Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json)
Hash identifier: p6sB3asMY8YYstTsk3iAISiA/l8DOCdkestCxIgsUOQ=
Subject key identifier: FA:AB:EA:6B:D2:49:4C:35:9C:CB:DB:FB:1C:66:F1:F4:94:3F:A6:87
Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8
Certificate serial: 01974AE8A179EE70E6D5298DFB950745CA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 15:00:49 +0000
Manifest this update: Sat 07 Jun 2025 15:00:49 +0000
Manifest next update: Sun 08 Jun 2025 15:00:49 +0000
Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: x4lOnTE5tUfnedld8CvdCpVgo5xPZCRwg/COiFSS66U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:a1:79:ee:70:e6:d5:29:8d:fb:95:07:45:ca:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8
Validity
Not Before: Jun 7 15:00:49 2025 GMT
Not After : Jun 8 15:00:49 2025 GMT
Subject: CN=faabea6bd2494c359ccbdbfb1c66f1f4943fa687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:71:a6:5c:09:e8:e5:1b:ff:fd:fb:6d:e4:c5:
7c:a0:3a:04:7f:dc:0a:59:13:70:28:d2:64:6b:9d:
5e:2c:14:35:cc:26:81:94:1a:99:ce:7a:45:6e:d2:
22:70:e5:61:fa:79:d9:bf:46:4e:a4:54:0c:f2:62:
98:81:50:fe:3a:fe:89:4a:95:79:9f:4f:5e:04:bf:
fd:08:7f:8e:4c:62:31:d6:4f:8c:19:44:2e:59:2a:
a6:00:bf:53:b5:c7:72:20:a7:fd:9a:1c:bb:64:f6:
0d:6f:f2:61:ef:af:78:72:a9:be:af:1c:ea:e3:55:
55:5b:cf:c6:8a:90:74:e3:83:a0:98:0a:5a:b4:01:
4e:0e:8d:64:ff:e1:73:24:4f:cb:66:88:0c:f8:75:
c3:94:5b:ce:2d:62:f6:0f:2a:b1:51:b5:96:40:d5:
2b:27:0f:ea:67:44:a6:91:8b:37:c2:f6:10:95:83:
ca:f8:24:f0:ff:79:06:a3:6a:0e:af:e2:96:a0:73:
1a:07:04:d6:6e:b2:f4:65:b0:42:df:0b:a2:85:5e:
57:73:b2:43:1e:4f:81:00:47:71:b3:67:81:c2:22:
63:8c:77:cf:a6:e4:13:81:db:d8:89:29:c0:db:78:
2c:8e:24:e4:39:ca:21:7e:1b:e4:8b:3c:e7:ae:fb:
8b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AB:EA:6B:D2:49:4C:35:9C:CB:DB:FB:1C:66:F1:F4:94:3F:A6:87
X509v3 Authority Key Identifier:
keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:df:6d:e0:71:07:c3:56:58:b8:64:5a:74:51:48:38:83:24:
54:e0:e2:a1:c0:4b:02:71:96:50:00:27:c7:c9:70:7a:1a:eb:
3b:48:f4:e1:be:34:03:9f:e5:b6:ea:b4:1b:5e:9e:ca:09:91:
df:10:68:4b:67:09:5f:44:9d:8b:d3:ec:76:3a:39:3c:8d:9b:
0f:f1:c3:8a:ed:59:bd:b2:a0:fd:c5:d4:c6:c4:91:57:7a:3a:
0c:27:0c:16:02:f4:b3:6d:d8:a7:35:76:49:73:9b:11:02:a9:
0a:b4:23:61:46:01:cb:c2:77:85:e1:6c:fd:ce:81:38:80:0f:
1a:c3:56:f6:00:89:31:2f:07:a1:5e:b6:8e:ef:4b:ae:fd:dd:
7c:18:68:4d:79:84:22:0e:3f:a3:85:66:48:3f:78:4b:54:75:
4c:df:0e:1b:10:c0:12:9b:51:a0:43:5b:04:e6:e5:fc:09:ed:
0d:ae:93:49:d8:dd:e3:93:f6:b4:28:ed:9c:50:f1:c8:77:a1:
cc:0b:09:1e:f6:dc:02:aa:a8:c3:43:a1:b9:f4:e0:f2:72:f6:
77:84:74:37:da:d3:c9:9c:4d:81:89:56:e2:47:c5:6d:49:9d:
e9:39:e7:1b:68:21:eb:da:48:96:0a:2f:a4:02:c4:26:90:4c:
ac:b9:26:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:15:38 2025 by rpki-client