Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
File: fbq8m8nDq4pzmius48V7AvRFkOs.mft (raw, json)
Hash identifier: /edvAgqxBU8iJZwUTRWtUaLsrvLYrOqIyM34ExD3mTw=
Subject key identifier: 60:19:53:B5:12:73:43:07:9C:C6:F2:C3:18:0C:53:7A:93:59:32:74
Authority key identifier: 7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
Certificate issuer: /CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Certificate serial: 01977DFAAED2D331477BEDFDB4C80452C41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
Manifest number: 1594
Signing time: Tue 17 Jun 2025 13:01:10 +0000
Manifest this update: Tue 17 Jun 2025 13:01:10 +0000
Manifest next update: Wed 18 Jun 2025 13:01:10 +0000
Files and hashes: 1: fbq8m8nDq4pzmius48V7AvRFkOs.crl (hash: zhIhXUV42HsiItdKSaJkh50ciWeJ4PnEQ9MOPYU4Xl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:fa:ae:d2:d3:31:47:7b:ed:fd:b4:c8:04:52:c4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Validity
Not Before: Jun 17 13:01:10 2025 GMT
Not After : Jun 18 13:01:10 2025 GMT
Subject: CN=601953b5127343079cc6f2c3180c537a93593274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5a:a3:4e:49:ac:19:e6:d1:a2:51:2b:e6:c6:
02:5c:67:4b:eb:b2:ea:08:dd:55:a9:c0:dd:94:6f:
8a:16:9c:e5:99:99:a2:d1:7f:b3:b6:95:23:58:b2:
dd:83:1b:b8:26:5f:15:d5:d1:8b:cb:f7:da:39:d4:
18:7c:e5:1a:c3:c1:af:ad:fb:57:72:af:46:ba:58:
3b:1c:97:f1:51:f0:35:d1:b4:d8:b2:89:a8:24:06:
6a:ef:5d:b4:fd:32:1e:d8:1f:b1:c3:15:e6:6f:0f:
0e:47:ed:40:8f:74:4e:90:b5:6f:5d:7b:4a:de:c0:
96:b7:75:6f:42:21:39:76:50:78:58:c0:d8:1e:84:
cb:38:e1:1b:f3:a7:91:a1:b6:ed:a7:1e:bb:81:fa:
45:08:c1:0b:e2:31:5f:5b:d3:d1:76:c3:61:12:9d:
48:86:d7:83:71:21:e3:34:16:f8:aa:ee:9d:4f:11:
62:9b:22:3c:9f:ae:d0:ff:cb:1d:af:1f:ed:7f:56:
87:47:09:85:9e:4c:6a:05:c6:82:cf:38:a5:9b:a8:
8a:7a:5e:5e:81:50:93:b6:43:aa:7d:5f:89:c9:78:
c3:cd:4e:b4:88:9e:38:8a:ab:61:d3:0b:67:fb:cd:
79:05:18:5f:c9:6f:57:04:05:25:8e:54:e1:69:8e:
27:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:19:53:B5:12:73:43:07:9C:C6:F2:C3:18:0C:53:7A:93:59:32:74
X509v3 Authority Key Identifier:
keyid:7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:25:c3:aa:ad:47:a0:3a:43:59:4f:f4:de:46:b4:58:4e:d7:
1b:31:42:09:e6:cc:77:30:c4:9b:2f:df:5e:d8:ed:5d:1b:11:
76:b3:62:71:bd:35:68:a9:12:ed:ac:49:55:bd:3c:09:fe:47:
59:c7:56:7a:f9:5e:65:ab:2a:c3:3a:89:26:7e:38:57:b8:7c:
63:a5:f4:d1:61:0c:63:29:2d:56:77:bf:6c:59:d6:fa:7d:0c:
86:1b:83:5c:33:63:bf:08:c7:b6:2a:e7:7b:b1:8f:13:b6:04:
d6:69:d7:48:26:bf:88:ab:cd:25:f5:6d:93:58:bd:1e:85:ca:
83:c4:af:a5:52:0b:65:4f:42:45:ee:11:ec:09:c6:f4:e4:eb:
41:b4:9c:ac:1c:c4:4e:ee:a9:51:19:a7:15:2b:21:9c:5b:46:
32:35:53:7b:d1:95:f5:51:e1:26:41:8c:14:71:df:44:02:ff:
63:ac:8f:3e:cb:c4:e1:bb:05:40:db:38:13:82:22:2b:dd:c4:
8d:f4:a0:a3:e4:c6:ba:e0:0b:b1:f6:b1:87:63:96:55:ed:e6:
e8:94:ba:8b:4c:0b:c5:c9:5f:95:8c:1e:1b:06:bf:47:5d:bc:
e2:e9:68:8d:c6:3c:fe:b1:a5:94:e6:f3:74:3a:76:cd:d0:eb:
b7:a3:67:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:15:37 2025 by rpki-client