Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
File: FzUV9MhBcBT4hBX20EqfcAP8CyI.mft (raw, json)
Hash identifier: NzwMzXbbPeQba6V+fWX+20iZUeVAVCrBc10njsiMpvk=
Subject key identifier: 69:B3:87:96:81:95:71:4C:57:2F:F4:2D:F2:D1:B3:A7:6A:B4:59:B0
Authority key identifier: 17:35:15:F4:C8:41:70:14:F8:84:15:F6:D0:4A:9F:70:03:FC:0B:22
Certificate issuer: /CN=173515f4c8417014f88415f6d04a9f7003fc0b22
Certificate serial: 01974A7AC5ABC8FA2444A7E0161C9E9952EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
Manifest number: 4E
Signing time: Sat 07 Jun 2025 13:00:49 +0000
Manifest this update: Sat 07 Jun 2025 13:00:49 +0000
Manifest next update: Sun 08 Jun 2025 13:00:49 +0000
Files and hashes: 1: FzUV9MhBcBT4hBX20EqfcAP8CyI.crl (hash: mAOSZTrrMpSdquM2iNLxj7JXFn4t8bzXGt9kIQ1vsVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:c5:ab:c8:fa:24:44:a7:e0:16:1c:9e:99:52:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173515f4c8417014f88415f6d04a9f7003fc0b22
Validity
Not Before: Jun 7 13:00:49 2025 GMT
Not After : Jun 8 13:00:49 2025 GMT
Subject: CN=69b387968195714c572ff42df2d1b3a76ab459b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7e:7d:ac:dc:6d:24:f9:87:a0:37:a3:73:96:
3c:9e:dc:9a:96:8c:3a:00:d8:5a:3c:fd:46:e4:19:
24:27:9e:6a:f6:9c:5f:82:3e:ea:c4:e4:67:81:d2:
9c:29:56:ab:26:2b:d0:9f:87:7b:d0:71:59:b1:aa:
54:9d:6e:0e:71:25:4a:73:99:ea:0f:c4:76:ba:0b:
ce:bc:d3:7d:4a:5a:11:b2:4f:8e:66:d7:db:fc:25:
e1:a5:e9:b1:b6:61:ff:08:87:7b:f6:17:a7:c7:d2:
5a:89:63:88:e4:76:6a:55:d3:1d:ea:dd:6d:1b:32:
af:3c:de:f0:43:16:10:34:54:5a:cd:51:4e:00:08:
74:6b:12:79:87:18:91:35:ef:21:26:76:80:78:8a:
21:a7:62:64:80:4c:b1:c6:b5:fe:03:72:4b:59:49:
c3:a2:10:b6:d4:7d:a9:b8:66:f4:09:8e:ac:0d:ef:
b9:d7:99:45:6f:d7:09:29:6f:4d:fc:5e:d2:e6:93:
44:52:f5:dd:b4:a9:66:fc:80:f4:ce:25:ca:07:5b:
76:33:39:ec:21:2a:c0:e3:ed:6a:5c:69:19:73:4f:
d7:00:ff:19:9b:a5:0f:cc:27:b3:29:61:d8:9d:7c:
26:65:2b:f8:48:9e:96:76:b3:92:12:3b:42:27:92:
d1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B3:87:96:81:95:71:4C:57:2F:F4:2D:F2:D1:B3:A7:6A:B4:59:B0
X509v3 Authority Key Identifier:
keyid:17:35:15:F4:C8:41:70:14:F8:84:15:F6:D0:4A:9F:70:03:FC:0B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c3:dd:eb:ec:15:b6:9b:01:ea:33:43:3d:0a:51:e7:f1:7a:
52:f1:55:20:a9:42:21:ad:da:e6:21:8d:1b:c9:36:4a:0e:31:
4a:1b:b8:a6:12:c7:5c:b9:13:f4:a4:bf:2f:94:a1:51:db:40:
9b:10:eb:df:41:e5:9d:06:b3:10:b1:79:92:f4:2b:47:73:d3:
08:b2:3a:2f:d4:74:77:a8:28:a7:2c:49:8a:c3:a9:30:98:81:
b3:37:a6:9d:0b:31:df:23:9c:35:00:43:25:43:dd:8b:de:26:
ae:54:21:f0:ca:47:94:60:b8:20:26:30:ce:e1:62:d4:11:ea:
27:60:1a:e2:d4:66:fa:45:da:ef:cc:c1:e8:67:8e:6a:34:74:
df:4d:a9:d8:31:f0:19:80:63:1b:60:e9:04:1f:1e:f1:87:59:
c5:54:94:83:0f:1b:4f:12:4e:40:81:58:38:80:ef:6b:3a:b9:
19:a6:be:ad:cb:64:b1:90:5b:f0:c8:ac:9f:b5:a2:75:9b:9b:
fe:dc:0c:bd:06:2a:a9:24:2f:6c:a3:1f:fd:48:33:5b:0d:82:
3f:3a:90:58:3b:b9:61:52:ba:f6:93:95:e9:ce:b3:d7:85:62:
13:fe:ca:12:c8:b8:2c:18:5d:c4:8c:81:1f:65:2f:de:e7:8d:
0d:6f:32:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:14 2025 by rpki-client