Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
File: fPl3gtbyAqcBg2capjDHOrozMH4.mft (raw, json)
Hash identifier: TrqJ3ehR/299GnJ41KpRS88KfLD6+glJLkQEc2p2Qms=
Subject key identifier: 23:4A:BF:7D:80:97:F1:9D:0B:D0:0A:63:4A:BE:A5:F9:CC:4A:8B:49
Authority key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
Certificate issuer: /CN=7cf97782d6f202a70183671aa630c73aba33307e
Certificate serial: 01976BBD394AA84B85F1115084D5CFAFE01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 00:00:52 +0000
Manifest this update: Sat 14 Jun 2025 00:00:52 +0000
Manifest next update: Sun 15 Jun 2025 00:00:52 +0000
Files and hashes: 1: fPl3gtbyAqcBg2capjDHOrozMH4.crl (hash: oIjMmZgembaQp4fcD37bqWmyxHeZl+pggzJhzUlmpRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:39:4a:a8:4b:85:f1:11:50:84:d5:cf:af:e0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cf97782d6f202a70183671aa630c73aba33307e
Validity
Not Before: Jun 14 00:00:52 2025 GMT
Not After : Jun 15 00:00:52 2025 GMT
Subject: CN=234abf7d8097f19d0bd00a634abea5f9cc4a8b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:83:6c:a3:aa:0b:ae:a5:c2:7a:98:fb:7c:
f3:04:a2:2f:cf:5a:04:3a:6b:3b:f1:52:a1:ca:4f:
89:a3:ad:e7:7f:dd:65:ac:1e:f4:c5:a8:a5:db:09:
fc:9c:16:f1:5f:f4:1a:23:1f:33:8c:c1:3d:d3:b7:
ae:f5:48:b0:90:9f:fb:ca:01:85:3a:4f:7a:93:22:
b2:2f:8e:8c:b2:0c:7e:d3:de:e8:87:25:3c:fc:20:
e4:96:00:6f:69:3c:29:b4:82:1b:7d:15:50:63:51:
64:b7:7e:7c:7f:d1:a4:a2:70:ae:e1:f5:28:73:96:
16:6f:94:21:4d:42:21:25:18:66:4e:86:42:94:a7:
49:91:35:f7:0a:1d:07:8a:93:f0:4b:42:92:43:cd:
c1:05:ea:05:91:61:93:ba:a8:2e:9b:ce:97:9c:07:
83:2d:1a:83:07:1b:ab:06:4b:93:3d:b4:08:b4:f6:
c3:58:ab:e2:8b:13:77:6f:9e:5a:98:e3:25:3d:b0:
8e:51:a2:8e:59:ee:db:fb:71:77:b7:19:bb:1b:3d:
b9:b4:56:42:fe:54:e3:04:37:8d:0b:bb:32:cd:db:
14:ba:8f:8a:a9:4d:3d:b5:c3:56:e8:b5:52:fd:3b:
52:44:74:bf:9d:56:32:b8:7f:34:02:8c:51:e4:1f:
3b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4A:BF:7D:80:97:F1:9D:0B:D0:0A:63:4A:BE:A5:F9:CC:4A:8B:49
X509v3 Authority Key Identifier:
keyid:7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ac:54:a8:9c:34:02:79:a7:13:71:be:8e:f6:ef:a7:60:ac:
8f:2a:ec:bc:3e:60:87:76:d6:57:c7:04:36:fd:2c:1a:a9:25:
e2:47:5a:9e:58:de:28:22:12:a8:f4:68:0a:3d:b0:53:94:23:
c3:a7:c0:0f:92:38:22:aa:11:2a:b1:a7:04:47:64:b3:5f:b2:
ba:9c:de:48:c8:cc:36:f3:a1:15:17:b9:5c:50:aa:8c:4d:ff:
fa:94:d2:c9:4f:8c:f5:c3:80:de:42:b5:47:3a:0e:4d:f5:0d:
8b:e5:63:59:a4:9f:57:ce:3c:79:18:1e:14:21:61:54:93:a8:
4f:be:77:dd:63:34:53:bb:c9:80:85:03:72:0a:ae:ce:1b:77:
0d:44:f3:f0:96:16:29:40:89:e5:74:35:0b:91:4b:50:56:69:
76:b7:33:34:6f:eb:95:49:36:ba:4c:29:b0:cc:87:44:60:1b:
ad:da:3c:29:2e:18:c6:3c:52:eb:3e:c6:67:6b:58:e4:d7:81:
36:e6:33:96:27:ed:28:7a:93:ba:0a:f7:c1:5a:2e:2c:e7:6e:
78:dd:5f:77:44:76:99:a2:06:bd:02:0b:a1:49:68:68:a5:25:
32:70:79:e7:2c:72:26:76:6e:b6:82:da:2f:07:c5:e5:f5:b8:
68:32:27:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:15:28 2025 by rpki-client