Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
File: Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft (raw, json)
Hash identifier: EGxXrlaXIWWmQ6avXF/61ioR4gWBR8DGe7D1AAz5duo=
Subject key identifier: 0E:5E:8F:7B:61:97:A9:21:70:5E:0F:D4:32:DE:C7:F6:CA:8D:EA:E2
Authority key identifier: 17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85
Certificate issuer: /CN=171839a0b6476dfbf8335101613ce1a7721ef385
Certificate serial: 01976F2C8B008504FB1E7603D247768A83B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
Manifest number: 151F
Signing time: Sat 14 Jun 2025 16:01:19 +0000
Manifest this update: Sat 14 Jun 2025 16:01:19 +0000
Manifest next update: Sun 15 Jun 2025 16:01:19 +0000
Files and hashes: 1: Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl (hash: KNgYg7pTxyPfIYD/G9vkmuRd1Xn0JNsCEBqFneEfqgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:8b:00:85:04:fb:1e:76:03:d2:47:76:8a:83:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171839a0b6476dfbf8335101613ce1a7721ef385
Validity
Not Before: Jun 14 16:01:19 2025 GMT
Not After : Jun 15 16:01:19 2025 GMT
Subject: CN=0e5e8f7b6197a921705e0fd432dec7f6ca8deae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:75:05:01:5b:d6:06:87:3f:e6:99:0a:45:50:
a9:d4:62:ae:f6:41:e9:21:2c:70:b2:fb:a1:15:78:
68:31:75:50:44:07:41:09:8d:3c:cd:1d:dd:46:e1:
0b:63:09:8d:17:af:a7:22:9e:d4:a0:22:00:b9:4f:
ed:e6:52:97:b5:bd:9c:b8:0b:fb:76:42:f4:77:7d:
b9:ba:33:be:ec:4f:e8:74:43:53:39:7c:43:fa:cd:
7b:a4:ca:c4:6b:7c:3e:dc:4e:05:a4:77:28:8f:d7:
f8:58:b8:4c:68:67:9e:b3:65:cb:c3:d9:96:dc:24:
e6:bc:31:29:d9:9f:de:20:b3:52:ff:62:c8:08:08:
58:5c:67:99:30:e8:8b:29:81:39:ec:d7:b3:8b:6d:
a8:d1:9b:f5:da:ac:82:69:9c:f7:1e:86:e1:26:a7:
d8:c3:8a:ff:ea:f3:45:00:71:24:15:9a:89:d9:fd:
a6:a4:ea:0f:0b:87:23:55:f7:75:15:2e:57:28:5c:
16:06:29:92:73:b8:04:6c:e9:aa:e9:f4:3e:75:e2:
3f:eb:98:09:d5:05:79:6c:ee:a0:68:f0:77:cb:d0:
51:f0:a1:4a:ba:f7:2a:4a:83:90:6a:91:86:70:78:
4b:ac:72:27:d4:73:2f:90:c3:36:ae:a8:1d:b0:84:
6f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5E:8F:7B:61:97:A9:21:70:5E:0F:D4:32:DE:C7:F6:CA:8D:EA:E2
X509v3 Authority Key Identifier:
keyid:17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ca:b0:21:35:97:d6:cc:57:f0:b3:08:25:77:60:03:19:b0:
d4:af:d1:fb:36:1a:a8:ab:9b:6c:6a:af:eb:33:48:b3:a4:1d:
97:45:dc:f2:b2:eb:e3:bc:3c:d7:aa:d4:02:96:c6:e9:3b:a0:
1d:d0:02:08:ee:cf:6c:ee:7c:ce:30:ea:35:0b:6a:0e:cb:5d:
4d:c7:f5:ad:64:0c:13:33:a9:bc:3e:df:1e:3d:d9:9a:63:ed:
08:53:f3:cc:44:ec:ed:26:47:2b:d3:bf:ca:0d:39:ee:36:82:
fa:74:ef:3c:31:4d:b3:ad:76:05:5f:b4:63:02:44:08:32:d1:
3a:02:ce:f3:75:02:cf:63:ec:00:3b:92:07:c5:21:52:41:8e:
86:d8:57:24:8b:82:f4:5d:bb:06:a8:8c:f0:d6:f1:61:29:bb:
d1:27:be:16:2b:b0:ef:80:e6:e4:ad:2c:f4:d6:4f:61:72:18:
a8:78:03:6a:48:e7:81:d5:e1:91:d0:17:2d:e9:ac:af:3d:b9:
bf:32:78:8b:6c:1c:08:c0:a6:48:29:0e:02:9a:47:b0:c4:25:
30:96:90:33:3f:1d:76:24:da:99:97:fd:16:30:31:7a:cb:ed:
ca:be:ee:49:76:e3:d4:27:fd:45:bf:78:21:c0:b3:29:20:e5:
a1:06:0e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:07:01 2025 by rpki-client