Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
File: fQ9TBOHZKWjpheNo6E833TZw71w.mft (raw, json)
Hash identifier: TiH2qzUb55d5047gPCz6WLIv7OpOXR08hw3bd1LlcTs=
Subject key identifier: 91:5B:7D:7D:34:AC:C7:74:35:04:64:4F:C7:BD:5F:57:FB:86:49:C2
Authority key identifier: 7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C
Certificate issuer: /CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
Certificate serial: 0197827C0EDBACE228E7CEA60CF2721D12DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
Manifest number: 0CDE
Signing time: Wed 18 Jun 2025 10:00:57 +0000
Manifest this update: Wed 18 Jun 2025 10:00:57 +0000
Manifest next update: Thu 19 Jun 2025 10:00:57 +0000
Files and hashes: 1: fQ9TBOHZKWjpheNo6E833TZw71w.crl (hash: 55TzP0Vkdi28YKHcLM8v637L/+uWQVmcRIBOtRoKiLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:7c:0e:db:ac:e2:28:e7:ce:a6:0c:f2:72:1d:12:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
Validity
Not Before: Jun 18 10:00:57 2025 GMT
Not After : Jun 19 10:00:57 2025 GMT
Subject: CN=915b7d7d34acc7743504644fc7bd5f57fb8649c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:50:95:8a:e8:2b:a1:0f:3f:3e:9a:84:20:
f1:51:fe:e9:71:4f:69:cf:c8:07:17:66:e8:8c:2d:
09:9e:af:67:2d:f8:e3:83:b4:84:5b:d8:74:4d:44:
f0:4f:6e:e5:22:1a:ef:0d:1f:73:e1:c7:8d:47:83:
f2:c7:cc:a1:05:b8:29:75:0b:0d:d3:0d:77:14:0a:
1e:b7:fa:3e:64:f9:82:8f:4b:ab:93:69:b1:5f:56:
2d:9d:8b:02:d2:ae:61:69:e6:b1:bc:fc:7a:bd:b1:
bc:1c:28:8f:a0:20:f1:c4:2e:50:f8:ff:15:28:b7:
59:41:cc:60:b7:07:83:66:05:34:4d:7b:58:ab:d6:
ad:5a:06:9b:64:71:5d:9d:f9:67:35:34:6e:31:2e:
5d:6b:58:84:c0:e7:ab:23:19:ee:12:3c:a5:d7:5d:
52:bd:e6:b4:05:e8:5a:57:54:49:9b:10:a4:22:b9:
40:82:90:22:bc:d8:93:b0:00:97:72:95:25:4c:19:
ee:0f:90:44:ae:33:1b:ed:c1:0f:f5:42:80:05:90:
dc:19:d6:77:d7:37:ed:1e:6a:4b:50:e3:13:5b:aa:
1c:9f:5f:f1:75:0b:a9:e4:2d:51:20:2a:a9:50:ca:
52:ed:2e:27:b2:46:96:81:51:0f:7c:b4:17:ec:d8:
f1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5B:7D:7D:34:AC:C7:74:35:04:64:4F:C7:BD:5F:57:FB:86:49:C2
X509v3 Authority Key Identifier:
keyid:7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:bb:a9:0a:6b:8d:03:d2:bf:f9:f3:ee:77:57:f9:eb:31:10:
ea:80:4d:33:4e:c2:6a:9f:0f:a1:fe:81:f9:6e:f0:9e:d0:4f:
47:f7:9b:42:64:cd:da:f4:07:74:6b:51:f1:e5:20:fd:00:27:
29:2d:ca:f8:71:5f:ca:f7:a1:51:9a:ed:8d:01:06:65:27:a1:
47:b9:b4:86:94:cb:5c:03:3b:3f:7a:ad:ab:c0:f9:15:e7:86:
a6:2c:9e:de:39:38:c3:14:7d:71:a4:e6:a7:c2:e4:25:27:57:
bd:cf:8e:f6:86:f5:c0:e9:87:80:e9:4b:1c:e4:55:c6:2f:9d:
59:44:ec:be:ba:56:d5:26:d9:3a:08:0e:e9:b8:b1:a7:d2:b9:
c3:71:57:5c:44:12:43:8e:81:19:c8:cd:30:b8:71:4d:0a:86:
b5:0f:1b:e8:e0:92:70:52:62:fd:80:bf:35:4d:5f:29:57:48:
97:3c:d7:79:5e:09:fd:d3:d2:93:5e:bb:14:b8:ad:d3:6b:6e:
95:39:55:24:db:d1:c5:80:2e:42:bd:dd:a5:80:b9:dc:a8:8d:
55:5d:fe:79:dd:1d:c7:b4:8e:d5:67:e3:35:68:ea:91:b3:ba:
83:97:be:db:a3:95:64:eb:bc:31:e2:88:64:6c:62:63:15:91:
10:59:86:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:09:10 2025 by rpki-client