Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
File: F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft (raw, json)
Hash identifier: d+R2414BGXle8pWx5YeB+AFYH/lU4POn3c/2r0FY6bs=
Subject key identifier: B3:5D:22:AD:41:22:B0:CF:77:6C:98:E1:ED:BE:D7:5F:D0:DE:64:16
Authority key identifier: 17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
Certificate issuer: /CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Certificate serial: 019751219CC5B09059EA5B24E97EA8CAAFD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
Manifest number: 084F
Signing time: Sun 08 Jun 2025 20:00:46 +0000
Manifest this update: Sun 08 Jun 2025 20:00:46 +0000
Manifest next update: Mon 09 Jun 2025 20:00:46 +0000
Files and hashes: 1: F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl (hash: kj01F1cFeJO6l0yC4sW9NjKmXu9vALQtNd7pdHfFHwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:9c:c5:b0:90:59:ea:5b:24:e9:7e:a8:ca:af:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Validity
Not Before: Jun 8 20:00:46 2025 GMT
Not After : Jun 9 20:00:46 2025 GMT
Subject: CN=b35d22ad4122b0cf776c98e1edbed75fd0de6416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:62:ee:1e:3e:0f:ad:58:64:a8:60:be:33:
4c:45:cc:6b:53:ec:79:06:01:11:91:ba:54:77:46:
b9:c4:cd:22:ea:de:e4:25:51:13:36:7b:cd:7d:c3:
f0:f0:1d:eb:2d:58:c2:6a:a4:a7:17:0b:39:37:75:
cb:69:42:a0:2e:4c:22:cf:94:37:36:c6:5b:07:22:
f5:e3:1e:83:3f:80:f9:e8:41:a3:b5:30:a0:1f:a1:
a9:22:79:68:02:36:59:0b:27:15:02:4b:0a:09:d1:
bb:40:17:20:48:8e:32:f0:6d:17:9f:6d:64:14:bc:
08:56:17:69:a2:ad:54:60:e2:39:a4:eb:53:5b:34:
75:2e:f6:af:34:4d:54:a4:a1:33:70:b0:65:e4:aa:
29:2e:20:11:20:77:60:b1:cb:19:7f:66:cc:6d:1b:
b9:0d:f6:2b:ca:f7:8e:1f:3e:1c:2c:7b:eb:dd:69:
4b:98:69:62:fe:c9:8b:56:a9:fd:93:55:24:75:26:
73:fe:2e:40:6b:2e:ea:e0:1b:51:e6:99:56:7a:31:
ae:e1:29:9e:46:df:a7:e6:6b:f7:97:7f:5e:da:0a:
87:22:f1:64:d2:6f:c8:84:00:f9:71:da:8c:ed:2c:
f8:56:2c:06:8e:fe:a1:89:73:87:be:4d:c8:48:20:
6d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5D:22:AD:41:22:B0:CF:77:6C:98:E1:ED:BE:D7:5F:D0:DE:64:16
X509v3 Authority Key Identifier:
keyid:17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:59:33:7f:97:6d:8c:86:c0:80:62:59:1a:62:e3:b7:79:1a:
4d:ca:56:71:bf:b5:ba:62:76:5c:14:79:5f:6c:09:0b:d3:db:
77:e4:1a:41:f5:e9:e8:e8:9f:a5:07:49:de:b1:01:05:c6:ea:
97:3c:43:46:7a:a2:2e:59:a0:d3:0f:f8:b9:54:24:aa:29:bd:
30:58:75:c9:ce:fa:ba:f4:ba:a6:c3:ab:37:1c:96:89:72:c4:
d6:c4:8c:1f:7f:52:fd:eb:71:94:48:72:f4:7a:2b:f1:d7:50:
32:dd:bc:e6:91:5c:70:02:fc:0a:10:58:02:82:4d:df:55:5c:
35:1e:59:5b:c0:a2:12:a8:d7:10:b6:a9:11:bc:92:ba:d4:3a:
4b:9f:a6:22:64:5c:24:e3:96:4e:c3:69:99:22:1b:0a:85:20:
d7:3c:81:52:73:69:d2:f3:66:96:1e:82:ef:fa:a2:e7:b1:bf:
d1:a3:b9:8f:1d:b5:f1:a1:75:58:ae:dc:d5:0a:ac:c9:42:d6:
f6:bd:69:04:f8:32:89:92:38:0a:ea:42:c8:98:48:62:a0:91:
40:84:8c:71:c1:e5:b2:e6:46:1b:5f:a5:63:e4:66:e5:e7:0a:
e1:4b:45:31:04:48:71:54:51:ce:f8:8d:59:0e:72:e3:d8:c6:
1f:a6:a8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:25:24 2025 by rpki-client