Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
File: fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft (raw, json)
Hash identifier: SBcufnwAy+FGGiSG7P6Vcy/WcuWxD4CLEAiQUxdLnbo=
Subject key identifier: AF:87:40:72:4C:80:80:96:8B:DE:B7:03:23:C0:87:69:0A:57:D6:1B
Authority key identifier: 7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
Certificate issuer: /CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Certificate serial: 019776E61C0981875FB8C789CC52100FB6DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
Manifest number: 08C6
Signing time: Mon 16 Jun 2025 04:01:21 +0000
Manifest this update: Mon 16 Jun 2025 04:01:21 +0000
Manifest next update: Tue 17 Jun 2025 04:01:21 +0000
Files and hashes: 1: fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl (hash: ieoT29E1lN9qKU80dpAWWC0eeR5u6F+vDmXpCbFFjd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e6:1c:09:81:87:5f:b8:c7:89:cc:52:10:0f:b6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Validity
Not Before: Jun 16 04:01:21 2025 GMT
Not After : Jun 17 04:01:21 2025 GMT
Subject: CN=af8740724c8080968bdeb70323c087690a57d61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c7:4c:9c:01:71:12:fe:20:da:59:a8:2a:b3:
67:18:1f:2b:13:7e:13:c0:0d:37:ec:08:e0:cf:04:
5e:38:29:37:1f:f5:40:c0:8d:f7:7c:0e:56:74:89:
11:20:61:96:09:96:96:90:49:23:e6:00:e0:d7:91:
cd:d8:60:36:f5:43:c6:18:3c:d5:05:d6:47:e4:94:
cf:cf:62:53:23:6c:08:20:a6:14:85:e2:da:d6:d6:
e3:f3:9b:5b:87:50:12:53:09:ea:a8:6d:40:45:b1:
92:2a:2b:33:cf:71:22:7e:34:fa:4f:30:f2:14:33:
e1:ae:8f:ec:09:f2:34:ee:fb:59:33:29:be:9d:1c:
ab:6e:43:f3:f7:9d:2e:69:43:48:d4:16:50:bb:2c:
a7:0f:85:f2:b8:a6:b6:63:cc:8e:c6:2d:9a:1f:b7:
68:cc:dd:c3:ae:2f:1a:20:7a:c5:d3:2d:4a:89:96:
ab:f1:75:58:90:40:2e:ac:38:62:7f:d9:9e:2f:6d:
38:a0:05:30:66:9c:8f:9d:f6:93:c8:21:e1:f7:7e:
1b:c4:f5:f5:b5:ee:c9:c6:28:91:88:0c:1d:b1:c4:
c2:04:54:d2:41:04:1a:c3:0d:7d:d9:1f:8e:b1:ba:
ab:31:61:40:9b:76:3c:cf:15:f3:3c:76:a4:4b:32:
4d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:87:40:72:4C:80:80:96:8B:DE:B7:03:23:C0:87:69:0A:57:D6:1B
X509v3 Authority Key Identifier:
keyid:7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e9:4c:dd:83:32:48:ef:f4:21:22:0f:9f:2f:65:43:e8:ae:
e7:ce:f6:f6:09:63:68:5a:ab:90:4f:a2:cc:fb:dc:87:51:36:
e9:7d:84:01:ae:d0:9f:ea:10:8b:fb:c8:26:c6:cd:ee:a1:ed:
f7:9a:81:f7:05:33:a0:6e:c9:8a:8d:2e:d3:1c:54:12:05:2f:
0c:3b:b4:90:5d:84:49:6e:be:2b:b2:44:77:33:06:f7:8c:ff:
11:bc:b7:bf:31:45:f4:69:04:18:49:8c:a2:8f:23:18:e4:46:
fd:a3:1a:3b:6e:e1:88:ab:89:2c:79:62:76:fa:0a:4f:91:13:
95:f8:f6:b3:18:ee:03:00:73:77:44:4e:c9:0d:9f:10:a0:67:
f9:8f:2f:61:37:99:0f:1a:c3:77:55:fe:96:9f:2f:8c:9e:4a:
d4:1e:7c:a3:a0:4d:a9:44:f3:de:65:e1:d8:bb:56:60:cd:e3:
f0:08:24:6e:4c:1e:93:29:64:d4:b9:bc:73:07:f4:9b:79:df:
8b:9d:b3:79:e1:03:ca:cd:02:20:08:df:07:e1:74:f7:d7:0b:
fa:a2:17:30:f6:89:45:61:4e:a4:fe:ca:18:9a:76:31:58:e6:
81:bd:d3:55:0f:fe:5d:58:08:36:95:b1:23:27:39:40:a4:67:
e3:58:8b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:09:23 2025 by rpki-client