Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
File: f1Eig3R0LfVEqpMFjFo709FkIZk.mft (raw, json)
Hash identifier: +QIMGqlBuVAkrMoDc0t7kTX6wDq1DF+6swWIF7W2WkI=
Subject key identifier: 52:95:42:3B:5B:81:FC:C3:2A:E0:09:52:A8:B5:AF:A6:EA:68:98:A7
Authority key identifier: 7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
Certificate issuer: /CN=7f51228374742df544aa93058c5a3bd3d1642199
Certificate serial: 01974AB18E7816583DA4E0A5CE8BA512E4A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
Manifest number: 0CED
Signing time: Sat 07 Jun 2025 14:00:39 +0000
Manifest this update: Sat 07 Jun 2025 14:00:39 +0000
Manifest next update: Sun 08 Jun 2025 14:00:39 +0000
Files and hashes: 1: f1Eig3R0LfVEqpMFjFo709FkIZk.crl (hash: b7VJQqOQi9eqWPHBGeB/24LMY+eaEoHhWCwdPQJhx0o=)
2: uNHn3nGofmcHl4lM7HkivQe_5zI.roa (hash: P5wPJ1eLs+Pe8c3zQ6YiOWLNnnfuv2xAEXiikikIGBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:8e:78:16:58:3d:a4:e0:a5:ce:8b:a5:12:e4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f51228374742df544aa93058c5a3bd3d1642199
Validity
Not Before: Jun 7 14:00:39 2025 GMT
Not After : Jun 8 14:00:39 2025 GMT
Subject: CN=5295423b5b81fcc32ae00952a8b5afa6ea6898a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:53:ba:e6:44:57:c4:da:ca:86:ef:50:b3:2b:
a9:2e:97:1f:98:cd:63:f5:30:1c:80:3e:4a:69:44:
f5:67:a8:9e:b1:19:5d:6a:86:e5:d5:85:8f:2f:05:
3a:3a:da:96:06:1f:a6:5d:2e:0a:e1:c9:f3:da:e8:
22:0b:8c:8f:b8:3e:cc:0b:90:22:29:a1:5e:52:88:
63:0d:62:35:ff:17:0f:f1:46:ed:18:18:c3:ef:10:
90:fd:95:9e:a6:c2:4a:88:bd:32:a1:e2:85:44:b2:
d5:5c:04:12:c1:0d:90:39:88:0e:c3:c0:99:fe:92:
6b:39:70:67:2c:fd:dc:94:54:25:d7:31:d4:dd:9d:
15:db:e8:c5:99:92:ae:e7:72:89:63:d1:c6:c1:b3:
d2:aa:9a:f9:56:1f:f2:e1:ac:a7:85:fc:a4:e4:b9:
79:2c:ba:c9:a8:90:90:62:dc:d3:68:27:01:50:a0:
21:f9:e0:45:37:96:5b:18:d7:df:1c:b2:57:24:9e:
ae:ac:03:cc:1a:cf:2f:9d:fd:53:6c:39:dc:aa:a3:
4e:c4:c1:ee:06:33:3e:9d:ec:f7:40:a9:d7:a6:29:
f9:37:fc:98:2b:f5:cd:da:2f:42:75:ce:6e:82:75:
ea:38:d2:6b:f0:2e:c8:6d:32:84:05:42:4a:ad:7a:
0e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:95:42:3B:5B:81:FC:C3:2A:E0:09:52:A8:B5:AF:A6:EA:68:98:A7
X509v3 Authority Key Identifier:
keyid:7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e8:a4:73:c0:90:49:73:ff:ee:06:e8:c9:20:f2:8c:09:9b:
40:08:74:6c:44:19:01:ad:c3:88:6c:45:83:93:b9:d3:3f:55:
96:2e:9d:74:f4:67:7a:74:b2:f4:30:1d:cf:3d:3f:34:57:19:
13:d4:91:30:6f:6d:b0:04:69:69:6c:15:f5:89:2c:e0:dd:45:
90:19:18:a5:a8:d1:d9:71:8a:f8:1e:c2:4b:64:ab:52:d4:4d:
29:6f:ab:f7:cd:92:8b:2c:a0:b5:40:8e:ff:10:37:26:48:52:
14:fc:f5:46:76:24:dc:d9:88:fc:d6:5e:01:4e:b8:b7:4d:39:
f4:d8:88:c2:2f:6f:16:cf:67:3f:4c:65:1a:58:3a:95:3c:26:
61:be:05:bd:fc:c9:8e:36:50:f2:77:53:2f:67:5f:41:74:02:
5e:f6:13:23:2d:3e:65:e8:1d:48:24:af:5e:06:fd:28:79:a1:
1e:d3:90:93:41:79:7c:26:21:7b:cd:29:f0:93:54:fd:5c:0f:
33:ab:27:11:8c:6e:f0:17:3a:74:63:df:0e:56:ac:fb:37:23:
b7:ab:29:57:a8:ab:7c:3b:f9:38:ab:b2:e0:d4:5d:9b:12:1b:
cc:d7:41:cc:0a:e7:68:e2:32:58:9c:63:4d:94:d7:22:b1:e5:
f1:bb:55:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:45:33 2025 by rpki-client