Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
File: _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft (raw, json)
Hash identifier: CEWamnn7381W2seD6Qh/gQ7UhhwKzlraaQqmbUEckUw=
Subject key identifier: 8B:4E:E0:6D:E1:CF:65:4E:68:67:CC:48:22:47:87:65:54:85:E9:28
Authority key identifier: FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
Certificate issuer: /CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Certificate serial: 01974BFB5830FAEA2DAB499D33BAD14E34DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
Manifest number: 029C
Signing time: Sat 07 Jun 2025 20:00:52 +0000
Manifest this update: Sat 07 Jun 2025 20:00:52 +0000
Manifest next update: Sun 08 Jun 2025 20:00:52 +0000
Files and hashes: 1: _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl (hash: EQ0HWzLZFoyy+XGbYWvERHcEDo/51PZJ6E8I5tc2UVo=)
2: pa5HePIwYLGZT4FlyIIuIImBBQ4.roa (hash: bgmy9hrxpCSfMFbbUzRFuhNbtBsDHQmEsmp/I6aYk+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:58:30:fa:ea:2d:ab:49:9d:33:ba:d1:4e:34:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Validity
Not Before: Jun 7 20:00:52 2025 GMT
Not After : Jun 8 20:00:52 2025 GMT
Subject: CN=8b4ee06de1cf654e6867cc48224787655485e928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f9:c2:e6:e0:47:80:21:63:2d:0b:d7:cf:03:
ac:04:80:5b:86:42:9a:6a:fc:66:0f:72:64:8e:72:
22:5e:12:73:aa:3f:77:ec:d5:33:97:b8:0e:74:a1:
1c:14:a3:21:91:0f:0f:43:89:75:9a:4b:7e:78:48:
c6:c4:01:f8:cb:d1:83:02:dd:f5:10:05:7c:2d:79:
50:35:20:8a:7d:ad:16:11:1d:17:9e:71:5b:de:4e:
78:a5:5d:a6:f5:a7:7c:57:8e:59:df:e8:19:82:fb:
84:59:71:da:00:f2:bf:39:92:18:cb:15:ef:27:23:
50:7c:2d:ed:7c:8d:f7:ab:b6:7a:9b:47:ce:1d:4f:
fc:da:b1:ad:e6:eb:04:6d:56:4d:68:e3:80:41:fc:
04:db:9a:31:65:bb:f6:0e:c8:0d:b3:9f:63:8d:e8:
23:78:e1:7e:56:38:39:2b:ad:46:c6:be:cd:98:0a:
bd:68:07:3a:d9:1d:ea:de:e8:d7:67:49:4d:98:41:
7b:5a:bd:bd:ba:b0:38:97:cb:80:5a:19:f0:9e:ba:
1d:47:17:b1:69:90:7e:fa:f9:bb:18:d2:2d:e3:cf:
9e:97:f2:ca:31:4c:3d:d9:fb:72:e1:d7:34:21:e2:
52:e8:c8:55:a8:71:24:65:a3:be:42:35:80:c1:d0:
b5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4E:E0:6D:E1:CF:65:4E:68:67:CC:48:22:47:87:65:54:85:E9:28
X509v3 Authority Key Identifier:
keyid:FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2a:aa:ee:0c:0a:eb:b6:0d:4c:c0:d5:98:5d:74:6d:2f:16:
5c:91:69:c1:12:b2:27:31:db:75:54:40:a4:18:69:4d:d7:2a:
ff:0b:31:9a:56:03:59:d7:c0:be:a0:91:a4:f0:d8:68:80:73:
84:31:21:91:9c:0c:fc:8d:06:0d:a9:8c:44:85:01:22:ea:db:
78:8d:de:ab:38:bf:98:80:0c:20:fb:17:f1:7b:38:dd:93:42:
1d:a8:21:f0:89:09:6f:f6:c0:ac:fe:a7:9c:f1:08:3d:06:5d:
5a:a0:7a:df:cb:60:f8:c0:56:33:af:6e:95:3a:21:e3:07:21:
0f:1b:96:a5:09:74:c9:48:0d:71:98:c5:bc:01:95:56:f2:6c:
c9:10:97:ff:f6:db:23:2b:c2:a7:b8:6f:58:64:37:e7:5c:d9:
fb:38:f7:26:74:31:d6:55:c2:06:2a:f4:9c:90:01:2e:47:03:
8f:84:55:e5:77:ae:88:32:0c:fe:d7:c6:ea:89:90:38:5c:94:
0f:e0:67:d5:c1:35:dc:91:e8:ca:4e:2e:b2:7e:01:88:cd:20:
b9:70:d4:90:18:2b:3e:e6:5d:60:5a:ee:f2:4d:e7:e9:44:f1:
8d:5a:33:a9:5e:76:f8:6f:37:bd:86:c4:77:77:37:1d:78:f0:
40:cf:60:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:43:48 2025 by rpki-client