Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File: fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier: tY+BZ3mGcBSqlugGq6V6kFo2S78WCskizWvQgefJfq4=
Subject key identifier: 55:08:21:20:B0:C2:9F:20:FE:02:2E:0A:37:F9:89:21:32:10:F8:22
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer: /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial: 01974D7BA5DEAE65D3199C0307E70A2E251B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number: 010F
Signing time: Sun 08 Jun 2025 03:00:38 +0000
Manifest this update: Sun 08 Jun 2025 03:00:38 +0000
Manifest next update: Mon 09 Jun 2025 03:00:38 +0000
Files and hashes: 1: BJ7sjp5ibHEtMZwGH8QOSgEVeks.roa (hash: vdUAgWFb0/ninRNnqapYY+qZwNPE4UbocwPx101zVCg=)
2: JyAstjJnRnfKpE7boFngTUQKsSI.roa (hash: QeCPc7sTPqsvq1vdnmx1h5/hFMLBuSHfMUEgszAKgAc=)
3: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: uVQpb9yCl/dzkxGAhAoFKfvjiRkoHaYHN2b5VnhryIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:a5:de:ae:65:d3:19:9c:03:07:e7:0a:2e:25:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Validity
Not Before: Jun 8 03:00:38 2025 GMT
Not After : Jun 9 03:00:38 2025 GMT
Subject: CN=55082120b0c29f20fe022e0a37f989213210f822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3b:dc:8e:11:43:1f:2d:10:43:87:c3:81:97:
da:14:0d:cb:47:87:ac:f4:42:5b:65:d9:6a:5e:01:
96:c3:3b:d3:95:01:77:f0:5b:29:12:9c:9d:0a:be:
02:d8:86:56:6e:e9:75:ca:67:65:67:fa:44:53:17:
89:1b:6e:c4:6c:59:68:c9:96:7b:f2:2b:e6:41:d4:
36:35:e8:f5:d6:0c:91:32:83:db:4a:a9:e5:02:9c:
a8:59:13:cf:f7:aa:cc:27:b4:2b:64:90:1d:34:3e:
bc:43:dc:21:6f:11:12:24:4c:0b:3e:07:9c:d9:0b:
15:e4:4a:ab:c4:0c:26:a8:90:76:cc:a6:f0:9d:99:
93:79:e4:5e:2d:19:79:3d:4f:e1:de:26:4a:b5:7f:
a4:f0:78:52:1d:d2:5a:54:df:0c:01:e9:0a:63:29:
21:15:09:6d:71:bd:c2:c3:09:bd:ca:5e:ad:96:51:
05:60:55:62:da:2a:bd:07:ea:01:95:59:2e:32:08:
e8:20:4f:ac:ce:5b:13:c8:ed:b3:68:59:d3:f3:ea:
14:fc:49:f9:4a:65:8c:10:71:48:d2:c8:fe:f0:bc:
de:0a:03:d7:0b:95:2a:53:4a:6c:b1:87:67:dc:60:
56:0f:11:0b:08:98:23:e3:39:50:e1:08:30:f8:7c:
42:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:08:21:20:B0:C2:9F:20:FE:02:2E:0A:37:F9:89:21:32:10:F8:22
X509v3 Authority Key Identifier:
keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d0:89:64:08:16:5f:18:94:30:c2:ca:ec:ad:eb:b4:bd:15:
9f:5e:46:c2:c0:c3:64:0a:a9:50:d2:68:a5:5a:0f:0f:a2:51:
b3:a6:36:bc:69:ae:c6:7e:c2:6c:c1:c8:7c:72:53:86:37:4b:
51:44:0d:bf:32:54:74:8b:61:07:fa:19:70:0c:47:73:a7:66:
13:2d:c8:0a:18:f5:29:d8:ef:42:4d:f5:53:cf:99:9d:a9:51:
1c:71:d0:36:36:ab:01:ee:3c:5d:6f:4d:f5:ba:20:6e:3c:ec:
fd:f1:17:af:be:8f:54:a1:4f:4d:cb:2b:e0:e6:11:d9:e9:df:
3b:5d:06:d8:e0:07:40:84:c8:ea:c1:59:28:6a:0d:e6:87:49:
54:13:89:90:27:62:a2:3f:a4:0e:68:82:80:68:9e:4f:05:2f:
c9:7c:76:9a:0d:fa:93:9f:79:6e:04:c0:1d:fe:da:ab:2c:ee:
61:48:5a:d8:64:8b:69:4b:54:6e:83:47:f3:55:4b:42:5b:57:
d9:45:e6:7b:96:02:6e:37:2e:23:59:9b:6f:d1:49:ef:6b:4f:
c6:bc:85:8c:7e:f7:44:45:93:d9:e8:28:83:18:62:02:b4:3e:
ed:f2:1e:ae:92:ca:54:58:17:d0:d8:67:cd:de:2b:5e:98:20:
26:ae:32:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:48:41 2025 by rpki-client