Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
File: fIbxOptyHNGGn7uXTuU9kAIuqiw.mft (raw, json)
Hash identifier: erXo5iWUFAy57iKG20Wmekz/l9DPKSn1NbO1wS/nJmM=
Subject key identifier: BE:28:E8:F8:DF:2A:2A:8C:02:56:A4:45:A2:AD:23:6C:3A:F6:15:31
Authority key identifier: 7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
Certificate issuer: /CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Certificate serial: 0197586D1DE01BBC0111807212C7F6BDB38B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
Manifest number: 0610
Signing time: Tue 10 Jun 2025 06:00:35 +0000
Manifest this update: Tue 10 Jun 2025 06:00:35 +0000
Manifest next update: Wed 11 Jun 2025 06:00:35 +0000
Files and hashes: 1: DsE5_TUYYo0BXf2JDy40SB8tAVY.roa (hash: MUCKDFIZgUo4hnT7lKbmN/TrcbbCDZIEWfPYHOszsj4=)
2: fIbxOptyHNGGn7uXTuU9kAIuqiw.crl (hash: 9t49LvuAs0b17f2xRXWCiJqVxoOxvKNz5fJqVGGVa8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:1d:e0:1b:bc:01:11:80:72:12:c7:f6:bd:b3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Validity
Not Before: Jun 10 06:00:35 2025 GMT
Not After : Jun 11 06:00:35 2025 GMT
Subject: CN=be28e8f8df2a2a8c0256a445a2ad236c3af61531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:34:aa:56:c0:56:3f:7f:4b:6b:10:ea:2e:
dc:2a:42:6b:60:dd:d1:27:15:b2:d7:db:23:a1:2d:
44:8b:c7:06:7f:21:dc:38:fa:70:48:cc:c3:f0:93:
15:96:43:a4:09:5b:fa:c8:ce:30:76:97:70:13:e8:
6d:15:4c:00:6a:34:b3:7e:b3:55:69:d4:53:88:37:
22:08:fc:a4:0e:0b:5b:d5:60:8a:b6:4a:14:fb:17:
ba:ae:1e:3d:93:84:4b:c9:87:0a:9f:99:17:68:bf:
24:bf:03:20:41:41:7a:ca:ce:b1:40:19:2f:ec:36:
dd:77:61:de:f9:b6:ca:75:67:41:ab:20:b4:94:41:
7e:e5:92:30:0b:bf:a1:59:fb:c5:84:71:03:e6:d1:
80:42:de:1b:66:61:59:d9:eb:25:66:c0:d4:4c:d1:
66:27:b5:81:59:e9:e2:8a:5d:4c:52:43:0a:7c:0f:
64:dc:db:d7:f6:a5:f9:22:fc:6c:22:9f:b5:20:90:
61:dd:b1:a2:d5:27:5b:e7:d6:22:9e:63:d4:78:f8:
d9:bf:a6:56:3a:6d:d0:6f:63:37:ae:1b:71:39:25:
82:a8:c9:a2:dd:05:92:1e:bd:59:ad:40:48:72:0e:
c3:13:20:69:c0:eb:aa:fb:d4:2a:87:46:50:0b:4b:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:28:E8:F8:DF:2A:2A:8C:02:56:A4:45:A2:AD:23:6C:3A:F6:15:31
X509v3 Authority Key Identifier:
keyid:7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:14:be:00:23:b8:b1:de:6e:cd:f5:c4:c6:9f:aa:60:cf:d4:
63:a7:dd:a2:0b:80:9e:d9:e1:85:b4:1d:ea:60:43:55:7d:8e:
06:a9:69:a8:e3:c8:ba:15:99:63:89:9a:a6:1c:5a:18:ff:23:
f9:30:45:4a:cb:94:ae:33:af:4e:a5:a4:91:4d:56:a4:02:8d:
01:ea:55:27:fd:9e:fd:9c:1e:c9:6f:55:81:39:59:82:71:e4:
a3:3b:b0:2e:3f:00:c6:fd:0e:3f:a4:d9:bd:39:13:e1:70:b3:
25:ef:57:22:b2:04:8c:98:73:fe:fb:89:5a:31:28:86:51:ce:
3a:4c:88:6c:b7:8b:e0:89:68:3f:d9:f7:88:b2:2b:76:5a:17:
44:54:5f:6d:eb:96:f6:17:eb:20:c2:d1:fc:8d:79:f0:0d:ab:
81:9f:58:0b:09:25:f2:69:1d:41:81:0f:29:c0:43:a3:4d:4c:
31:05:34:cd:84:dd:76:3d:a9:29:4a:ac:0f:d7:6e:a5:f4:c0:
ac:66:97:49:6b:b1:da:35:d7:31:3b:29:a7:a4:a6:38:18:30:
f8:5d:ec:b0:d7:58:b7:6f:30:e0:c1:78:83:e0:ca:f5:f8:8f:
92:84:ca:6f:86:42:63:18:d3:9f:1a:dc:d9:ba:c7:e1:4a:90:
78:b2:e2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:24:39 2025 by rpki-client