Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
File: feY3584h1skbVKBojiD5JBYiIjc.mft (raw, json)
Hash identifier: X+T3mH66zdusFHNQxGsOwd/E6fDgfWhm9HSapJT56KM=
Subject key identifier: 4B:2C:F5:B2:5A:22:F1:F7:75:DE:38:9C:A1:DB:C3:A2:60:D1:6E:44
Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Certificate issuer: /CN=7de637e7ce21d6c91b54a0688e20f92416222237
Certificate serial: 01974EC5AEED2BBA37C645E56E8AEEC6E612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
Manifest number: 0FE1
Signing time: Sun 08 Jun 2025 09:01:07 +0000
Manifest this update: Sun 08 Jun 2025 09:01:07 +0000
Manifest next update: Mon 09 Jun 2025 09:01:07 +0000
Files and hashes: 1: feY3584h1skbVKBojiD5JBYiIjc.crl (hash: lRgsDKeDdbW+Vq3Kteigc6ED/PczjJyIQm0X1kYaM9c=)
2: gSkIa_heLgXoxXWpRCNJvp9Xs88.roa (hash: 5vrs6puP5YdpeYb/igpgdkuukfc/yg5fXJ/pSyPNWx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:ae:ed:2b:ba:37:c6:45:e5:6e:8a:ee:c6:e6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237
Validity
Not Before: Jun 8 09:01:07 2025 GMT
Not After : Jun 9 09:01:07 2025 GMT
Subject: CN=4b2cf5b25a22f1f775de389ca1dbc3a260d16e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:a2:7e:8a:74:ac:1b:8d:26:f1:8a:ff:91:
bd:b9:12:3f:16:f1:07:f3:ee:b1:83:e1:3d:c5:9c:
ab:ed:8f:6f:d6:6e:62:9a:46:bc:a2:5e:ad:4d:92:
b2:9e:8c:ce:95:19:5b:38:50:0c:cb:28:bf:fd:77:
ba:f1:e6:12:ad:32:cb:73:60:df:61:46:d8:41:16:
70:b5:8c:ca:5c:33:1f:0f:9c:6a:43:04:50:78:70:
fe:43:a9:01:90:33:f4:b0:59:52:ae:42:2e:55:17:
d2:7c:b3:a5:6b:8f:bb:4d:b0:c0:12:fc:88:e3:37:
65:e5:24:06:19:51:1b:1e:b2:04:99:c2:f2:a9:b8:
27:01:f1:58:93:5c:5e:10:30:b7:84:89:a8:91:30:
78:ed:93:44:bb:02:01:7e:9a:6d:a0:ee:b5:5f:26:
79:fb:34:39:7d:7f:74:ae:2a:9b:8e:b4:b9:a2:43:
fd:94:30:f0:83:d0:89:1d:4c:21:74:24:83:13:3a:
a3:a7:f9:e7:f0:4e:c8:f9:32:47:df:db:77:fe:55:
50:85:06:8a:4a:54:32:7a:a1:e1:85:d5:0a:f8:df:
00:e4:92:d2:a2:5e:ee:aa:bd:72:41:e0:11:a7:54:
3c:b7:e7:9d:62:21:c1:3d:4f:45:6b:2c:f0:ce:bd:
4c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2C:F5:B2:5A:22:F1:F7:75:DE:38:9C:A1:DB:C3:A2:60:D1:6E:44
X509v3 Authority Key Identifier:
keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:bc:08:ba:12:82:ea:db:d6:44:09:db:0f:6a:fc:2f:00:7a:
7c:26:dc:71:67:82:02:ca:6a:47:19:3c:cf:c9:d7:2e:fa:88:
da:ef:63:ce:11:98:d8:fd:5c:f5:c0:08:ef:47:f1:d3:5c:32:
9c:cb:23:d3:31:c1:41:2d:8e:ed:56:cd:ef:cf:56:a7:66:86:
c3:d2:e1:bf:60:38:92:ad:14:f4:27:db:ca:bc:57:3c:11:c7:
64:4d:fb:60:36:27:55:16:5c:45:3d:6b:56:5a:89:c7:fc:2c:
ad:f3:20:9f:63:43:37:49:ab:37:5c:c3:a6:13:26:42:ea:7a:
c3:de:50:6a:e9:57:e2:c8:32:10:9f:1f:f5:94:73:28:1b:24:
d6:e7:e4:3d:cf:1a:ac:b8:d1:13:8b:40:2a:8d:13:be:8c:45:
0f:3d:2d:41:d5:90:ae:3e:16:06:a6:0b:58:3d:25:d2:1e:69:
f8:9e:b7:37:ab:c6:f5:c0:55:ec:28:48:4b:ee:70:03:64:81:
4d:1c:fe:76:7b:d5:a8:da:ba:83:70:05:ee:f3:51:06:1d:e5:
f3:bd:d5:c2:07:26:8a:2a:da:cd:c7:5e:7b:17:08:7a:4b:84:
f3:58:24:66:52:bb:92:ba:c9:a1:27:95:8d:19:c5:b8:b4:e9:
75:7a:84:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:37:47 2025 by rpki-client