Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
File: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft (raw, json)
Hash identifier: sl3gagis5wZc/VkVgm3CkH4Ot4pDbxKRoIjiqSfokoc=
Subject key identifier: BB:28:4C:A3:D5:F3:23:D8:EA:5C:45:6A:8A:36:04:98:57:BB:42:E8
Authority key identifier: 7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24
Certificate issuer: /CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
Certificate serial: 019768BBBC45C5BFAA86FDC712FB7A339C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
Manifest number: 0EB7
Signing time: Fri 13 Jun 2025 10:00:23 +0000
Manifest this update: Fri 13 Jun 2025 10:00:23 +0000
Manifest next update: Sat 14 Jun 2025 10:00:23 +0000
Files and hashes: 1: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl (hash: J4Ao/KWiYP0qgs8EiL5o5wEFCElotkuxFdqDwcDO7Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:bc:45:c5:bf:aa:86:fd:c7:12:fb:7a:33:9c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
Validity
Not Before: Jun 13 10:00:23 2025 GMT
Not After : Jun 14 10:00:23 2025 GMT
Subject: CN=bb284ca3d5f323d8ea5c456a8a36049857bb42e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a9:77:85:7f:a7:46:79:53:99:64:39:e1:59:
57:4a:37:d6:75:6a:c2:68:ae:39:fb:17:b5:f4:a3:
cb:d0:07:16:58:89:87:74:b0:00:b7:42:30:2f:20:
1b:d3:ef:1d:91:21:2c:4b:8b:80:d3:f0:8e:5b:1c:
0a:ba:e5:33:1e:32:c5:32:64:cf:c6:df:e2:b1:e0:
95:9e:42:41:b0:ba:02:5b:b1:01:7b:2b:0d:2b:09:
f1:5f:d3:d2:54:d2:00:1f:03:7d:7b:48:3a:bd:bd:
be:48:9f:6e:48:d2:ab:af:5d:ce:16:03:e1:51:93:
b5:99:45:17:68:3a:cb:d2:83:64:09:ea:f0:97:c4:
1c:c8:b1:a8:06:c4:12:da:cd:f5:5e:3d:8e:af:3f:
1f:ec:33:0d:61:91:1c:af:ad:fe:86:ad:f5:27:cf:
d9:b1:f1:f5:37:f5:64:96:cb:98:6e:c5:9d:a6:10:
72:5d:13:b3:dc:aa:a2:76:1a:1c:96:c3:b4:90:0f:
50:54:eb:41:4c:b9:47:3e:1f:ef:d6:1b:71:ee:43:
73:fd:82:f6:6c:98:3c:25:58:02:e0:c1:c6:95:5e:
41:2c:71:70:49:03:48:bc:87:cc:03:22:f2:1f:d4:
3d:e7:7e:eb:85:40:8e:e3:5c:52:11:5f:6b:44:66:
16:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:28:4C:A3:D5:F3:23:D8:EA:5C:45:6A:8A:36:04:98:57:BB:42:E8
X509v3 Authority Key Identifier:
keyid:7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ac:af:3c:e9:dc:dc:25:83:93:f1:36:0e:8d:5d:65:af:1b:
a4:6f:b5:52:db:f5:77:39:ea:23:87:9e:32:ec:5d:4d:21:e1:
d7:3e:61:2e:65:64:45:fc:7e:9c:e2:3b:5a:4b:c3:9c:db:74:
90:eb:6c:49:0d:5c:6f:fa:08:50:f1:18:12:6d:05:7d:69:61:
db:0f:b9:71:83:fb:7e:03:31:6a:e2:9f:7e:a5:4e:83:6c:80:
3a:8f:0e:15:59:ca:cb:f5:e3:8d:61:28:12:a8:3c:f3:ba:95:
56:8a:27:04:2d:74:4a:58:38:47:e4:d2:f4:c1:d2:c5:13:7c:
e3:ee:f4:31:e8:b4:7c:95:c2:56:fe:2f:f8:d6:ee:ce:85:67:
82:fe:0b:65:35:f8:07:ee:ef:55:9e:78:6d:46:ce:9b:4c:05:
a7:11:d8:b6:e0:da:bb:5d:35:a5:81:a6:c8:08:fc:46:9a:bf:
9f:bb:c3:a1:62:e6:48:46:f5:d9:c6:ba:9c:9f:50:77:4c:3c:
18:a7:1b:e5:74:1b:d4:01:d7:dc:19:77:f8:b7:00:4c:b1:c6:
bf:68:2a:00:35:c1:8b:75:32:37:34:1e:6d:8b:d9:9b:5e:b6:
ec:89:b7:db:5d:bf:d6:36:db:87:ab:f5:ab:3f:7f:65:af:e7:
17:5d:23:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdou7xFxb+qhv3HEvt6M5w3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNDVmYmZmZDYyZmUyNGUyNjMzOTE5M2FkOWE2YzMxOGI1
ZGJiMjQwHhcNMjUwNjEzMTAwMDIzWhcNMjUwNjE0MTAwMDIzWjAzMTEwLwYDVQQD
EyhiYjI4NGNhM2Q1ZjMyM2Q4ZWE1YzQ1NmE4YTM2MDQ5ODU3YmI0MmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4al3hX+nRnlTmWQ54VlXSjfWdWrC
aK45+xe19KPL0AcWWImHdLAAt0IwLyAb0+8dkSEsS4uA0/COWxwKuuUzHjLFMmTP
xt/iseCVnkJBsLoCW7EBeysNKwnxX9PSVNIAHwN9e0g6vb2+SJ9uSNKrr13OFgPh
UZO1mUUXaDrL0oNkCerwl8QcyLGoBsQS2s31Xj2Orz8f7DMNYZEcr63+hq31J8/Z
sfH1N/VklsuYbsWdphByXROz3KqidhoclsO0kA9QVOtBTLlHPh/v1htx7kNz/YL2
bJg8JVgC4MHGlV5BLHFwSQNIvIfMAyLyH9Q9537rhUCO41xSEV9rRGYWeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsoTKPV8yPY6lxFaoo2BJhXu0LoMB8GA1UdIwQY
MBaAFH1F+//WL+JOJjORk62abDGLXbskMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlVYN185WXY0azRtTTVHVHJacHNNWXRkdXlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iMjk1M2EtZDk4Ny00NmIwLWJlYTMt
ODdhNjJlMGZjNDhjLzEvZlVYN185WXY0azRtTTVHVHJacHNNWXRkdXlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iMjk1M2EtZDk4Ny00NmIwLWJlYTMtODdhNjJlMGZjNDhj
LzEvZlVYN185WXY0azRtTTVHVHJacHNNWXRkdXlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqyvPOnc
3CWDk/E2Do1dZa8bpG+1Utv1dznqI4eeMuxdTSHh1z5hLmVkRfx+nOI7WkvDnNt0
kOtsSQ1cb/oIUPEYEm0FfWlh2w+5cYP7fgMxauKffqVOg2yAOo8OFVnKy/XjjWEo
Eqg887qVVoonBC10Slg4R+TS9MHSxRN84+70Mei0fJXCVv4v+NbuzoVngv4LZTX4
B+7vVZ54bUbOm0wFpxHYtuDau101pYGmyAj8Rpq/n7vDoWLmSEb12ca6nJ9Qd0w8
GKcb5XQb1AHX3Bl3+LcATLHGv2gqADXBi3UyNzQebYvZm1627Im3212/1jbbh6v1
qz9/Za/nF10jgg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:16:30 2025 by rpki-client