Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
File: fHvscgXfiNB3CG9Kj7WuznXLtmE.mft (raw, json)
Hash identifier: qql5ehwctxmbc/Ac8rZGu4jcDG+Ho8J0Ps+bnw1IGVo=
Subject key identifier: 78:B5:DD:50:F6:0E:77:BC:6C:EA:D9:A7:1F:87:B9:44:BC:D2:E1:D9
Authority key identifier: 7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
Certificate issuer: /CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Certificate serial: 01975CB85373CE88D1D8DC679B1B41DBA51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
Manifest number: 13DB
Signing time: Wed 11 Jun 2025 02:01:13 +0000
Manifest this update: Wed 11 Jun 2025 02:01:13 +0000
Manifest next update: Thu 12 Jun 2025 02:01:13 +0000
Files and hashes: 1: fHvscgXfiNB3CG9Kj7WuznXLtmE.crl (hash: y3m4LDBGnoEycOpmrmYMDzGIWmO8PEWcY0dOYbBY9pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:b8:53:73:ce:88:d1:d8:dc:67:9b:1b:41:db:a5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Validity
Not Before: Jun 11 02:01:13 2025 GMT
Not After : Jun 12 02:01:13 2025 GMT
Subject: CN=78b5dd50f60e77bc6cead9a71f87b944bcd2e1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ae:3c:71:28:98:e9:2a:68:6e:73:c4:8d:78:
a2:c6:db:cb:a9:23:0f:1b:05:50:58:d4:74:75:11:
3b:38:ea:d2:7d:25:43:cc:f3:0b:ee:69:19:d1:fa:
85:8d:45:96:46:db:24:2e:56:5e:14:36:a5:8f:70:
f9:86:9c:ca:f2:10:81:f9:c3:17:9d:df:f5:cf:c6:
4a:f3:18:43:8b:46:cb:f8:6f:8a:2b:79:c3:3d:8e:
e2:d6:46:b5:47:7a:80:21:19:88:99:82:0f:0e:dc:
e0:93:3e:55:c7:e6:b0:9e:48:e2:0b:d9:7f:b3:a3:
e2:6f:41:25:8b:cf:4e:4b:b7:99:5c:5e:fc:41:0a:
18:53:e8:fe:af:d2:a1:27:fb:7d:ba:ec:0b:54:18:
ab:07:22:16:6f:98:9b:f0:90:0d:8f:c5:53:4d:88:
fd:0a:b5:9e:fd:e6:ce:43:1e:b2:fd:f8:43:d5:34:
55:54:11:ae:f7:2d:5a:b1:be:05:45:34:8d:2e:d0:
25:e5:de:ff:bd:74:09:83:95:40:2c:2b:e2:9e:14:
99:74:c9:09:74:81:ad:41:59:9a:86:22:90:d1:aa:
f4:4d:74:04:c0:64:3f:35:22:ad:89:d7:fd:f7:5a:
46:d3:f2:18:c9:1c:46:0e:0e:9b:97:c2:39:57:93:
14:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B5:DD:50:F6:0E:77:BC:6C:EA:D9:A7:1F:87:B9:44:BC:D2:E1:D9
X509v3 Authority Key Identifier:
keyid:7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8a:6a:76:ed:58:95:07:e7:15:9d:b1:0c:ba:50:63:12:d8:
e6:45:a6:25:ca:51:65:a0:9b:66:e8:c6:64:11:2d:e6:e4:37:
8e:29:57:5f:70:f4:90:69:80:5c:4f:39:69:06:fa:8f:9b:9b:
10:37:f0:cb:9e:0c:75:47:9f:94:c1:fc:dd:0a:89:36:7b:c8:
d1:90:01:31:60:e5:c4:f4:07:fe:ab:28:5c:5b:40:e0:a9:e4:
bd:3a:23:22:95:8b:1d:be:2d:01:38:02:41:ac:fe:1c:c8:b7:
8c:5f:ae:a4:2d:29:05:b8:af:21:32:1f:9b:83:95:ae:4f:4b:
c9:c4:c0:70:a9:0c:b2:78:a0:dd:87:ae:11:e1:01:9f:fa:c9:
f9:ed:13:ab:46:2f:17:3a:26:3b:29:9b:05:37:3a:44:eb:b6:
26:e2:00:d5:f4:57:8c:c1:af:a2:79:c2:c9:ef:bd:ec:19:e2:
32:1d:1a:6c:46:5f:23:e6:bd:1b:91:fe:ef:6f:65:47:9b:68:
82:e6:60:8f:35:42:b3:f4:35:c1:fd:2b:0c:91:d9:b9:84:46:
19:68:c8:a5:10:53:80:ea:69:70:79:5d:ac:cd:9c:c5:15:ee:
aa:b2:7d:11:46:38:75:64:b8:e3:f4:25:77:ee:90:4a:f4:1b:
47:24:60:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:37:47 2025 by rpki-client