Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
File: fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft (raw, json)
Hash identifier: yYDvKOfsAydFN4vhmtPZAvM1QzhKGBRDS3ra+z6eAKA=
Subject key identifier: F7:45:5F:03:A6:EF:B6:B5:E4:08:71:87:6B:C6:8A:94:51:18:20:D0
Authority key identifier: 7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
Certificate issuer: /CN=7e058377510a3a9245ce72cbe88e0efa19719204
Certificate serial: 01974D7C292F2DA39817D12193B8AB81C925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
Manifest number: 0FC7
Signing time: Sun 08 Jun 2025 03:01:12 +0000
Manifest this update: Sun 08 Jun 2025 03:01:12 +0000
Manifest next update: Mon 09 Jun 2025 03:01:12 +0000
Files and hashes: 1: _J2QkiOT3wZXiv-kIeQ1vzDjGQI.roa (hash: ieQbUeSA/ZnjcXq9UchtsLIMyHxTCALoQIa6C87a8+U=)
2: fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl (hash: mlMNIJ74W6tOep9PXa5RiqChYlDsLvs0EYaIDE2/sBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:29:2f:2d:a3:98:17:d1:21:93:b8:ab:81:c9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e058377510a3a9245ce72cbe88e0efa19719204
Validity
Not Before: Jun 8 03:01:12 2025 GMT
Not After : Jun 9 03:01:12 2025 GMT
Subject: CN=f7455f03a6efb6b5e40871876bc68a94511820d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:96:16:55:fc:3b:1b:27:5e:ee:a3:e5:95:
c2:fd:73:d0:46:9a:39:c2:bb:c4:8f:c4:8d:1d:e2:
2b:f6:fb:de:8a:18:23:ab:a5:df:9c:cf:59:84:04:
cd:6d:f6:96:1b:d6:a0:8e:9c:0e:9f:38:3e:5e:4a:
8c:66:71:16:ca:08:3f:70:4e:f7:79:8e:dd:84:08:
71:35:57:45:d9:74:c1:cb:f8:13:d6:6c:07:89:94:
60:66:ee:c2:aa:11:a5:58:a7:ab:dd:3f:87:69:a1:
84:5d:e7:8a:b5:8f:d1:28:89:b0:4c:8d:d6:87:a9:
58:48:e3:b3:b6:39:66:35:78:28:7a:04:73:7c:94:
b9:4d:0f:f2:f1:6e:d6:f7:51:95:c6:45:61:cc:eb:
20:26:b0:9f:89:d3:53:2c:f8:52:66:16:7a:5e:eb:
04:3d:17:f2:2e:df:e8:5f:01:84:e6:3a:a5:1e:ca:
64:bd:bf:30:32:03:7e:ac:68:1f:0d:c9:f7:cb:11:
79:eb:38:8d:6f:eb:87:69:61:34:eb:32:cc:31:0c:
51:08:46:fa:38:06:6e:63:6b:39:45:87:7c:b2:b1:
62:55:ca:ac:ae:50:3e:01:3c:2f:11:45:68:73:00:
86:e6:f8:2d:98:5b:b7:d0:cd:9f:3b:4b:82:9e:75:
f1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:45:5F:03:A6:EF:B6:B5:E4:08:71:87:6B:C6:8A:94:51:18:20:D0
X509v3 Authority Key Identifier:
keyid:7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:9d:32:52:52:64:df:93:86:91:39:88:20:d9:81:23:4b:14:
