Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File: ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier: hgMQs3OX72EVSjrreVIiBDYqXM3uxUvf0h3AKIvIjsw=
Subject key identifier: BD:3F:37:23:CB:8D:EE:C1:BB:2F:51:B6:44:C4:5A:40:D1:13:FC:B0
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 01974EC5B0EA2C007633A982AADB7C0B706A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number: 0633
Signing time: Sun 08 Jun 2025 09:01:08 +0000
Manifest this update: Sun 08 Jun 2025 09:01:08 +0000
Manifest next update: Mon 09 Jun 2025 09:01:08 +0000
Files and hashes: 1: 9T4HxwhZJwyiGHa48SYje1ufatI.roa (hash: 8ElIYheNmp/FmPzPS1uvi2rYFBqzm++XUQWo1OHXuE0=)
2: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: oCHPcmYzfpna0U8UYOwBQcfzEhzWj9hpbin6ZiB2U0Y=)
3: wPcEp2M9VMWvBwIJ57QAHtXrjmQ.roa (hash: IZmN+wQznsRd0N9ZJauN0q3iFAek4sQFg68+aBUWHxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:b0:ea:2c:00:76:33:a9:82:aa:db:7c:0b:70:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Jun 8 09:01:08 2025 GMT
Not After : Jun 9 09:01:08 2025 GMT
Subject: CN=bd3f3723cb8deec1bb2f51b644c45a40d113fcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:eb:e4:ea:4a:06:0c:cf:42:8b:ed:df:2b:3c:
f2:24:12:e1:69:c0:69:59:06:b0:2e:4c:e4:8d:b5:
f6:91:d1:1b:be:e6:ed:40:ac:4f:0d:a2:33:79:3f:
23:29:34:bb:4d:4f:5b:db:2f:ba:98:e2:a0:08:3b:
30:bd:e0:98:c3:9f:e5:3a:00:97:5f:32:fd:ae:c0:
0e:d5:0f:bf:90:d5:a2:12:1f:4f:dc:b5:dd:7e:dd:
38:c8:73:ef:e5:06:47:c7:4a:73:ea:15:e3:de:8b:
c8:3d:13:4b:5e:9d:62:22:af:28:9a:5d:2c:6e:ff:
4b:b4:01:1a:af:27:1a:30:d6:bc:0a:52:02:f7:97:
89:f7:8c:08:b9:1f:2a:12:f7:1f:a2:69:15:5e:4c:
b1:29:6e:d9:55:19:d8:3f:2b:79:4b:a1:16:41:0f:
20:cc:fe:05:71:8a:ed:1d:ab:4b:c7:55:5f:9e:19:
88:00:cc:95:6d:de:01:90:d1:3f:dc:d0:15:8e:e3:
e5:74:cd:2e:6e:cf:55:ba:c0:b8:d6:f1:41:6a:e0:
a9:8b:9e:b9:9d:0d:aa:aa:e4:d6:a7:08:45:e2:db:
9c:f3:42:c4:d0:96:c9:04:fe:03:43:08:c5:66:d4:
c4:f0:2c:79:cc:0e:a5:97:d7:11:1c:06:e0:11:af:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3F:37:23:CB:8D:EE:C1:BB:2F:51:B6:44:C4:5A:40:D1:13:FC:B0
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:db:7f:ea:bc:4e:ee:e2:0c:70:b8:3f:f1:5d:72:06:f6:2b:
5e:58:6f:92:69:76:70:25:f7:99:95:f9:35:03:4a:92:ac:fa:
30:d4:1c:7f:a6:ee:a6:7c:e7:d7:5f:d4:94:a2:49:73:b5:50:
31:d8:15:12:ec:43:2e:61:d2:35:8d:3d:4a:9d:43:95:2a:0e:
5b:98:60:60:ff:3f:b9:d4:7d:a9:1f:f9:60:96:25:b1:41:cc:
6f:76:73:46:b8:fd:14:c7:fc:51:20:48:cf:bc:6c:50:4a:a4:
87:fe:b8:59:e0:2b:1d:a1:d1:04:d7:75:29:da:fe:72:ef:13:
12:8d:8b:9c:33:f7:7b:63:b5:5f:22:bc:dc:80:af:4f:bb:58:
73:f6:81:0b:22:c8:ac:2c:76:0e:8c:03:04:e0:b6:c8:e6:32:
6c:34:7c:06:2a:58:41:a7:2f:cb:a0:69:53:b0:e0:26:6e:7b:
87:80:8a:30:9e:63:c4:15:f2:a0:60:3e:e7:fb:7d:72:12:64:
f1:17:22:f8:8c:b0:27:3a:39:a7:4a:8f:a1:b3:e8:d1:c7:53:
54:9f:35:ab:93:cd:dd:cc:44:b5:78:34:a5:b4:d2:e1:35:e7:
fa:48:2c:dd:63:8a:08:15:91:24:3c:e4:4c:92:c9:51:f9:9b:
91:21:35:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:42:41 2025 by rpki-client