Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
File: fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft (raw, json)
Hash identifier: PJ9RQftKkytbSW5TPUmANmODHvvkYA4bfjK2VP+LVrc=
Subject key identifier: 60:4E:29:14:39:70:F8:E4:9C:A8:D3:78:E1:2B:4C:D4:2E:4D:87:93
Authority key identifier: 7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
Certificate issuer: /CN=7c3846589a3b395b3758773da3d9f13334c72038
Certificate serial: 0197684E55D182E28D3E6C1815142B66E2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 08:00:53 +0000
Manifest this update: Fri 13 Jun 2025 08:00:53 +0000
Manifest next update: Sat 14 Jun 2025 08:00:53 +0000
Files and hashes: 1: fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl (hash: JhI4SyhKQLvZO17VDNAJd8Jq4f2To4gXfPj1mc+lZFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:55:d1:82:e2:8d:3e:6c:18:15:14:2b:66:e2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3846589a3b395b3758773da3d9f13334c72038
Validity
Not Before: Jun 13 08:00:53 2025 GMT
Not After : Jun 14 08:00:53 2025 GMT
Subject: CN=604e29143970f8e49ca8d378e12b4cd42e4d8793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:40:98:85:d1:10:4e:01:d0:12:5d:44:14:b0:
e7:8e:55:67:1b:0b:20:54:1c:92:d2:f8:b7:80:14:
ab:49:b8:9c:96:cc:e0:e8:ea:e7:df:8a:a7:2c:60:
1d:c9:90:96:13:8a:1f:35:ce:dd:af:96:4d:6d:c2:
b4:a5:ac:19:d7:07:62:6d:5c:c6:3c:0d:1d:cf:95:
40:10:0e:93:a2:9c:5f:7f:4f:c1:7a:d9:f3:f7:e7:
a0:75:c2:6d:63:04:fd:02:f6:ce:7f:c3:bd:3e:8c:
2f:a8:63:08:52:fd:07:26:5f:c8:04:1d:83:6c:56:
94:8c:12:48:bd:14:de:bd:dd:5b:d8:cb:b0:af:cb:
b7:f4:5b:46:99:85:33:cf:fd:c5:e3:db:75:17:7c:
c6:f6:16:4f:87:7b:96:f1:13:9c:73:d9:f7:59:f0:
c4:68:39:ee:67:8a:a4:31:a6:06:f3:e7:3b:7a:34:
4d:eb:76:53:75:35:2f:6b:b4:b9:16:35:9f:43:0e:
93:a0:aa:a3:a3:9d:10:2a:af:01:c9:43:82:ad:0e:
6d:7e:24:f6:29:05:65:44:85:65:e5:52:22:90:9d:
f0:51:61:8c:59:96:ec:4f:60:84:51:b1:09:ff:c8:
fb:5d:26:33:05:9b:f2:ab:ae:ce:9a:72:7b:73:4b:
26:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4E:29:14:39:70:F8:E4:9C:A8:D3:78:E1:2B:4C:D4:2E:4D:87:93
X509v3 Authority Key Identifier:
keyid:7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:44:7b:be:c4:6e:78:d4:fa:ee:81:fe:19:6b:94:11:47:13:
c7:eb:59:bb:f5:5a:e2:69:f9:53:4f:a0:7c:05:09:4e:21:c8:
fd:12:51:1c:61:4f:8d:b6:01:a2:56:b0:24:4e:65:6a:1a:1c:
bc:53:30:e1:b3:e2:11:a4:9b:04:85:d6:dd:3b:65:de:c9:5b:
81:98:17:13:d5:a3:e5:db:61:33:99:22:3e:4f:67:ce:bc:d3:
98:79:36:d9:ec:00:07:41:0c:8d:41:c6:d9:f2:11:da:21:74:
57:39:59:22:bd:2e:2c:d3:87:ad:a1:77:1e:68:63:a7:26:cd:
f4:80:66:08:e0:15:39:28:eb:71:5b:98:e0:12:ee:f6:5b:1c:
3e:9b:6d:02:2f:2e:65:cd:0d:1c:46:b3:8a:f0:ff:56:cd:21:
b8:4b:f9:82:23:38:f4:8a:33:76:d4:54:39:67:59:36:d9:8d:
9d:cf:a1:d2:51:34:ec:49:a9:60:9d:24:9a:e5:c8:ad:d9:5f:
94:65:eb:aa:54:53:5c:8f:04:72:15:99:c1:6b:f5:99:e9:f2:
ac:98:7f:fe:2b:1b:f3:70:7d:5c:5d:f2:cc:24:74:65:1f:c5:
d1:9c:4c:36:6f:01:14:b1:c1:28:f5:0c:61:c5:4a:6f:b8:cc:
f9:2f:52:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:57:44 2025 by rpki-client