28:50:bf:bb:e3:7a:d6:07:15:9f:2d:d0:ac:33:07:9c:24:9f:
91:17:d3:99:52:99:4a:e1:35:01:f8:24:02:6e:51:6f:07:41:
15:9b:1f:5a:75:5e:f9:e3:09:39:51:38:6d:5f:19:60:21:b9:
fd:78:d9:42:b2:f1:24:f2:50:22:ad:64:ef:6e:ab:4e:fa:c5:
df:4f:80:7c:d5:37:d8:1e:0a:b4:b6:2f:1c:3c:38:c6:03:a0:
0d:b4:6d:00:85:48:46:97:89:97:0c:bf:78:87:6b:ed:49:1b:
13:8d:c4:af:b1:20:bb:b7:e0:d7:18:69:5b:87:df:f6:54:b4:
78:e9:6d:3e:16:36:26:64:28:75:01:98:8e:16:6c:c1:1a:31:
10:46:58:a0:b3:10:e3:ea:6c:65:0a:68:c6:92:5a:2f:65:d4:
9c:c4:c9:25:f3:84:81:58:4e:68:53:6c:21:1c:e2:c5:cd:3e:
e3:10:2f:ce:03:ff:7c:84:c2:71:68:dd:d8:80:51:a0:2a:23:
94:fc:75:4b:06:39:e8:ff:07:ae:b8:cd:95:59:8c:58:fd:bd:
5b:14:71:a1:76:9c:d9:aa:e7:0a:fb:7c:0d:17:79:6b:f3:c1:
de:43:55:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNfCkvLaOYF9Ehk7irgcklMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDU4Mzc3NTEwYTNhOTI0NWNlNzJjYmU4OGUwZWZhMTk3
MTkyMDQwHhcNMjUwNjA4MDMwMTEyWhcNMjUwNjA5MDMwMTEyWjAzMTEwLwYDVQQD
EyhmNzQ1NWYwM2E2ZWZiNmI1ZTQwODcxODc2YmM2OGE5NDUxMTgyMGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfyWFlX8OxsnXu6j5ZXC/XPQRpo5
wrvEj8SNHeIr9vveihgjq6XfnM9ZhATNbfaWG9agjpwOnzg+XkqMZnEWygg/cE73
eY7dhAhxNVdF2XTBy/gT1mwHiZRgZu7CqhGlWKer3T+HaaGEXeeKtY/RKImwTI3W
h6lYSOOztjlmNXgoegRzfJS5TQ/y8W7W91GVxkVhzOsgJrCfidNTLPhSZhZ6XusE
PRfyLt/oXwGE5jqlHspkvb8wMgN+rGgfDcn3yxF56ziNb+uHaWE06zLMMQxRCEb6
OAZuY2s5RYd8srFiVcqsrlA+ATwvEUVocwCG5vgtmFu30M2fO0uCnnXxWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdFXwOm77a15Ahxh2vGipRRGCDQMB8GA1UdIwQY
MBaAFH4Fg3dRCjqSRc5yy+iODvoZcZIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdXRGQxRUtPcEpGem5MTDZJNE8taGx4a2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wMjA1ZjItZGYyYS00MWQ2LWJjMmQt
NzI4MjdmZTZkN2FmLzEvZmdXRGQxRUtPcEpGem5MTDZJNE8taGx4a2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wMjA1ZjItZGYyYS00MWQ2LWJjMmQtNzI4MjdmZTZkN2Fm
LzEvZmdXRGQxRUtPcEpGem5MTDZJNE8taGx4a2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASp0yUlJk
35OGkTmIINmBI0sUKFC/u+N61gcVny3QrDMHnCSfkRfTmVKZSuE1AfgkAm5RbwdB
FZsfWnVe+eMJOVE4bV8ZYCG5/XjZQrLxJPJQIq1k726rTvrF30+AfNU32B4KtLYv
HDw4xgOgDbRtAIVIRpeJlwy/eIdr7UkbE43Er7Egu7fg1xhpW4ff9lS0eOltPhY2
JmQodQGYjhZswRoxEEZYoLMQ4+psZQpoxpJaL2XUnMTJJfOEgVhOaFNsIRzixc0+
4xAvzgP/fITCcWjd2IBRoCojlPx1SwY56P8HrrjNlVmMWP29WxRxoXac2arnCvt8
DRd5a/PB3kNV6A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:01:52 2025 by rpki-client