Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
File: SP34H7869DBnKkv2Qnc7lZxFCKY.mft (raw, json)
Hash identifier: 6amq2c9vLtccR3msDmOdJddXiRyMQHq7K7KzkHWKJv0=
Subject key identifier: FC:B9:6D:2A:68:D0:A3:86:D4:2F:28:D7:A3:C5:19:48:7D:2A:6F:D1
Authority key identifier: 48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
Certificate issuer: /CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Certificate serial: 01976E196D4F6734B48017572D4F4641A319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
Manifest number: 1142
Signing time: Sat 14 Jun 2025 11:00:49 +0000
Manifest this update: Sat 14 Jun 2025 11:00:49 +0000
Manifest next update: Sun 15 Jun 2025 11:00:49 +0000
Files and hashes: 1: SP34H7869DBnKkv2Qnc7lZxFCKY.crl (hash: 6jLbiUg2UhPobRXnE0u6ZTVMLoGCmhzURukWURO+LEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:6d:4f:67:34:b4:80:17:57:2d:4f:46:41:a3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Validity
Not Before: Jun 14 11:00:49 2025 GMT
Not After : Jun 15 11:00:49 2025 GMT
Subject: CN=fcb96d2a68d0a386d42f28d7a3c519487d2a6fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:64:cc:ee:d2:54:b5:2b:29:2a:b3:87:3f:d4:
02:1f:76:b9:b2:e3:18:4d:a0:d4:4a:f0:35:56:b2:
b1:56:55:2c:e5:85:8c:71:ef:dc:5f:d5:28:47:75:
86:fd:a8:c2:a6:bc:68:12:da:71:72:c9:b9:ca:a9:
dc:ca:93:7e:4c:47:b8:d7:e2:e3:bb:39:63:8d:cc:
f2:ab:34:71:db:30:02:de:cd:94:d0:26:6d:87:72:
28:dd:71:6c:26:42:4c:ae:5a:c4:cc:d1:fc:dd:ce:
48:c3:01:3f:de:9d:54:94:3b:bb:b9:eb:27:b6:f7:
d3:86:7f:39:62:5a:9b:f8:d7:e5:00:e5:bc:54:ee:
fc:66:59:0a:02:52:7e:73:ac:f8:13:7a:ca:bb:78:
5c:7d:c2:b9:03:37:c6:23:cc:a3:fd:0e:54:35:44:
0d:03:fc:82:1f:ef:58:9f:a7:f7:1b:e5:fd:74:0d:
be:e3:a3:45:9c:bb:c0:f0:b0:94:39:c1:52:89:b5:
fd:3d:b2:b0:46:3a:74:6f:a1:0a:5f:ac:3b:63:70:
64:96:94:b5:18:78:65:6f:13:ef:5a:45:de:a5:4c:
6d:ce:b9:03:d2:89:47:ee:fe:0e:d5:56:5d:7f:8f:
fa:bc:4a:75:b1:1f:22:db:b9:fc:33:b5:c9:5c:df:
ff:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B9:6D:2A:68:D0:A3:86:D4:2F:28:D7:A3:C5:19:48:7D:2A:6F:D1
X509v3 Authority Key Identifier:
keyid:48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6b:86:88:11:4d:be:ba:e4:01:d5:62:2c:76:59:d4:91:92:
4c:25:46:08:f4:53:3d:a6:19:e5:11:ff:93:fc:59:17:8e:8f:
34:20:cc:05:81:47:11:59:28:2b:e0:7f:1e:9a:c7:13:02:13:
17:35:af:87:bb:d6:38:f9:14:d0:9e:cd:41:b3:64:ef:07:b5:
8b:3b:72:7a:ea:75:d1:e8:07:35:32:4d:c0:31:5b:87:13:07:
6b:38:a1:b4:b0:b9:e4:00:35:12:33:d5:3a:e2:94:40:75:77:
a5:d0:ec:6f:49:ca:56:04:b5:5c:b2:93:97:46:17:d8:4a:a3:
20:50:66:6a:8e:fd:e1:67:25:90:17:c4:38:74:42:c2:2d:2b:
c5:a6:9a:7c:de:26:e0:2f:d1:41:02:57:a5:27:2d:9a:d3:f7:
20:29:4f:99:79:51:f7:dc:ff:7c:9e:89:41:ca:a6:17:7d:e0:
d3:80:07:5c:f0:df:a6:d2:d7:a2:99:1e:28:8e:e1:86:bb:66:
f1:0c:14:5a:46:c5:25:0f:8f:52:7c:6b:32:71:24:b0:24:4c:
14:9b:e8:95:46:58:39:34:86:14:2b:1c:31:53:71:1d:44:68:
31:7b:ff:78:fc:21:d2:70:36:6d:12:b7:a9:59:c3:d3:8e:55:
71:c7:45:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:16:55 2025 by rpki-client