Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
File: fvoucF0jP_80WpErLyObWs43K7k.mft (raw, json)
Hash identifier: tA30jn5AhXFwmwGT9aFLnSCB72onrFFtOD2eZ2pDD6g=
Subject key identifier: 12:6C:7A:79:92:F9:15:86:B2:F6:23:29:2A:C6:54:24:DB:C1:59:2E
Authority key identifier: 7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9
Certificate issuer: /CN=7efa2e705d233fff345a912b2f239b5ace372bb9
Certificate serial: 01976A05CDF44F51525150CA48B93639A321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
Manifest number: 04CA
Signing time: Fri 13 Jun 2025 16:00:54 +0000
Manifest this update: Fri 13 Jun 2025 16:00:54 +0000
Manifest next update: Sat 14 Jun 2025 16:00:54 +0000
Files and hashes: 1: fvoucF0jP_80WpErLyObWs43K7k.crl (hash: tdNr+tGQjxTA+wnKDUvQ0Wpj531Uuy0Cu1w5+sx/2fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:cd:f4:4f:51:52:51:50:ca:48:b9:36:39:a3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7efa2e705d233fff345a912b2f239b5ace372bb9
Validity
Not Before: Jun 13 16:00:54 2025 GMT
Not After : Jun 14 16:00:54 2025 GMT
Subject: CN=126c7a7992f91586b2f623292ac65424dbc1592e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:75:30:ff:c8:72:7d:e8:17:45:36:06:51:57:
8c:70:db:d9:34:bf:ae:dc:4c:68:5d:64:03:39:e3:
a5:94:8f:31:36:06:c2:a0:fa:3a:ac:3b:fa:9c:75:
98:cd:9c:2d:69:c5:d3:a0:3a:38:bd:cc:d3:b4:4b:
a9:d4:fd:9f:bc:ec:d6:0f:e5:8c:d1:dc:b4:72:16:
07:8e:b3:d1:7f:84:a6:05:59:bb:e8:4c:b7:33:a0:
58:13:41:a5:e7:0e:f2:ae:ee:a4:b9:1c:59:09:b6:
fa:32:31:84:0a:a5:3d:bc:ca:3c:d5:0c:3d:6d:49:
82:5e:ac:4d:a5:ef:2e:90:42:85:3f:40:9b:fa:60:
97:70:e4:94:b4:b2:82:8b:9c:ad:64:ab:00:77:79:
0a:53:ab:02:af:57:ca:90:aa:3a:2c:4e:1e:b5:e1:
31:4c:ba:3c:a3:4d:46:fa:57:99:92:89:1d:63:d6:
c1:31:28:9e:08:21:5e:f5:54:ae:5a:8e:73:54:51:
00:3b:93:18:08:36:14:3d:77:3d:82:fb:c3:45:5b:
40:44:e2:68:c8:fd:68:e5:30:51:d5:33:3a:2b:83:
87:66:fa:ff:4c:39:49:a7:62:96:eb:7d:e8:c7:ce:
b6:30:8e:e5:7a:f4:64:e9:3c:56:ef:c8:9f:46:be:
3e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6C:7A:79:92:F9:15:86:B2:F6:23:29:2A:C6:54:24:DB:C1:59:2E
X509v3 Authority Key Identifier:
keyid:7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:90:38:c2:c2:53:53:77:74:c1:f4:50:a5:86:ce:32:8b:6f:
80:d0:c0:e2:d7:d1:7b:a1:d1:7c:35:03:25:42:36:67:27:9a:
17:43:8d:f7:a3:f9:97:d7:83:aa:6f:78:dd:4a:31:c6:80:af:
99:65:30:55:69:9a:d8:6f:3f:2f:96:09:8a:66:6c:8d:f5:4e:
dd:0a:c8:e4:85:61:8a:63:50:e4:0d:bd:11:eb:d7:77:c6:e6:
72:a1:7d:20:32:47:10:88:39:4b:c5:d5:42:f0:43:32:c6:a4:
4e:52:3f:0e:cd:1f:89:a6:29:77:2a:fc:e6:fe:a0:27:c7:b3:
54:75:63:da:27:50:ac:f9:a4:ad:03:9e:85:22:e0:4e:1c:c1:
16:c2:36:2d:9f:cc:77:ea:48:c1:cb:39:26:66:ea:13:d8:c8:
fa:57:c7:f4:7b:6d:90:0a:43:a5:0c:36:8a:b4:3d:11:f9:58:
a8:62:f7:ef:f0:57:44:32:8b:08:af:46:8b:e2:fd:1a:80:6c:
59:0d:ca:b3:e2:39:b4:85:10:36:33:cd:20:7f:cc:9d:98:47:
ac:96:d8:14:4b:ba:81:88:fd:56:9a:22:4b:3d:b2:01:a9:39:
d0:e6:e5:f0:7c:23:ac:ce:25:33:44:9d:27:bf:cd:71:f5:a4:
74:1d:bf:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:07 2025 by rpki-client