Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
File: fmjbaSbQRXjYWfB9PdiQubr2RP0.mft (raw, json)
Hash identifier: M9xjBLczhWFD9pJPtJpS5ME6MhRDc7L79+4ecQOk00U=
Subject key identifier: BC:9F:51:F5:0F:09:6B:FF:24:AE:4F:B3:D6:B4:30:63:B3:D8:E5:99
Authority key identifier: 7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD
Certificate issuer: /CN=7e68db6926d04578d859f07d3dd890b9baf644fd
Certificate serial: 01976D3DFC277461FA86F3C3F7AB1E757EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
Manifest number: 091F
Signing time: Sat 14 Jun 2025 07:01:07 +0000
Manifest this update: Sat 14 Jun 2025 07:01:07 +0000
Manifest next update: Sun 15 Jun 2025 07:01:07 +0000
Files and hashes: 1: fmjbaSbQRXjYWfB9PdiQubr2RP0.crl (hash: RyYxQXbmXBtNpv5T1XfsGNB8etEp0hjAPWhUBAQW7EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:fc:27:74:61:fa:86:f3:c3:f7:ab:1e:75:7e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e68db6926d04578d859f07d3dd890b9baf644fd
Validity
Not Before: Jun 14 07:01:07 2025 GMT
Not After : Jun 15 07:01:07 2025 GMT
Subject: CN=bc9f51f50f096bff24ae4fb3d6b43063b3d8e599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:24:89:5b:83:1b:37:7c:0a:d0:9f:04:87:
a7:2e:42:0a:eb:57:7d:b9:dd:f9:a0:00:8a:b4:37:
18:64:08:7c:fd:34:46:ff:43:a2:f1:7c:d4:06:42:
16:83:61:ec:b4:06:e8:98:f6:07:f8:be:e4:0e:4c:
6d:a6:77:d9:f4:e6:73:7f:7f:27:3d:24:8d:20:3c:
2c:fd:bb:9b:15:00:e9:7d:5b:ae:fa:89:15:c6:f7:
e9:53:4c:b7:e9:cf:1f:70:5e:b5:f5:7f:a9:23:5e:
40:f6:ae:bb:27:4b:60:90:c1:64:4c:c2:87:53:67:
24:8b:6f:28:38:fd:c6:2a:04:43:80:9d:94:08:d1:
80:e9:45:cc:c7:2b:f3:3b:79:8e:b4:6e:34:b9:0e:
d3:ce:e4:1c:86:4e:10:f3:56:71:44:06:af:03:80:
2f:e5:83:01:f3:54:ee:f5:fc:86:12:7b:2a:24:c9:
e4:43:d7:29:25:5a:37:dd:f8:7f:3c:33:97:79:c7:
11:90:cb:1b:39:2c:a5:0a:c5:c2:dd:a9:db:26:ce:
ad:9f:98:c1:35:9c:c7:52:a4:12:25:f6:a2:82:3b:
78:b9:0d:2b:31:bc:f7:b1:d2:29:a1:16:13:0c:37:
74:fa:8a:03:71:a1:79:9d:47:30:03:76:c7:72:3c:
c5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9F:51:F5:0F:09:6B:FF:24:AE:4F:B3:D6:B4:30:63:B3:D8:E5:99
X509v3 Authority Key Identifier:
keyid:7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:bb:b8:77:60:67:4b:8e:13:1a:e3:43:61:56:cf:ff:cc:56:
53:71:24:dd:ba:3b:b5:e5:a2:13:ed:9d:bc:0c:40:eb:53:c3:
3f:a2:e4:b5:ce:59:ae:9d:ac:93:e5:aa:c2:15:5e:cc:43:56:
00:1f:84:e3:53:67:35:cf:28:de:59:1b:03:9a:0c:ce:b2:51:
c5:19:9e:ad:d3:95:ef:95:a1:85:cc:0c:d3:8e:ab:2b:3c:24:
4f:5c:16:3f:df:b0:e0:37:87:b9:52:d2:17:79:7c:19:57:e1:
a8:17:69:32:63:b9:80:b1:3f:b2:2b:20:40:49:eb:ae:b8:ad:
de:74:17:49:e7:cf:85:79:c4:67:66:7d:36:ba:bd:5c:73:65:
b8:93:b1:de:09:50:78:25:6c:86:29:39:92:6c:7e:95:d9:11:
34:ca:05:8f:ca:7f:4e:94:24:78:d7:f2:6f:2b:01:ea:ba:49:
aa:aa:4b:49:8b:74:e6:2d:6e:b0:e5:d6:74:11:2d:7e:57:c6:
d8:a5:25:8a:70:ff:f2:f2:84:79:d7:d2:7b:a2:89:a4:ce:c7:
67:3f:91:8e:c3:cf:e0:f4:14:46:f5:bc:76:27:11:00:f7:09:
01:f4:b0:48:02:31:d4:d8:ff:f5:3c:b4:f9:07:75:ea:6b:06:
48:48:37:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:34:46 2025 by rpki-client