Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
File: _ASHoE9apEK-UZoXyyuyLXg98js.mft (raw, json)
Hash identifier: dVyUTeZhONjmo1PK2wdQ7yoUHOpAK7ydr0WZ6ODkzBo=
Subject key identifier: 6F:87:C0:C7:C1:64:17:67:1E:C5:C5:78:F9:DE:9F:D2:BF:06:C2:F3
Authority key identifier: FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
Certificate issuer: /CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Certificate serial: 01974A435D5B8E7B9051F20BD07FD6A2A2B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
Manifest number: 10FE
Signing time: Sat 07 Jun 2025 12:00:18 +0000
Manifest this update: Sat 07 Jun 2025 12:00:18 +0000
Manifest next update: Sun 08 Jun 2025 12:00:18 +0000
Files and hashes: 1: TWYnB52Oavk9789kFBH_TtsFA20.roa (hash: Lo6TIcgKkzIrKcc1K5udX1XvguvwpolYTItBn5Pxknw=)
2: _ASHoE9apEK-UZoXyyuyLXg98js.crl (hash: aZjr0wTzqMQO+M00X/eEf1tGlgoc1BuwSvkWd0LqGrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:5d:5b:8e:7b:90:51:f2:0b:d0:7f:d6:a2:a2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Validity
Not Before: Jun 7 12:00:18 2025 GMT
Not After : Jun 8 12:00:18 2025 GMT
Subject: CN=6f87c0c7c16417671ec5c578f9de9fd2bf06c2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b2:67:e9:f3:77:81:3d:ae:18:68:38:a0:c4:
b9:db:18:2a:3c:64:8a:e9:6f:45:75:3c:bc:74:cf:
c0:a5:45:51:23:33:e2:74:8a:25:6c:65:1a:09:63:
f2:b7:f3:4a:8c:65:92:26:05:39:e9:c3:69:63:69:
25:71:8d:fd:3a:79:90:e3:c9:fc:f5:0d:92:f6:d8:
9e:91:df:8d:75:91:b4:8d:87:87:a1:10:e3:12:8b:
ea:79:b0:d7:d7:d7:a7:da:26:c5:9f:0e:42:d3:b4:
95:0c:84:7e:d2:5d:80:ed:7f:13:13:dc:87:f4:8f:
8a:a9:88:5f:4e:bc:ef:49:5a:bb:53:e2:74:0f:1e:
6e:91:04:3d:27:5a:c2:b8:3b:a3:62:b4:84:ca:cd:
13:29:c4:8b:d1:db:64:11:09:1d:ce:de:c2:8c:54:
76:2a:5a:77:84:a8:ce:de:8e:40:07:20:df:c1:0b:
a7:8d:3e:bd:89:b0:18:66:4e:00:66:62:2e:b2:61:
67:15:d1:46:15:60:98:1e:b9:b1:57:b1:f1:89:53:
18:b9:d0:ca:cf:8d:41:a0:5b:75:c5:26:15:bf:5e:
47:ab:a8:3f:de:2f:f0:cc:fe:53:e0:cf:b2:bd:ea:
14:22:24:3a:0e:88:bd:1c:6c:56:e2:54:c4:cb:98:
47:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:87:C0:C7:C1:64:17:67:1E:C5:C5:78:F9:DE:9F:D2:BF:06:C2:F3
X509v3 Authority Key Identifier:
keyid:FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5b:65:3f:4c:09:6b:ea:5c:ef:a1:6f:21:4b:35:d1:80:3e:
26:a6:7f:31:a0:c9:76:2d:24:a7:a4:8d:16:b2:04:ae:a3:59:
47:91:dd:d6:a1:a8:62:a2:fd:81:40:73:ec:c2:5a:ed:19:de:
c2:62:5a:0a:4e:04:5a:5e:6f:5c:f0:fd:4d:90:3f:b2:bd:9b:
c7:06:4a:48:74:55:00:3c:88:3e:98:bc:be:87:e8:37:48:ae:
cf:a7:6c:e4:db:eb:b0:68:2e:cf:a8:35:3a:db:58:18:37:6b:
ca:8c:87:93:53:66:c9:e7:0f:69:53:21:6c:17:84:4b:71:21:
52:eb:ab:d8:97:68:53:84:1f:c3:e7:a1:d1:3c:11:c5:70:6a:
51:59:9b:52:3e:4e:64:4d:95:b5:99:e0:5d:15:52:a5:66:61:
a0:3f:70:14:8d:8f:03:35:4d:ca:5f:93:12:3b:32:43:71:8a:
94:0d:77:7e:d5:aa:49:3a:e9:1c:49:69:2d:21:b2:7c:af:f9:
88:ea:85:61:ac:e8:a2:b6:b0:44:b9:90:43:0a:b6:ed:f2:c1:
1b:55:ab:c8:15:f1:c7:4d:3a:3c:3e:19:ae:cb:dc:16:89:55:
f7:2b:2f:9d:1a:77:a0:62:62:da:e2:e5:c5:b1:df:4f:77:36:
31:61:09:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:53:01 2025 by rpki-client