Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
File: fEajytgJZa-Gy7AIPftAqy_xus8.mft (raw, json)
Hash identifier: UBMa58uRukRv3nYUMKsfZ3VHAL5NTSPv0bvJFIrEtTM=
Subject key identifier: 20:DF:2B:78:EF:57:8E:18:C4:D3:8E:1C:90:94:7A:B8:A6:97:D7:24
Authority key identifier: 7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
Certificate issuer: /CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Certificate serial: 01976CCF61045922D2B065464659A315E85F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
Manifest number: 0FB9
Signing time: Sat 14 Jun 2025 05:00:19 +0000
Manifest this update: Sat 14 Jun 2025 05:00:19 +0000
Manifest next update: Sun 15 Jun 2025 05:00:19 +0000
Files and hashes: 1: fEajytgJZa-Gy7AIPftAqy_xus8.crl (hash: Kzm3TfG6AKqFRjGLM1n4VHtr42mEhEAcOtxPwtFOCbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:61:04:59:22:d2:b0:65:46:46:59:a3:15:e8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Validity
Not Before: Jun 14 05:00:19 2025 GMT
Not After : Jun 15 05:00:19 2025 GMT
Subject: CN=20df2b78ef578e18c4d38e1c90947ab8a697d724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:fe:99:67:20:9f:bb:82:4f:14:05:57:88:
4b:46:d1:20:f3:92:ed:65:40:43:2f:79:33:31:b1:
c1:cc:5d:74:5a:98:68:dc:40:40:26:a0:56:c4:b5:
0e:45:90:46:e0:11:f8:fb:9a:c4:3a:a2:95:7c:10:
73:2a:3a:98:10:78:f9:e8:22:7e:9f:0b:a1:ec:83:
e1:ed:e7:cf:dd:80:fd:7a:a1:b3:f9:47:86:c1:12:
d6:9f:d4:4d:11:d3:b8:49:c1:96:40:21:3d:a1:9f:
d9:e2:01:48:b6:7c:77:a3:ba:ca:ae:a8:db:05:e9:
ce:29:79:a6:5d:ee:ef:10:15:cd:3e:bf:69:a0:e2:
14:a4:e1:8b:9b:30:2f:ab:21:d2:bf:55:15:af:7d:
a5:a5:15:6c:7e:ed:67:6f:b1:d3:33:d4:c4:20:66:
6a:cc:18:9c:5a:2b:81:f7:3e:a8:11:26:e4:96:e7:
08:e0:24:2e:a7:45:f9:f1:41:60:9e:2c:a4:19:72:
c9:bb:0f:de:3e:4c:67:cf:90:ce:f8:b5:8f:f1:fb:
d5:ec:51:d1:41:cf:7b:3d:c4:e9:03:90:f5:cd:00:
5a:38:26:7a:30:a6:59:74:8e:5c:61:ac:b7:d9:4e:
b6:42:db:ff:a5:68:90:7b:2d:38:c8:29:be:12:3d:
e1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DF:2B:78:EF:57:8E:18:C4:D3:8E:1C:90:94:7A:B8:A6:97:D7:24
X509v3 Authority Key Identifier:
keyid:7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a4:18:e6:6a:da:19:bf:87:15:53:e2:85:47:dd:a1:77:07:
0e:c9:9f:71:f2:31:db:50:83:4d:67:2e:3c:83:06:0a:b6:a8:
c7:db:38:25:af:69:e4:e9:ae:c0:0f:c6:8a:8c:e2:d5:de:76:
9e:f6:a3:09:6b:a5:9c:e0:e2:d3:3a:85:dc:39:c9:be:88:1a:
06:42:16:5c:cf:a9:6b:b5:d6:c5:59:18:72:bf:bc:36:d9:2f:
b0:a6:b9:5c:01:ee:d9:df:94:17:1c:02:e6:98:0b:fd:f3:4c:
38:e3:82:7b:26:f7:e1:3f:15:8d:21:1a:82:ea:94:d7:31:e2:
c8:34:b7:d5:dd:be:53:23:42:9a:5a:28:47:b2:55:3c:44:da:
e9:20:94:82:75:50:ec:a0:1d:f8:5d:af:2f:a5:75:25:1a:34:
d6:a3:c7:98:66:52:33:59:c0:3b:c4:c2:92:0d:f5:ec:94:57:
15:f1:70:4b:f2:5b:03:87:10:0a:e1:2b:0a:54:cb:43:34:a1:
05:18:bb:c1:bc:64:29:c5:8c:21:5b:31:01:f4:c3:e8:9b:78:
69:35:b9:8e:ec:59:dd:4b:53:4e:ed:37:cf:4a:e4:64:5f:f8:
99:f8:af:d6:5f:7b:07:d1:12:e9:b2:97:fa:01:59:b6:a9:61:
90:12:14:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:33:32 2025 by rpki-client