Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
File: fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft (raw, json)
Hash identifier: DMJ8YCwbRGXAvj1KE+GRiG2jTZwPA7Mvgccrtv/2PFY=
Subject key identifier: 2C:FD:4E:20:80:F2:CB:A3:20:37:61:5C:D5:5C:F6:65:B2:50:2E:9F
Authority key identifier: 7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8
Certificate issuer: /CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
Certificate serial: 01976BBD91749374D4363FECDC1413A2D920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
Manifest number: 158A
Signing time: Sat 14 Jun 2025 00:01:14 +0000
Manifest this update: Sat 14 Jun 2025 00:01:14 +0000
Manifest next update: Sun 15 Jun 2025 00:01:14 +0000
Files and hashes: 1: fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl (hash: XpiJXiVbp+UMiceKfzaC0IcdfiWBPusGOeOTafaJaXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:91:74:93:74:d4:36:3f:ec:dc:14:13:a2:d9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
Validity
Not Before: Jun 14 00:01:14 2025 GMT
Not After : Jun 15 00:01:14 2025 GMT
Subject: CN=2cfd4e2080f2cba32037615cd55cf665b2502e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:04:91:b3:9a:02:43:56:6c:ff:c7:f4:0b:
24:0e:c8:dc:36:f9:af:ba:12:1e:de:80:be:c2:4f:
75:b6:eb:b7:f6:c9:fd:7f:11:79:b9:2a:8a:95:97:
60:05:c9:dc:d8:be:7d:01:90:fd:10:a0:2e:ba:89:
4e:e2:e0:fc:a2:59:a1:3a:cf:49:6f:d8:b9:22:81:
9f:29:28:37:6f:3c:cb:36:7a:6c:d2:cb:ad:97:c3:
48:30:98:e9:b1:de:14:b4:05:b6:5a:5a:12:38:f6:
69:cd:cd:1e:98:40:03:d3:2f:ae:bc:01:28:47:d1:
0f:f3:32:df:32:64:6f:ea:8a:e3:5f:05:13:e6:7b:
9f:a8:14:53:77:ad:bd:df:c2:4e:20:49:11:68:63:
c9:9a:04:d6:9f:d8:59:eb:f8:7c:8d:d7:93:e0:c1:
d5:62:5a:a4:40:2b:23:ea:56:df:71:07:1e:48:8d:
2c:83:59:18:7f:1f:10:e2:49:f7:e0:22:2c:ef:0a:
db:03:27:e4:2b:8a:95:76:78:c3:1b:e2:71:7d:fb:
4d:9b:67:70:15:df:82:44:67:f1:33:e2:12:b0:49:
46:4e:01:b8:c5:e6:e4:a9:cd:95:de:71:af:d8:8e:
0f:c0:c5:2d:a8:75:78:3f:c3:0f:3e:35:c0:98:d0:
d6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FD:4E:20:80:F2:CB:A3:20:37:61:5C:D5:5C:F6:65:B2:50:2E:9F
X509v3 Authority Key Identifier:
keyid:7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e7:e0:64:89:00:3f:ff:f9:48:34:85:5a:44:fe:90:58:6e:
0e:73:0a:e1:dd:a3:d6:f7:b5:96:83:6e:17:02:d1:34:31:b0:
34:07:00:7d:b8:40:f5:f2:80:cd:a0:bf:ea:cd:7b:b7:f7:23:
5d:1d:0b:73:5e:7d:ad:31:62:e8:0a:1c:e8:bc:7f:51:09:f1:
84:0c:47:30:2a:03:46:7b:4a:49:83:4e:1f:f1:1a:ef:99:f7:
7b:05:d8:3a:67:7c:92:f5:8d:40:76:00:4d:26:ac:42:fb:73:
d3:ae:2e:58:2d:87:86:0d:38:9a:65:c3:51:41:5d:3f:93:c8:
13:42:46:75:c0:bb:b4:d9:7f:d3:24:8e:fc:3c:ad:f3:cf:eb:
06:7f:b9:d6:ba:22:cb:c2:09:5d:67:63:ca:b4:e5:49:a7:2c:
ad:c1:c6:20:40:58:f4:da:69:7b:b9:76:38:fc:05:85:f3:bf:
1b:11:46:1f:92:64:a5:c6:e7:2a:30:bc:3d:3c:68:be:85:9d:
c2:74:95:68:b8:5e:50:e1:90:b8:ce:c6:52:75:f5:81:99:a6:
66:9b:f2:ef:b1:f7:9c:75:31:35:7a:71:2d:14:dd:ea:c2:7c:
63:bd:d1:56:83:df:10:3e:f8:e3:0a:f6:b7:9d:7b:96:6e:e1:
e8:3b:e2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:37:26 2025 by rpki-client