Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
File: n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft (raw, json)
Hash identifier: ee5mD2Bk/yREWvYqbWxFkOQSjwDx48Ddwxkxa3GShxY=
Subject key identifier: C1:6B:3F:E5:EF:C6:93:5D:B2:11:D5:26:D3:B2:7F:A2:C9:01:C5:77
Authority key identifier: 9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
Certificate issuer: /CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
Certificate serial: 0197580081CF1177D520BE20B78D25D348CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
Manifest number: 0503
Signing time: Tue 10 Jun 2025 04:01:57 +0000
Manifest this update: Tue 10 Jun 2025 04:01:57 +0000
Manifest next update: Wed 11 Jun 2025 04:01:57 +0000
Files and hashes: 1: n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl (hash: 0rT5zR+dgqPYjzxA54+B/9Arcy4qIW48GEX/LyCx2qU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:00:81:cf:11:77:d5:20:be:20:b7:8d:25:d3:48:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
Validity
Not Before: Jun 10 04:01:57 2025 GMT
Not After : Jun 11 04:01:57 2025 GMT
Subject: CN=c16b3fe5efc6935db211d526d3b27fa2c901c577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0d:ec:3c:e5:ae:b5:33:b4:4c:89:2c:e9:7a:
4a:c6:17:05:57:a0:f1:c1:60:6e:18:30:b9:a8:af:
e4:4e:25:c9:42:9d:43:ea:09:fa:6f:61:dc:5a:e2:
78:c7:65:1c:48:60:3e:32:6f:23:8a:ae:db:60:fe:
f3:35:a6:03:eb:c9:e5:f0:78:40:ed:27:3f:01:65:
c0:d1:69:05:3a:46:43:45:6e:b0:e2:44:8d:cb:0b:
ea:8a:b1:2f:b8:19:fd:d4:81:ca:05:fb:c0:8c:4c:
c5:df:bd:d3:ad:fe:6d:f1:99:9f:44:07:f1:c7:8e:
22:ec:1c:9f:a6:eb:b7:64:f3:2f:c6:de:f6:09:1a:
f9:d4:67:6c:1e:7c:3a:b8:d7:4e:b2:af:79:84:16:
79:a1:ac:fd:9c:7c:27:69:95:2b:b7:45:b3:9a:2e:
68:5c:f4:4f:f2:86:2c:e0:34:de:30:0d:2e:de:54:
6d:c5:bf:09:4a:9e:d5:00:0b:4b:9d:70:52:0b:16:
1b:3d:f6:67:2c:68:5d:56:79:22:5a:d0:82:e8:27:
77:39:00:d9:b4:4f:21:55:54:02:d9:c6:7f:d4:db:
21:c3:0c:36:d3:41:af:d0:b9:64:b4:c9:06:ed:94:
f6:50:66:51:2c:ec:8e:d6:a9:5c:77:3c:63:11:80:
64:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6B:3F:E5:EF:C6:93:5D:B2:11:D5:26:D3:B2:7F:A2:C9:01:C5:77
X509v3 Authority Key Identifier:
keyid:9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:10:54:25:56:b5:ad:c1:4e:2d:c4:cc:cc:f8:77:dd:76:bf:
f8:6a:46:74:b3:78:d1:7a:88:33:ec:44:8c:36:66:92:1d:4b:
2d:90:c8:0b:17:68:f1:60:15:52:8d:7a:5e:62:15:1b:d7:ab:
a4:86:a4:05:ab:03:21:3d:00:5e:b6:28:ea:43:9b:2e:9d:df:
79:88:fe:7f:1a:8e:41:a3:f1:73:34:bf:02:e3:33:61:32:98:
fc:10:d1:89:ec:fa:0c:27:bc:de:61:f5:af:97:bd:7a:2e:f2:
46:a5:1d:1e:b2:06:e2:06:9f:b9:32:4a:58:bb:55:af:92:b0:
33:b3:fb:ab:2b:22:6b:89:e4:82:2e:35:4c:40:21:fc:a1:72:
b0:6f:a7:a6:e1:f5:5a:40:78:9c:1a:bd:16:44:64:79:bc:f5:
86:91:b6:aa:2b:4b:70:00:3f:6f:16:7e:1c:73:89:99:6e:0d:
9a:fa:6e:76:41:a6:26:93:ac:e6:e6:94:f3:62:63:39:37:41:
6d:57:b9:d5:09:8c:dd:4a:46:5f:23:68:fa:0d:7b:31:53:7f:
53:99:4b:c0:55:a3:2f:6b:08:da:25:50:39:9f:37:cc:a3:39:
35:a2:f4:68:3d:45:85:e3:46:ea:d1:93:5e:bb:f4:45:a0:a0:
d2:c5:f7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:08:57 2025 by rpki-client