Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft
File: f1HfHfTohn5B5ef5Lef50foMFU0.mft (raw, json)
Hash identifier: MrLXLaqY6BXotGTdyzKrAx203kIa3vOoN+XBruC2xpk=
Subject key identifier: E2:3D:08:CA:DA:5D:40:08:D4:0F:D9:E7:28:1A:D2:8E:02:2A:D3:B6
Authority key identifier: 7F:51:DF:1D:F4:E8:86:7E:41:E5:E7:F9:2D:E7:F9:D1:FA:0C:15:4D
Certificate issuer: /CN=7f51df1df4e8867e41e5e7f92de7f9d1fa0c154d
Certificate serial: 019750B3BF4E0EE14299F199443031784C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1HfHfTohn5B5ef5Lef50foMFU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft
Manifest number: 0A65
Signing time: Sun 08 Jun 2025 18:00:46 +0000
Manifest this update: Sun 08 Jun 2025 18:00:46 +0000
Manifest next update: Mon 09 Jun 2025 18:00:46 +0000
Files and hashes: 1: f1HfHfTohn5B5ef5Lef50foMFU0.crl (hash: DGMaTYJqsEm/58gtaZgRmjXZXMQip4hzgvvCN4zvyps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1HfHfTohn5B5ef5Lef50foMFU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:bf:4e:0e:e1:42:99:f1:99:44:30:31:78:4c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f51df1df4e8867e41e5e7f92de7f9d1fa0c154d
Validity
Not Before: Jun 8 18:00:46 2025 GMT
Not After : Jun 9 18:00:46 2025 GMT
Subject: CN=e23d08cada5d4008d40fd9e7281ad28e022ad3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4a:eb:9c:fb:ce:66:57:8e:82:d0:05:61:65:
64:06:75:80:53:3d:f8:35:13:76:54:be:9b:af:8f:
2b:27:6c:96:b0:bf:7e:49:df:80:cc:53:45:d3:dc:
98:eb:10:99:f4:46:f4:d7:44:41:80:5f:2e:69:02:
15:57:ec:03:44:98:a2:58:e1:57:82:73:e6:c0:83:
5b:32:02:6f:f1:c2:c6:2e:e6:6c:a5:8a:2b:02:06:
60:2b:00:75:e5:7e:69:49:1c:1a:54:b4:ee:cf:93:
25:4d:92:f4:8d:3f:e3:e1:ba:9e:63:84:31:aa:ae:
17:30:ae:79:f2:b1:1c:67:9f:2e:7e:34:1a:30:36:
de:d5:89:7d:3c:71:95:7f:18:49:d4:cd:e7:e6:40:
9e:17:c5:f9:a8:9a:b0:67:26:ec:c0:23:ba:58:ee:
9f:2b:76:db:34:9f:12:92:17:b0:3d:af:52:00:5c:
c0:81:16:f6:ea:b9:33:db:5f:20:03:55:e8:ef:1c:
94:4a:75:f5:12:d1:e3:32:98:4c:6a:1c:bd:49:cf:
ac:6f:ab:fc:a5:78:ec:17:44:84:62:43:30:2b:5b:
bc:0f:f1:5d:74:0d:f5:23:db:1f:4c:30:44:33:14:
11:8c:71:90:4e:e0:e6:e1:28:ba:13:1d:8d:de:ce:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3D:08:CA:DA:5D:40:08:D4:0F:D9:E7:28:1A:D2:8E:02:2A:D3:B6
X509v3 Authority Key Identifier:
keyid:7F:51:DF:1D:F4:E8:86:7E:41:E5:E7:F9:2D:E7:F9:D1:FA:0C:15:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1HfHfTohn5B5ef5Lef50foMFU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bd:48:3a:33:a2:bc:d6:5c:81:89:2d:d6:01:d6:e7:c9:bd:
f0:4d:84:d5:66:fe:7a:e0:bf:ae:7c:f4:ae:1d:de:86:20:6f:
50:50:63:2c:97:6d:9b:71:ba:ff:cf:77:ea:77:5d:28:40:5a:
a4:a6:e7:37:23:67:2f:75:72:ff:6c:3a:7a:a2:de:ef:46:3c:
12:39:08:42:bc:9d:12:37:c9:e1:8e:22:15:56:17:df:82:00:
46:cb:0f:39:3b:70:e1:27:57:e7:17:a2:f6:2a:7c:e5:b7:ee:
4e:77:72:28:eb:be:73:5b:d7:2a:e3:28:2f:8f:6f:5a:21:e1:
c6:2b:62:b2:b9:6a:2f:a3:4c:08:a9:9a:a0:e4:68:0e:60:1b:
53:3e:85:8c:5a:49:1c:85:77:c2:71:92:5e:e1:39:46:3a:99:
80:a1:e0:11:71:32:23:e9:cd:33:b4:f1:40:42:44:2b:3c:c3:
04:7e:d1:3c:58:f1:6c:cc:2d:73:b4:7c:23:8a:67:a0:8e:53:
03:fe:9d:9e:59:53:9b:34:3e:eb:a5:59:60:f0:21:fe:80:be:
91:33:c2:fc:30:10:cf:d5:0e:a6:fa:09:d1:51:d8:30:0d:db:
e0:a1:3d:96:83:61:fb:bb:37:23:0e:40:91:01:9a:d1:e0:dd:
ea:70:b7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:03:36 2025 by rpki-client