Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
File: fQ9TBOHZKWjpheNo6E833TZw71w.mft (raw, json)
Hash identifier: l76kC9CJdE4ngjBpHzO2Pmpqa88sdpZBCuyxH+O010s=
Subject key identifier: 50:38:D7:04:F0:98:E5:39:DB:78:C4:42:D7:E9:46:C4:C8:8E:67:AA
Authority key identifier: 7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C
Certificate issuer: /CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
Certificate serial: 01974E57313DF881E2CA27046A222EE131CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
Manifest number: 0CC3
Signing time: Sun 08 Jun 2025 07:00:26 +0000
Manifest this update: Sun 08 Jun 2025 07:00:26 +0000
Manifest next update: Mon 09 Jun 2025 07:00:26 +0000
Files and hashes: 1: fQ9TBOHZKWjpheNo6E833TZw71w.crl (hash: hG74AWvWP5SM1hxlJ7eRtPvplMsK6lKIZO1LOLiGk8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:31:3d:f8:81:e2:ca:27:04:6a:22:2e:e1:31:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
Validity
Not Before: Jun 8 07:00:26 2025 GMT
Not After : Jun 9 07:00:26 2025 GMT
Subject: CN=5038d704f098e539db78c442d7e946c4c88e67aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:26:6c:59:ef:48:d4:f6:be:ca:4d:ca:5f:a9:
b4:38:28:4c:8c:18:cc:14:2c:82:de:36:3e:b5:bc:
e4:a3:b2:ba:3a:98:15:fb:32:f4:59:39:10:45:c0:
1f:63:f7:11:c2:2c:15:47:02:64:44:40:9c:99:ed:
7a:d0:e6:77:ba:a1:a3:0c:f4:da:2e:68:be:65:4d:
29:02:e0:92:16:04:92:e5:6d:a0:3a:ce:35:6c:64:
cf:67:a0:a2:16:08:30:9b:37:d2:06:bf:8d:cb:31:
80:3b:e1:66:18:df:cb:02:13:bd:6f:02:a3:5e:2d:
af:04:3a:54:0b:91:41:58:9e:be:c0:80:2b:b0:94:
71:56:5a:55:97:c1:29:3b:88:47:f7:15:dc:0c:af:
73:20:55:c8:c9:37:83:f5:16:34:df:7a:dc:40:c8:
61:da:5e:57:2e:66:c8:70:f7:a4:ef:44:fd:2c:4c:
f3:a7:d8:19:13:ff:a9:ef:43:38:eb:42:68:51:70:
aa:2e:8d:08:5f:94:88:e4:35:68:76:be:46:0f:3a:
2c:c7:2d:47:94:e9:6d:e8:cd:88:65:06:c8:2a:cb:
bc:a6:5b:01:89:0c:70:9f:eb:2a:ea:27:5a:df:cd:
c6:7d:59:bc:ef:40:45:e0:52:e7:82:5e:2e:ed:62:
51:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:38:D7:04:F0:98:E5:39:DB:78:C4:42:D7:E9:46:C4:C8:8E:67:AA
X509v3 Authority Key Identifier:
keyid:7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e0:e4:6c:d8:e3:2c:65:5f:52:3d:54:0e:56:b9:d8:ed:af:
02:f5:1a:c2:e8:07:c6:0d:f6:68:e1:54:cc:30:0e:e4:d1:ab:
05:d1:6f:e4:98:a1:db:39:da:2f:4b:47:ab:a8:01:e1:b4:e3:
d4:33:f0:ee:06:77:19:cf:02:8d:3a:7c:75:1d:ab:fc:98:78:
bd:f1:4a:37:35:c8:a7:ef:d7:3f:3c:37:85:5b:4b:a1:e4:2a:
12:86:fa:cc:81:f2:43:3e:ca:5f:6c:68:2b:d0:35:eb:86:00:
48:82:b7:8d:d9:f5:a6:95:d5:84:59:4e:65:b5:5c:5f:17:f1:
bb:64:0e:85:50:ac:a4:eb:f0:4d:0c:fb:aa:8d:5d:36:3a:a2:
a9:76:9d:5e:8b:33:2b:c2:4b:aa:3d:1b:de:5a:6c:67:3a:31:
88:7b:2b:fb:68:b1:92:03:55:41:d6:cf:15:ed:c1:9b:c5:5d:
77:6e:b5:9b:3f:b0:ec:bf:11:12:24:50:47:ba:f3:07:da:31:
03:8f:8e:08:1b:12:8a:22:43:91:d4:aa:e3:4b:4d:17:e8:8f:
df:f1:e9:c2:a6:e8:91:f7:c7:4d:60:d8:9d:5b:e6:a9:66:b5:
2b:c1:67:d9:12:e5:9d:ac:e3:76:f4:d7:5f:5c:7b:d9:8a:f6:
7c:d2:f3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:47:36 2025 by rpki-client