Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
File: FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft (raw, json)
Hash identifier: PYCk5cEsEHAQ4xtr0PBbu6r6xPukt/K+Qo2qkh9jbvY=
Subject key identifier: FD:A5:EA:C6:AE:93:B8:0D:3E:89:47:12:25:99:EE:03:64:31:5A:1D
Authority key identifier: 16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE
Certificate issuer: /CN=1617d0afeabbf339b06db283c4b8e027a04abcae
Certificate serial: 0197684DFF089CEFDA1A63871DEF8432B0B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
Manifest number: 033B
Signing time: Fri 13 Jun 2025 08:00:31 +0000
Manifest this update: Fri 13 Jun 2025 08:00:31 +0000
Manifest next update: Sat 14 Jun 2025 08:00:31 +0000
Files and hashes: 1: FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl (hash: xaGjbUzhMLX9xocfKM63eiHXlw8znJN3Yo154RlZiXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:ff:08:9c:ef:da:1a:63:87:1d:ef:84:32:b0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1617d0afeabbf339b06db283c4b8e027a04abcae
Validity
Not Before: Jun 13 08:00:31 2025 GMT
Not After : Jun 14 08:00:31 2025 GMT
Subject: CN=fda5eac6ae93b80d3e8947122599ee0364315a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:02:af:c9:85:bb:2e:fd:69:96:40:5b:cf:
97:7b:72:07:1a:15:8e:49:49:ef:87:f1:b3:7d:b9:
c6:19:b2:f1:59:12:cb:f8:1d:48:56:fe:09:58:3b:
a5:3f:b7:c3:f1:da:70:88:1a:60:53:c3:0e:e5:5a:
8b:3b:f9:7e:2e:9f:e5:e2:db:fa:a6:02:0f:a6:7b:
bb:9d:c9:c0:e1:80:16:bd:87:fe:5d:ee:a2:ee:d4:
f3:43:99:f0:d8:fc:58:07:0d:1f:61:60:6a:8e:45:
36:83:d5:c8:44:79:ea:a2:7c:19:44:59:c7:8d:89:
4f:0e:d6:03:25:2f:5e:58:34:b8:1d:84:78:5b:52:
d9:49:8e:8d:d4:2d:89:04:59:66:62:c8:2d:c4:8f:
e5:d9:6e:96:c8:36:b7:e8:3c:d4:6a:41:6b:95:88:
da:fe:00:9e:b3:b5:cf:37:81:68:5f:f7:4d:b0:c4:
1f:4d:77:72:6d:16:1f:79:15:0c:4a:bd:0b:7c:e0:
68:2c:03:1e:f8:3a:02:15:6c:fa:45:ee:bf:9b:ee:
a0:ef:6f:0d:88:fc:03:01:88:27:d1:ff:75:fd:0f:
08:de:d6:55:d1:d8:25:a9:7e:0b:01:21:56:dd:58:
75:13:76:a3:07:e7:36:a5:86:a2:aa:e6:39:a8:41:
ab:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A5:EA:C6:AE:93:B8:0D:3E:89:47:12:25:99:EE:03:64:31:5A:1D
X509v3 Authority Key Identifier:
keyid:16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:31:52:9d:e8:e5:48:ee:85:fb:19:7d:9e:fc:10:46:26:ae:
81:73:df:da:2b:1e:51:08:51:8e:f9:25:a4:53:08:b1:ed:e0:
b7:39:29:d9:1f:16:fa:44:18:5e:a9:0d:f4:0c:c9:bf:93:4f:
fe:5c:e5:e0:5b:d8:41:6d:a5:f4:71:b3:cd:e6:f4:13:cd:0a:
eb:9e:37:85:de:8b:d0:f7:5b:64:79:98:1a:4d:3a:a8:c2:74:
5d:4f:95:df:32:53:2b:f7:63:f2:83:11:b8:1b:35:fa:30:38:
5f:62:5c:1b:36:f4:cf:cc:16:94:96:c1:66:3f:8c:0c:01:41:
3f:de:04:b4:a5:9f:bf:7b:33:50:0c:51:ed:00:65:2b:70:4f:
6e:29:82:f0:7c:56:9f:3a:96:f4:05:19:89:68:98:a6:23:b6:
7a:87:1e:27:3e:03:8c:30:62:77:5f:fa:7a:23:5c:0d:3a:56:
d0:04:f6:9f:21:5e:72:0b:f8:5f:76:57:2a:ba:35:fd:9e:c5:
7e:4d:bd:76:61:66:5f:fb:db:f5:13:31:0d:f2:57:fe:0e:ce:
c4:bc:d7:22:e0:44:e9:d6:d5:fb:a1:54:0c:0c:3a:fe:7a:fa:
02:8d:fb:a2:20:95:26:f4:bb:d8:67:03:b1:c8:54:eb:f8:c5:
3a:32:93:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:16 2025 by rpki-client