Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
File: fp2uVBo7fD77bdZkadCH6F9179o.mft (raw, json)
Hash identifier: UMOyhFJuBU4/M7FuqihSMSOYUXk2RKtZYeJjKzYOYvo=
Subject key identifier: 2B:45:F5:9B:0F:EB:91:5D:4C:EB:14:85:36:94:BA:EE:86:53:81:25
Authority key identifier: 7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
Certificate issuer: /CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Certificate serial: 01976960F4B282D4DC6294B3FF8BFB21DE5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
Manifest number: 01EE
Signing time: Fri 13 Jun 2025 13:00:51 +0000
Manifest this update: Fri 13 Jun 2025 13:00:51 +0000
Manifest next update: Sat 14 Jun 2025 13:00:51 +0000
Files and hashes: 1: fp2uVBo7fD77bdZkadCH6F9179o.crl (hash: y7Dsq5QNfuJJz9+A9tE4flDFBjL96mCA8nOv1thDC3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:f4:b2:82:d4:dc:62:94:b3:ff:8b:fb:21:de:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Validity
Not Before: Jun 13 13:00:51 2025 GMT
Not After : Jun 14 13:00:51 2025 GMT
Subject: CN=2b45f59b0feb915d4ceb14853694baee86538125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6d:94:66:e5:d1:d4:b6:fa:63:5d:4b:f7:7f:
41:9c:0d:81:13:b8:ab:f8:5e:4a:89:d2:03:51:9a:
e5:6d:49:8c:45:33:d3:52:73:64:d2:ec:dc:8e:f9:
36:68:67:65:a2:73:2e:bc:12:b1:72:56:7d:a2:70:
31:a6:1d:c7:22:92:68:9b:1d:99:e0:e4:d7:1a:14:
df:3b:e7:e2:fa:b9:56:9f:3a:9d:e5:a2:00:c2:0a:
31:d1:42:cd:3d:5e:bf:c9:ee:c1:f8:dc:9d:c4:0e:
16:f0:e0:a6:4f:c6:04:33:0a:ee:7d:98:d9:66:ba:
d2:5a:46:61:20:36:22:f0:f7:ae:56:92:5d:6e:46:
fa:1d:b7:b2:8b:4a:ad:db:57:db:7e:eb:75:fd:11:
f5:0f:4b:96:8a:eb:e5:72:c1:ff:aa:51:64:3b:e3:
20:7a:4e:fd:19:70:4f:74:da:63:b9:3c:e1:38:b8:
0e:8a:1a:31:ad:b2:15:87:e6:66:f0:f1:78:e7:18:
30:23:79:f1:66:9e:cb:55:dd:30:6d:5a:89:17:ed:
60:6d:a6:95:4c:28:65:a1:76:bc:7c:18:bb:c5:78:
72:31:9e:6a:95:14:9c:be:0f:d6:a2:5d:c2:79:97:
cd:9f:85:5c:f5:9e:3b:01:d5:21:a8:e7:95:d6:b5:
5f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:45:F5:9B:0F:EB:91:5D:4C:EB:14:85:36:94:BA:EE:86:53:81:25
X509v3 Authority Key Identifier:
keyid:7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:17:43:94:1a:0a:f0:c9:42:11:83:f1:18:dd:95:77:41:c6:
1f:f9:48:47:9e:4d:ab:43:81:bc:b2:0b:62:6e:d0:dc:e2:a3:
75:77:b2:db:c7:83:38:32:fe:d5:29:d4:0d:63:0f:2b:fe:f6:
22:50:2b:31:84:90:e8:5e:a8:cb:12:c8:1f:63:28:70:bc:55:
4c:bc:21:07:a2:b2:b7:4c:0d:55:0e:32:96:0b:2f:1f:72:b8:
af:4f:a4:8f:59:fa:05:be:8b:1f:1b:be:ed:64:ee:48:65:dc:
c0:eb:8d:36:d2:aa:6d:69:7b:8d:ea:d4:69:da:45:77:28:36:
00:3c:01:9f:01:b0:1e:42:39:07:08:0b:d3:7b:7c:d5:ba:35:
12:e8:de:21:de:5c:07:cd:f6:27:59:69:f5:18:1f:35:eb:87:
88:4a:ca:5e:4f:b7:2d:ce:d1:79:73:e7:47:55:67:3e:bc:f5:
8b:46:c5:5b:22:84:56:13:45:97:06:2b:b3:6c:60:2c:8b:f8:
9b:4f:60:73:81:80:df:85:fa:c0:03:2d:fa:7e:8d:eb:5c:e2:
c3:ba:5d:cb:c7:10:ef:b4:7a:f6:f9:a6:24:ea:b0:d8:74:f1:
9b:4e:11:9b:03:3e:4c:a1:1f:bd:98:2f:7a:6e:24:9c:35:2e:
0c:f1:cd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:44 2025 by rpki-client