Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
File: _s4nFs6tjACFRiJL5LVocIaD_0s.mft (raw, json)
Hash identifier: FdTn8Pu+OEK603FV/aL6giT7xaReSbMmxLQg2HH/4C4=
Subject key identifier: E0:EE:A1:BA:1F:FC:DA:B2:E2:98:34:3B:00:6D:D3:42:88:E6:BE:3D
Authority key identifier: FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B
Certificate issuer: /CN=fece2716cead8c008546224be4b568708683ff4b
Certificate serial: 01976BF4114D065A4C96FFE78B41C8C25D1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
Manifest number: 14EB
Signing time: Sat 14 Jun 2025 01:00:46 +0000
Manifest this update: Sat 14 Jun 2025 01:00:46 +0000
Manifest next update: Sun 15 Jun 2025 01:00:46 +0000
Files and hashes: 1: _s4nFs6tjACFRiJL5LVocIaD_0s.crl (hash: ksoF7clx2k4FsytuJZr7IRP9h5YfjN9aIuVdoiwwNY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:11:4d:06:5a:4c:96:ff:e7:8b:41:c8:c2:5d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fece2716cead8c008546224be4b568708683ff4b
Validity
Not Before: Jun 14 01:00:46 2025 GMT
Not After : Jun 15 01:00:46 2025 GMT
Subject: CN=e0eea1ba1ffcdab2e298343b006dd34288e6be3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4d:33:30:43:e3:97:ed:14:e4:ef:9f:1c:c7:
ad:ea:a4:b0:96:ee:49:6f:b9:9a:fe:c4:e9:13:a4:
8e:8c:05:10:18:c6:07:14:f6:23:9d:4a:05:06:10:
90:79:cd:69:48:31:c8:84:2a:11:f9:79:f3:91:29:
c6:6c:8c:47:a9:bb:ce:8d:79:80:d5:08:73:af:d6:
32:84:4c:48:f3:67:e4:70:b8:25:ba:da:0d:4b:ac:
43:7d:8d:9a:b6:34:d2:54:b4:b6:ea:ce:24:2f:d7:
45:49:37:ee:db:0f:43:ec:90:20:12:3a:fd:5a:59:
ef:62:32:b4:7e:da:2f:2c:5d:f9:d0:2d:86:fd:bd:
dd:8f:9c:14:26:3d:8d:07:f5:5b:2c:98:dd:19:00:
83:59:5c:ed:d9:2b:c5:dc:e1:d7:da:30:be:c2:71:
4e:e4:a9:c0:9b:55:28:53:c7:af:cc:d4:a8:81:05:
84:c6:a8:b8:2f:6b:5c:98:cb:6e:54:a6:13:6e:98:
73:bb:d5:5c:83:53:4c:f8:ab:4e:85:3a:cb:58:33:
0c:b2:d4:e2:23:7f:14:cb:fa:a1:01:6c:06:c5:54:
9e:e2:18:8d:af:6b:ab:d5:3f:ea:94:c8:5e:8f:33:
40:2a:65:a3:12:4d:f6:ca:02:90:57:4c:40:c0:31:
e2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EE:A1:BA:1F:FC:DA:B2:E2:98:34:3B:00:6D:D3:42:88:E6:BE:3D
X509v3 Authority Key Identifier:
keyid:FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ef:ba:ec:9b:dc:4b:77:9e:8a:12:ff:ce:15:eb:59:c1:26:
9f:70:46:7f:92:0c:c3:79:22:5c:4c:24:b1:47:a3:fa:ef:71:
a6:c0:96:19:fc:88:93:a1:0a:dd:e1:dd:65:83:05:28:cc:ea:
ef:d2:31:e3:ea:01:e9:79:46:7f:ab:5c:05:2e:d3:37:6a:c6:
36:ef:df:1b:a6:61:a6:37:7c:77:c8:a6:39:8f:02:71:e1:32:
4a:5b:c4:a9:e4:37:38:ea:54:4e:8f:d0:cc:eb:35:64:28:bf:
32:23:f4:56:70:0a:9c:dd:35:60:12:e0:62:62:ea:75:94:7d:
5f:f4:d6:0c:18:e1:b0:a7:e8:7b:aa:bd:4a:68:c3:6b:da:1d:
a0:66:ae:0c:dc:5b:d2:98:fc:29:c7:4c:1d:6b:9e:cb:2c:0e:
70:55:9c:63:b1:6d:aa:04:b4:b6:e1:a1:b0:f4:db:1a:c5:b1:
7d:2f:2a:5a:9f:e2:c0:94:c3:d8:7d:76:07:ba:af:d9:e2:8d:
39:bd:fa:8c:e5:fe:db:e9:b2:ca:f5:d4:7b:12:6f:b4:c9:89:
d2:89:30:b5:86:59:75:2a:23:d7:d8:ab:1b:f8:4e:72:8a:ab:
95:6c:ca:18:04:94:23:71:f1:88:99:85:ed:e0:6d:70:ac:73:
0b:dd:46:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:53 2025 by rpki-client