Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
File: _lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft (raw, json)
Hash identifier: s8kr2csqAQ0DZYbzX4/djbsSJ7EHvUVHUEFGAdIT5hc=
Subject key identifier: 3F:98:20:D0:BB:61:ED:10:87:41:53:62:32:FD:9C:7F:34:9A:84:BB
Authority key identifier: FE:51:BD:A6:CD:C8:98:F6:74:44:1F:CE:5C:74:21:B4:6F:61:1D:59
Certificate issuer: /CN=fe51bda6cdc898f674441fce5c7421b46f611d59
Certificate serial: 019770E36E29F76DC1AEF19EBC30FAEBD138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
Manifest number: 45
Signing time: Sun 15 Jun 2025 00:00:42 +0000
Manifest this update: Sun 15 Jun 2025 00:00:42 +0000
Manifest next update: Mon 16 Jun 2025 00:00:42 +0000
Files and hashes: 1: _lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl (hash: PsT1TQlwIpfmpDmI1mO6BCWuS99Ao/vt8/QU7Xrp/+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:6e:29:f7:6d:c1:ae:f1:9e:bc:30:fa:eb:d1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe51bda6cdc898f674441fce5c7421b46f611d59
Validity
Not Before: Jun 15 00:00:42 2025 GMT
Not After : Jun 16 00:00:42 2025 GMT
Subject: CN=3f9820d0bb61ed108741536232fd9c7f349a84bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:fc:d8:82:b7:aa:87:8b:e6:23:38:31:16:
6d:19:9e:25:43:cb:17:38:0b:10:f2:ff:00:12:6f:
88:4a:1b:15:ce:99:4f:3f:0d:d1:7c:f3:b6:9f:73:
39:44:f4:0f:5b:1a:cd:68:f1:a1:58:51:32:ee:88:
9d:28:06:3f:5b:e2:19:7e:20:71:c8:a9:20:60:57:
99:fb:e3:aa:ae:2a:c2:4d:95:a9:2e:0c:25:20:0b:
0e:11:d5:00:63:e9:25:2f:17:4f:13:bc:8c:7f:a8:
ad:30:33:17:1b:48:df:af:77:6f:e0:24:40:68:4a:
d7:bc:1a:2e:73:aa:aa:ec:b2:65:bf:30:01:02:75:
6f:3f:36:2a:1a:8b:66:38:99:56:ab:bb:3a:61:83:
e8:cc:90:32:b6:3d:2f:e4:d0:0b:bc:03:7f:d1:33:
c3:25:cd:f9:85:54:11:c7:a3:af:2b:c9:e7:c7:58:
1d:b1:01:64:1d:8c:d8:06:46:09:06:e9:38:fc:b9:
e7:c8:29:54:27:f2:e8:14:b0:5b:c1:bf:f7:c3:c1:
54:83:f8:0f:e4:45:b4:12:50:d8:e7:22:3e:05:71:
dc:c9:a5:87:ca:c8:5c:25:ef:06:c2:2f:29:30:0f:
21:4b:e8:89:10:d1:fb:8c:93:91:d7:e6:15:76:ad:
a8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:98:20:D0:BB:61:ED:10:87:41:53:62:32:FD:9C:7F:34:9A:84:BB
X509v3 Authority Key Identifier:
keyid:FE:51:BD:A6:CD:C8:98:F6:74:44:1F:CE:5C:74:21:B4:6F:61:1D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:41:da:fc:4b:07:21:dc:4a:d6:18:d1:58:08:6e:13:be:6e:
b2:e8:3d:49:d7:37:0c:a5:65:b2:aa:7a:af:71:9c:00:74:0d:
42:96:7a:c9:bd:08:b4:b4:71:10:a3:4b:92:0b:21:82:f8:25:
88:6b:e7:fc:e0:c5:69:45:ce:31:ea:e8:79:d5:aa:f8:34:fd:
b8:d4:4a:99:b3:8a:b4:a8:41:69:62:83:9d:80:d8:e7:c7:d2:
2f:7a:5f:86:2d:31:da:8f:a5:72:91:51:21:c5:d9:35:ef:94:
45:09:fc:54:b3:9a:75:7e:18:71:91:49:7f:9a:41:ee:0d:80:
74:73:0e:0a:c9:06:0a:ed:be:1a:ca:99:77:83:3b:22:ad:07:
2e:0d:c3:13:ad:35:23:98:7c:65:60:4c:da:52:4c:3f:03:8a:
08:cd:4d:14:a2:c4:35:16:33:b9:95:88:0a:e8:da:2e:5c:a8:
e7:ae:8a:b5:ed:7f:0c:f9:7d:ec:98:8f:2c:23:cc:9f:be:6e:
2a:09:2b:1f:f5:b4:2d:3b:59:63:04:4e:4b:51:21:8e:1a:f9:
7f:59:58:1a:3e:d0:cb:8c:a2:74:63:74:00:69:29:d5:cd:9d:
aa:d6:eb:97:c4:61:f1:54:a7:7b:0d:8a:9f:1f:ec:7c:d2:d6:
95:c8:e3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:38 2025 by rpki-client