Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
File: fM2Lj3l51soXEsHVCkDU5VXJThM.mft (raw, json)
Hash identifier: DwcKRnlwASmbiZuf1oohvoS4lpxlEhi49mGncRYSZhI=
Subject key identifier: 2C:21:A1:FB:C2:D9:D7:DD:11:F8:4A:F4:FB:63:AB:02:94:F6:8D:E1
Authority key identifier: 7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
Certificate issuer: /CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Certificate serial: 01977941DFA1DBA6F2003E2FEA7DCD415628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
Manifest number: 0928
Signing time: Mon 16 Jun 2025 15:00:49 +0000
Manifest this update: Mon 16 Jun 2025 15:00:49 +0000
Manifest next update: Tue 17 Jun 2025 15:00:49 +0000
Files and hashes: 1: fM2Lj3l51soXEsHVCkDU5VXJThM.crl (hash: Q4HqQ9xyyUPA0KX4cps+zltQ3NNtjqJsBZJvd9qsl4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:41:df:a1:db:a6:f2:00:3e:2f:ea:7d:cd:41:56:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Validity
Not Before: Jun 16 15:00:49 2025 GMT
Not After : Jun 17 15:00:49 2025 GMT
Subject: CN=2c21a1fbc2d9d7dd11f84af4fb63ab0294f68de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3a:c2:05:26:58:6f:3f:6c:29:b1:ec:f1:97:
e4:80:51:d4:09:5f:1b:4e:7c:1f:e5:6a:c5:d4:b9:
bd:bf:d4:6e:4a:2e:0a:38:1b:08:81:fa:fd:bb:3a:
6a:be:11:62:5c:14:39:41:7f:2a:55:18:3e:4e:7c:
26:4b:b9:4c:30:bb:49:0d:8b:7b:d6:51:3d:aa:b3:
c1:1f:7b:3c:f7:1c:81:3c:a1:f0:0d:78:17:22:f4:
ae:8e:d5:21:1a:4c:d2:c9:9f:28:8a:4d:42:7c:e0:
bb:07:9d:b9:5c:c4:7d:a4:f0:f5:9b:b4:6c:8a:d4:
3e:12:65:67:a0:ec:59:8c:92:07:28:6c:50:e3:6e:
6f:7b:86:55:b7:40:0e:2f:0f:3f:d8:76:53:8c:b0:
84:fb:97:85:f5:f6:c7:ce:0b:bb:84:e2:38:8f:dd:
ff:e8:c8:f4:23:8c:8b:95:9e:33:6d:a4:26:71:a1:
e4:d1:4c:8e:63:46:00:86:42:46:b6:e9:39:73:a2:
b9:34:14:0e:14:7f:5a:2b:d4:02:5a:ff:7d:0a:0e:
f8:39:cb:27:cf:e5:21:45:75:be:02:18:ad:79:b9:
ff:7d:be:b7:35:1a:ca:f1:8a:c9:36:cb:e0:9a:90:
51:64:a4:d1:05:ab:01:42:3f:7d:77:e1:d4:09:08:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:21:A1:FB:C2:D9:D7:DD:11:F8:4A:F4:FB:63:AB:02:94:F6:8D:E1
X509v3 Authority Key Identifier:
keyid:7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:0d:be:f3:b2:b3:08:33:83:52:ed:94:de:68:e1:3b:01:cf:
0e:ed:e7:b5:c1:bb:1c:e5:94:59:1f:7e:3d:fb:d8:0a:9e:ff:
d9:f7:37:2a:91:38:c9:62:9e:1a:68:10:b1:cf:c6:8a:86:f1:
c5:a0:ef:00:13:98:e3:53:3f:88:b7:7d:ec:b8:87:f3:ab:4a:
01:a1:eb:f4:75:95:8a:07:34:94:2e:e8:9d:2b:4a:63:72:8d:
c0:3d:19:30:f6:f5:c0:fd:e6:48:b6:78:27:5a:b2:e5:ad:c9:
39:67:12:07:ed:e3:b4:67:d4:5c:ac:10:2b:8f:8b:a7:7d:77:
21:81:9b:a4:70:3e:ea:b8:a1:35:4e:09:9b:43:d6:92:31:00:
5e:26:da:65:c0:2a:5c:3e:4e:20:e7:65:ce:26:61:5e:43:fc:
81:af:f5:f4:2c:83:08:cd:f8:28:2f:10:f3:8e:ba:53:dc:6d:
34:41:4d:ec:a2:02:98:c1:e5:14:05:1a:29:e9:11:07:13:58:
9a:d2:20:a1:04:76:4f:47:6d:4d:5d:d4:f6:4c:29:81:3f:00:
61:ee:91:5c:46:73:71:82:97:81:54:05:df:22:83:7e:44:73:
cf:41:f4:18:df:d5:fe:73:ae:d2:e0:a9:3f:1d:ad:ec:ee:d3:
99:67:fe:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:14:46 2025 by rpki-client