Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
File: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft (raw, json)
Hash identifier: LFuEIh9MPXlmVfq8X8fKIt3Qwl3GZZ/xwq98B1Xrkh4=
Subject key identifier: 11:EF:DF:56:61:8A:13:45:19:9A:DE:E2:99:CC:57:07:36:E9:12:64
Authority key identifier: 15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
Certificate issuer: /CN=15776df6c26a0ff39c43539d02472921b861e4ec
Certificate serial: 019754C76A5E0212965DBB9FC7D36054B2E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
Manifest number: 157F
Signing time: Mon 09 Jun 2025 13:00:44 +0000
Manifest this update: Mon 09 Jun 2025 13:00:44 +0000
Manifest next update: Tue 10 Jun 2025 13:00:44 +0000
Files and hashes: 1: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl (hash: njsiiyegXhyL3dY8cmRNF9YPP6UV2hzsQ3M0aVx/rOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:c7:6a:5e:02:12:96:5d:bb:9f:c7:d3:60:54:b2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15776df6c26a0ff39c43539d02472921b861e4ec
Validity
Not Before: Jun 9 13:00:44 2025 GMT
Not After : Jun 10 13:00:44 2025 GMT
Subject: CN=11efdf56618a1345199adee299cc570736e91264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c7:7e:19:43:42:72:64:f8:63:ae:63:6a:1b:
be:5c:8d:95:fc:7d:58:1a:5b:b8:79:d5:28:c7:bb:
83:c6:11:e2:ee:53:5d:f9:db:78:3b:70:19:50:7a:
3e:9c:14:89:29:bf:54:46:59:f1:11:85:63:8c:55:
3c:fa:ed:e1:18:ab:bd:a2:d6:f2:2f:81:45:e7:98:
6c:20:3a:0a:6f:d7:b7:ad:69:c9:3c:99:74:64:46:
bb:97:7f:6c:b9:c9:82:75:69:04:e6:33:f5:c2:47:
d7:af:31:ad:3f:32:35:94:eb:f5:27:4a:81:dc:33:
58:10:7b:16:1f:a7:85:2c:93:05:36:36:5d:4c:d4:
ea:02:bc:8e:a0:88:78:18:28:35:fa:a5:b2:db:65:
18:e2:fc:dc:6c:92:8a:42:48:1f:46:5a:be:90:de:
fb:9b:91:25:d8:54:19:6e:3a:99:c6:a6:61:60:68:
ad:5c:4b:cc:9d:2c:7e:7d:50:cf:61:e1:45:12:2f:
fe:0c:21:53:2f:bc:63:db:dc:0a:c4:c4:b1:ec:a1:
0e:26:0d:14:a2:7a:71:12:60:ba:36:c2:0a:10:df:
88:e6:f5:9e:0c:97:22:04:c0:ef:1e:8d:d9:ff:3e:
9a:8b:9a:57:67:49:f3:af:07:b5:0c:85:25:4e:68:
44:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EF:DF:56:61:8A:13:45:19:9A:DE:E2:99:CC:57:07:36:E9:12:64
X509v3 Authority Key Identifier:
keyid:15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:40:15:0d:4b:7f:e7:07:ac:f3:93:0d:5e:6f:e6:be:46:1a:
ab:cd:9f:56:f0:9c:0d:16:b0:01:46:d8:25:16:e1:68:8c:86:
59:e3:52:81:69:4e:5f:25:95:90:ed:71:87:13:6b:58:9c:94:
32:a6:f7:c5:3a:7b:fa:c6:96:be:5d:1a:c4:83:0f:42:0a:21:
6d:d1:a6:48:eb:57:25:42:27:86:ad:e6:01:ef:da:e2:ca:3e:
24:23:77:7e:2f:18:0d:87:3c:ca:25:d3:b0:ec:80:96:fd:1d:
3b:ae:24:72:88:bb:c8:60:b3:7d:6f:0e:5d:85:e2:f2:85:33:
82:d1:f8:5b:ee:d6:7b:62:a0:a7:d9:c3:70:76:50:a4:61:98:
89:93:0e:fd:f4:27:2e:53:63:b7:bc:17:2e:92:85:e1:47:5b:
f8:53:68:1e:07:34:0b:bf:c6:cd:af:e6:1a:ff:3e:f1:f9:5b:
23:cc:7d:49:df:4d:dd:ad:50:c8:d0:be:35:87:1f:eb:48:4c:
77:4f:c0:c8:b8:d4:ab:57:f9:24:01:ac:ec:7e:d6:07:41:61:
a8:4a:bf:2b:cf:c0:29:1b:4b:65:75:85:cf:fa:52:4f:8c:b8:
13:27:52:ea:a2:54:56:8f:27:16:c2:e6:4f:9e:00:5b:ba:dc:
88:1b:13:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:28:36 2025 by rpki-client