31:04:2d:74:cb:3f:23:18:ce:bb:35:
73:02:62:e1:d1:ee:6c:f2:3a:47:b6:5e:cb:b1:31:
ea:f9:a1:08:55:1d:ac:39:37:56:91:1e:76:a2:ce:
91:9f:96:54:15:06:72:ed:15:34:dc:12:a5:ee:1f:
c2:af:62:a0:13:71:cb:56:fe:b5:d7:30:ec:c6:db:
06:e4:53:66:3e:5b:d1:fb:57:be:28:be:2a:c6:d9:
d4:9e:bc:be:70:0c:d9:27:5f:23:f7:fb:cd:70:07:
62:d5:e8:d5:ce:e9:76:ad:d5:59:40:fe:42:01:c0:
1a:15:98:4f:4d:58:b5:36:84:c3:47:0b:a5:73:39:
31:ca:6d:ef:77:20:cc:21:fe:e8:6b:51:2b:ce:7d:
0a:99:8c:d7:3f:d6:72:a2:9b:5a:61:30:ee:e1:1e:
0e:2b:bd:71:b4:3c:47:df:32:f0:08:fa:39:c9:ea:
1b:45:5c:62:b4:d1:33:d6:d5:a6:b1:c5:10:9a:86:
c5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DE:C4:9D:6D:47:7E:A6:22:6D:7A:B8:09:87:E7:4A:CE:7B:4E:BE
X509v3 Authority Key Identifier:
keyid:7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d0:4f:23:86:06:6f:9f:23:27:63:f8:ad:1c:00:12:98:aa:
b3:d7:e5:be:85:28:08:54:42:a9:00:e4:82:f6:63:6d:51:7c:
88:1c:93:46:65:c9:e2:25:59:11:56:ce:64:d1:df:71:3f:7a:
04:0c:ea:45:dc:0b:5d:71:85:f7:91:12:6c:78:e4:24:e6:29:
94:b8:7f:51:53:03:49:73:b0:6d:bc:8f:cb:84:da:f6:e4:f3:
47:29:b4:c0:15:f3:a6:a1:2e:10:f7:21:3d:b6:17:52:59:a0:
38:24:d9:63:a7:19:a8:84:7e:4a:9e:3e:06:a6:35:50:49:c2:
9b:4d:02:55:31:98:72:bf:89:60:8f:09:38:7d:7b:28:50:40:
53:db:3b:64:20:a2:33:18:a2:64:0c:4e:1c:06:ff:02:72:e8:
ef:0d:1f:2c:98:fc:83:87:7f:bc:83:04:05:f4:ff:a7:c1:29:
06:b4:c9:be:ac:2d:76:11:22:2f:70:10:57:90:c7:ac:b7:42:
cc:d1:2a:a1:5e:28:9d:02:be:9a:64:9a:eb:05:4d:83:ac:9a:
f0:23:35:de:12:37:18:8d:be:93:69:02:91:66:6a:d6:83:83:
b3:4a:f4:d8:72:bc:72:a3:cd:e2:9c:a0:db:d6:ce:8c:5f:e4:
af:b6:34:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:58:44 2025 by rpki-client