
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
File: mFW4DEXftep6qn3R2O2LFPnB3EU.mft (raw, json)
Hash identifier: cg4DlvLFhAaVgwAhOsNd5sS4/InYJ9O+EEJ5RLUhn6Q=
Subject key identifier: 60:43:4C:95:9E:6E:7A:4F:C8:25:10:D1:CA:67:11:4C:8A:90:06:17
Authority key identifier: 98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45
Certificate issuer: /CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
Certificate serial: 0197499EE808D4991CAB06753236E77C9D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
Manifest number: 66
Signing time: Sat 07 Jun 2025 09:00:40 +0000
Manifest this update: Sat 07 Jun 2025 09:00:40 +0000
Manifest next update: Sun 08 Jun 2025 09:00:40 +0000
Files and hashes: 1: NymzbNZBsKNd-Q-QLvAahyZY8zY.roa (hash: 4tm9+O5MAP6uU3Q2HGQCNAKZry1kf/X+Xwuo3WltB+8=)
2: mFW4DEXftep6qn3R2O2LFPnB3EU.crl (hash: b7s9l1vEnTFmvD/3UJg8kxfd2Q6imFx0iMKcf44ySh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:e8:08:d4:99:1c:ab:06:75:32:36:e7:7c:9d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
Validity
Not Before: Jun 7 09:00:40 2025 GMT
Not After : Jun 8 09:00:40 2025 GMT
Subject: CN=60434c959e6e7a4fc82510d1ca67114c8a900617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:76:00:71:b7:a5:57:fa:85:ab:c6:f0:17:
81:cd:ef:b6:48:ea:b8:91:9f:18:98:d6:28:ef:85:
69:59:c2:3b:3f:6a:21:57:86:71:6a:cd:0d:f5:b5:
57:28:2d:06:55:55:f6:8f:0f:20:01:c0:18:ac:3b:
a9:e7:d1:f5:98:fd:0f:11:29:87:f2:e0:fb:f2:68:
0f:e6:78:be:d9:45:fe:4b:27:3b:e8:51:46:51:2c:
00:44:c4:39:97:2f:8a:29:9a:e0:3d:65:45:f0:03:
62:0b:be:d4:d8:e4:3b:29:9b:29:bd:fe:fa:60:11:
7b:56:ab:eb:6a:49:8a:d1:7b:73:7a:a2:ae:87:23:
d3:1f:fb:1d:7c:2b:1a:ae:db:36:76:31:1a:b3:2e:
bc:66:51:4c:5f:d5:54:29:d0:3e:5b:67:d8:8b:54:
12:13:12:ab:c8:d6:69:b8:04:b2:5e:52:82:05:64:
97:1e:ef:ac:d1:aa:98:17:69:51:e0:66:93:72:3a:
81:03:35:9b:f1:37:48:21:f7:9e:c3:7b:d7:40:df:
0d:82:e0:0d:22:f4:fa:28:28:a8:24:ae:7f:d5:12:
82:bf:e7:0c:49:98:65:78:ae:91:ec:10:57:d7:66:
37:1b:cf:7c:69:18:a6:8b:ae:bd:56:06:ca:5d:d4:
61:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:43:4C:95:9E:6E:7A:4F:C8:25:10:D1:CA:67:11:4C:8A:90:06:17
X509v3 Authority Key Identifier:
keyid:98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:83:15:36:44:c4:2f:63:8f:e3:3e:f7:85:26:ae:48:e4:72:
f0:0f:e6:7f:5f:bb:c2:5e:c1:98:92:1f:3b:66:1b:6a:eb:f1:
e9:76:d6:8c:72:4f:7f:51:c2:ab:c3:07:cf:ed:02:ca:e2:df:
d3:fe:30:b3:f8:25:8a:97:7a:d8:06:03:52:01:f2:59:31:ca:
9b:03:7f:ce:08:a2:91:04:56:6c:4d:7e:9d:e5:2a:34:28:03:
a1:c8:09:2a:db:d7:44:20:39:c8:61:d0:c0:1e:23:13:44:ab:
19:77:33:fd:4d:be:82:fb:55:77:58:07:60:e9:73:ea:fa:98:
5b:ef:d5:5d:fb:df:6f:4d:c0:01:b0:07:c7:7a:f9:1b:67:00:
ef:54:4d:6a:6e:c6:a8:29:42:f4:82:f8:b2:fb:a4:56:62:ba:
b6:8f:77:3b:ce:de:f0:a7:c4:da:6e:2f:ac:8f:55:b1:37:a8:
07:21:c6:55:4b:6a:90:c2:a9:22:69:3f:e4:7d:fd:8f:43:1e:
e0:aa:f1:ac:5d:3b:b6:5f:30:2a:4f:2c:dc:4e:1b:23:d0:01:
54:26:6f:fd:03:d7:95:2a:6d:08:7c:5d:5a:cc:d8:f5:17:11:
17:95:e3:ca:85:5f:ed:91:b3:1d:9c:8b:78:e8:e6:a7:5b:cd:
79:2c:38:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:48:52 2025 by rpki-client