Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
File: FrGYtu469o3rwjR6Xpj3Efsw8os.mft (raw, json)
Hash identifier: 2hdLVNsjzJ5bOqTGs84yMmm80vEdlXJI/dmBBwvi4oI=
Subject key identifier: CE:A4:E5:DE:3A:3B:A8:C3:84:64:CF:91:48:BF:42:F2:D1:F7:A8:CA
Authority key identifier: 16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
Certificate issuer: /CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Certificate serial: 01976F2BBA82A3B5502545ABE5B86D48AD35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
Manifest number: 0294
Signing time: Sat 14 Jun 2025 16:00:26 +0000
Manifest this update: Sat 14 Jun 2025 16:00:26 +0000
Manifest next update: Sun 15 Jun 2025 16:00:26 +0000
Files and hashes: 1: FrGYtu469o3rwjR6Xpj3Efsw8os.crl (hash: DlIz/j1qYPuz1pfxJE0+7KADIy3z1CJgKcoG5PKf32M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:ba:82:a3:b5:50:25:45:ab:e5:b8:6d:48:ad:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Validity
Not Before: Jun 14 16:00:26 2025 GMT
Not After : Jun 15 16:00:26 2025 GMT
Subject: CN=cea4e5de3a3ba8c38464cf9148bf42f2d1f7a8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:ed:2d:6d:6e:af:4b:3d:de:46:4a:67:8a:
a7:d8:80:97:89:91:2b:29:8a:3d:cf:b5:c6:42:06:
2b:09:66:92:be:24:ee:11:19:23:59:ac:c9:9e:b5:
20:60:09:77:4d:fd:9d:ca:86:c4:8c:51:40:ae:16:
65:d3:70:08:b1:99:4f:cb:7e:10:a1:4e:b4:1b:e1:
32:88:4c:a0:9f:9c:f4:c4:49:0a:e4:43:27:f5:26:
53:e1:e6:e2:4a:8e:ee:a2:af:42:0c:06:7d:c2:ef:
f8:c0:30:8c:cd:ef:c1:79:f8:12:4a:08:34:d9:e0:
85:6a:7b:70:b5:62:db:23:c3:a0:24:64:e6:a4:06:
ea:4b:a9:e5:00:0f:cd:34:45:0b:9c:95:1e:c3:3e:
73:f9:52:b1:55:a5:8b:d7:43:f2:b4:ce:b3:c7:ee:
b4:4e:92:99:15:73:84:11:fe:59:4e:e9:d0:75:71:
8e:3a:74:5a:7c:21:d8:7a:5e:b5:a9:b5:ff:e4:76:
15:9c:50:67:26:30:28:c3:03:e9:47:4f:9c:56:cf:
b6:e5:ea:bc:d3:e2:86:90:cb:f7:a5:62:52:04:58:
04:72:19:31:3b:a4:18:b2:26:39:2b:f6:4d:9a:c3:
16:b3:75:e0:49:6b:1e:ce:87:30:cf:fc:76:d9:9c:
7e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A4:E5:DE:3A:3B:A8:C3:84:64:CF:91:48:BF:42:F2:D1:F7:A8:CA
X509v3 Authority Key Identifier:
keyid:16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:72:e7:c2:1f:3e:52:ec:73:43:df:34:7a:a4:c2:9c:40:6f:
c3:2c:96:ad:5a:14:16:ca:57:7c:9b:8d:02:14:01:e8:9b:40:
70:f4:14:b1:aa:2e:8b:85:13:07:33:8d:77:b6:c3:8b:b7:01:
b0:54:97:0e:d0:f4:31:bb:54:b4:8a:4e:97:f2:03:59:97:73:
a5:8d:ee:3d:bb:c7:ce:7a:4a:ff:cd:46:55:88:e9:54:f4:f9:
4e:1b:33:6d:c1:79:99:ae:f3:48:65:bd:46:a0:53:9a:cb:58:
29:ab:52:1b:e4:d2:f0:bd:37:17:da:17:6e:15:16:3f:8b:4a:
ac:59:85:0e:c8:69:5b:02:1b:8e:ed:64:49:57:ba:b8:de:86:
bb:0e:fc:4a:c2:27:98:c7:8a:9a:bc:b4:1e:25:cc:eb:a4:d9:
5c:40:fa:bf:25:a5:bf:46:38:ce:33:61:14:f5:95:40:b3:5d:
b9:69:cc:cc:4f:b4:de:d6:68:e1:4d:5f:ed:3e:76:c1:3f:42:
36:1d:44:81:ed:2d:41:bc:a6:ac:43:ad:b7:0c:ca:cc:67:cf:
b1:e0:4a:89:d4:c4:fd:e5:87:68:d8:e9:92:1e:fc:e6:d3:fb:
da:5f:96:73:a6:17:47:36:12:3f:5d:ba:4c:10:fa:39:65:8a:
1e:7a:84:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:00:10 2025 by rpki-client