Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
File: fPl3gtbyAqcBg2capjDHOrozMH4.mft (raw, json)
Hash identifier: yZ+7jYh+x4FQ1sC1Ks4V55/jDCR6K0cCVtZA3ASaF5Y=
Subject key identifier: 60:D7:82:C9:0A:A2:A2:E0:88:FD:09:4D:8F:BB:35:98:B9:FF:E4:79
Authority key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
Certificate issuer: /CN=7cf97782d6f202a70183671aa630c73aba33307e
Certificate serial: 01974EC5CE170DD37CFBD67B30E058F86147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 09:01:15 +0000
Manifest this update: Sun 08 Jun 2025 09:01:15 +0000
Manifest next update: Mon 09 Jun 2025 09:01:15 +0000
Files and hashes: 1: fPl3gtbyAqcBg2capjDHOrozMH4.crl (hash: NI9YiJYSD6NSCvrJ36AKzoM16uYDZYfRGFo6U/Zz348=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:ce:17:0d:d3:7c:fb:d6:7b:30:e0:58:f8:61:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cf97782d6f202a70183671aa630c73aba33307e
Validity
Not Before: Jun 8 09:01:15 2025 GMT
Not After : Jun 9 09:01:15 2025 GMT
Subject: CN=60d782c90aa2a2e088fd094d8fbb3598b9ffe479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:0a:91:24:b9:ac:a9:bc:c8:39:ef:10:a6:
2f:c6:07:8c:da:ca:f6:c6:61:68:62:ea:e1:7c:fd:
f8:36:1d:70:1b:43:5b:95:f0:42:1f:f7:77:58:39:
86:5b:8b:b1:4f:c3:7b:11:8f:46:7a:a5:7c:78:95:
38:8d:be:de:7a:34:ee:c9:22:fe:7a:d6:59:7e:51:
6e:9f:a3:24:4e:f7:28:c1:dd:50:68:6f:fc:07:94:
34:36:18:16:dd:f8:ec:fa:e0:52:d2:2b:45:02:81:
69:65:92:56:8e:21:00:ab:32:d5:ce:e7:29:9c:02:
6c:e4:2e:f0:51:d5:9f:40:33:61:ca:97:ea:8f:06:
61:2c:a6:e1:93:a5:ba:14:46:c4:3a:fb:8b:70:d7:
6a:93:c3:80:8c:a8:4c:db:2e:2d:eb:bb:b8:24:2e:
f9:b8:cc:d7:70:49:2e:f1:61:4d:bb:24:cd:5c:6a:
4d:f4:3a:b7:15:58:b4:c4:aa:a4:b7:16:8d:c0:f9:
13:f3:2e:b7:93:7b:e3:70:7b:9e:67:1e:0a:10:95:
aa:a5:0a:b0:fa:4d:aa:4d:26:4f:37:68:db:6e:f6:
f0:f1:35:cd:eb:00:91:34:94:15:d5:71:38:72:6a:
86:f3:94:fc:05:fc:0d:d7:79:e5:67:31:a7:eb:ad:
98:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D7:82:C9:0A:A2:A2:E0:88:FD:09:4D:8F:BB:35:98:B9:FF:E4:79
X509v3 Authority Key Identifier:
keyid:7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:db:0e:e7:43:08:40:21:0e:78:7d:bc:80:ac:13:e6:62:7e:
8f:8b:c1:f7:4f:38:0a:43:a0:0f:48:25:01:92:19:1a:69:8e:
4c:e5:e1:1d:c7:b0:83:1f:b8:5e:6d:d9:5d:33:d0:61:d2:9e:
51:ed:2b:9d:49:e3:54:65:e9:27:7b:26:6e:0b:e5:5f:91:98:
ee:5e:b6:f8:e9:a0:5a:da:0c:bb:7a:87:d4:7c:49:84:2c:14:
b5:38:1a:dd:dd:26:74:e7:a3:a9:5a:8f:7d:d8:06:2d:0a:31:
41:88:a9:23:fa:8b:dd:4d:4e:09:22:47:99:37:d9:00:bb:95:
25:91:5f:8c:1b:c9:7a:c0:28:05:2f:49:ed:8c:19:4c:d7:b6:
9c:26:3e:18:c5:69:3f:c3:99:08:20:9c:6e:7d:32:f9:99:da:
9c:4f:92:4a:24:ab:db:3a:08:3a:25:c3:99:b7:d4:35:dc:c0:
d2:ad:ad:48:84:16:3d:b5:b4:58:18:85:9c:7c:85:d4:63:53:
c1:72:d7:b4:26:bc:22:c8:62:69:cf:e3:37:82:f8:0a:73:dd:
cf:ca:fd:28:be:8c:25:26:82:10:98:a1:45:06:87:8b:10:41:
fa:98:a8:12:5d:5b:f4:01:ac:c4:7c:9a:09:c4:31:ff:dd:0f:
65:74:4d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:15:11 2025 by rpki-client