Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
File: fi4pGEMoSetx6V3EDRB56oZfYQk.mft (raw, json)
Hash identifier: HLKxra75j5z7bIzTs+LoaT9pGcc6oCZ6jzKiiI2Axr0=
Subject key identifier: FA:2B:76:0F:C5:FD:12:99:36:5B:B4:13:02:13:E0:2B:CA:68:C2:5E
Authority key identifier: 7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
Certificate issuer: /CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Certificate serial: 01974A43643465A2022F961708B3C7410068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
Manifest number: 0898
Signing time: Sat 07 Jun 2025 12:00:19 +0000
Manifest this update: Sat 07 Jun 2025 12:00:19 +0000
Manifest next update: Sun 08 Jun 2025 12:00:19 +0000
Files and hashes: 1: S1dC-8FvWd5r91Ep_3NW-RYRFSM.roa (hash: WN6IJU4enC30WWGrEp1TUJBHxrmIxnrzAFySxPEWWA0=)
2: fi4pGEMoSetx6V3EDRB56oZfYQk.crl (hash: MIU0AAX+BL3xRbnvgh+42DRW1e2Nb+HGgcmGLQ7LN24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:64:34:65:a2:02:2f:96:17:08:b3:c7:41:00:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Validity
Not Before: Jun 7 12:00:19 2025 GMT
Not After : Jun 8 12:00:19 2025 GMT
Subject: CN=fa2b760fc5fd1299365bb4130213e02bca68c25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:38:87:09:3b:a6:8e:05:30:81:57:e1:76:
75:98:f0:2f:0f:0b:52:7c:ca:d5:26:54:ad:90:0d:
f3:cd:77:f5:60:95:c1:80:2a:d9:ca:ca:97:55:8b:
93:58:e6:ed:57:7f:37:93:d5:93:3b:7c:4f:2c:9d:
96:82:a0:a7:02:18:b9:56:d1:b5:ac:cd:77:f1:8c:
60:bf:c0:ef:66:7e:33:99:db:30:0d:1b:68:cb:ac:
7f:29:72:38:3b:95:88:a4:34:58:ae:06:4f:7a:3e:
a9:fb:8d:7d:08:e9:f2:ec:e3:9d:67:f6:0c:d1:89:
47:23:b5:eb:b7:b3:2b:55:8e:6d:45:52:fc:f1:55:
ea:ae:1f:79:a0:98:7d:b7:17:a2:0a:f9:d8:b7:27:
0c:37:6d:e8:ce:ee:e3:a9:0c:d0:44:65:0f:a0:cc:
71:66:01:29:cf:00:a2:be:af:7d:30:87:8c:6c:81:
82:bc:d6:36:40:db:2d:f9:50:4a:0d:43:7f:f4:80:
0f:34:b9:cc:9f:21:25:f5:1e:93:05:8e:d7:be:bc:
aa:fc:03:22:0c:89:b0:89:86:89:b7:97:9d:0a:cc:
d2:ad:5f:ab:bb:ca:4c:8b:92:f5:ee:fb:95:88:ed:
49:e5:61:a5:03:49:ad:16:5a:bd:26:ce:8e:62:88:
cf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2B:76:0F:C5:FD:12:99:36:5B:B4:13:02:13:E0:2B:CA:68:C2:5E
X509v3 Authority Key Identifier:
keyid:7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9d:3f:d8:f5:6e:d0:97:98:a3:be:54:ac:12:6f:dc:8c:a7:
b8:a3:67:25:ca:68:c9:e4:c1:b2:9d:b7:62:ca:f6:6d:c0:a2:
40:20:ed:cf:2a:4e:45:ab:ee:68:bd:96:fb:f5:ac:c0:64:64:
c6:3e:5c:6a:ca:c0:fc:fd:98:cf:1b:99:36:a1:06:28:f6:fc:
fa:ba:40:f1:37:27:2a:71:a5:3e:38:81:dc:ca:fd:c0:f9:b8:
e7:49:9d:60:51:9a:7f:b0:63:6d:c4:22:2e:9f:c8:8f:a9:8d:
6e:8a:db:e3:16:43:20:59:aa:00:13:5d:0c:f5:30:04:f5:a7:
eb:2a:e6:b2:3d:c5:e2:8c:d4:4a:75:0e:a6:02:6a:b2:14:0a:
ed:13:90:ad:26:76:2f:58:d8:f9:bf:07:4d:05:72:7b:20:1e:
94:3b:6d:44:d9:61:47:3f:ae:4c:17:bb:25:f8:5d:25:e2:66:
46:5e:80:fd:04:e2:66:e2:20:0d:0c:94:c8:fa:1f:64:97:8b:
2e:bb:eb:40:97:82:75:40:ca:6f:2f:6f:3b:40:b9:a8:d6:c1:
ea:87:1c:4b:3e:27:8a:a0:3b:a6:57:a2:99:3b:30:ef:52:6c:
de:af:27:0e:91:f0:34:10:69:00:6c:04:bc:02:fe:d7:6a:79:
7f:e7:80:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:49:10 2025 by rpki-client