Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
File: Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json)
Hash identifier: nKzDhijHlNJcqNO16q2ZxrcNjUT59f6/xbszloVM5/Y=
Subject key identifier: 05:30:B6:AE:C2:3A:D3:4A:98:22:92:4E:00:0A:33:31:45:3F:36:AD
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 01974D44F57135E3AAE844911A43763EF912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
Manifest number: 1212
Signing time: Sun 08 Jun 2025 02:00:54 +0000
Manifest this update: Sun 08 Jun 2025 02:00:54 +0000
Manifest next update: Mon 09 Jun 2025 02:00:54 +0000
Files and hashes: 1: 52KUDdFP_rD3RmJYr6LMpUPEMmM.roa (hash: usibkDt6eCnub+7x6EZqrdrQgsmz6UQ+udh3uzbsAi0=)
2: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: RwaDouDU7Z3SQ1wtt3oWFXGNUpm5//gK4pEyT/E6HoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:f5:71:35:e3:aa:e8:44:91:1a:43:76:3e:f9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: Jun 8 02:00:54 2025 GMT
Not After : Jun 9 02:00:54 2025 GMT
Subject: CN=0530b6aec23ad34a9822924e000a3331453f36ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:64:2b:c2:e8:26:2c:8b:50:ce:d2:92:35:a5:
15:8d:81:94:ce:1f:5e:78:65:71:49:8b:13:0c:1c:
ec:c8:db:10:f5:eb:09:3f:7e:d6:4b:02:f7:1c:9a:
df:cf:76:34:a0:d0:4a:dd:89:4b:19:52:f0:89:6d:
97:76:e4:9b:aa:4a:7f:fd:78:59:1f:93:a4:8f:7c:
11:19:51:d2:0b:4c:77:17:1e:46:1b:8b:ba:97:cd:
0b:ca:38:8e:8f:51:79:0d:7d:6d:e0:c6:c7:6c:1e:
9b:b9:bd:f7:f4:46:8f:9b:21:25:05:43:f7:f5:f9:
37:34:8d:f0:2f:39:a5:c3:81:11:27:61:e7:4b:4b:
5f:4c:4c:33:01:a5:13:06:79:11:04:77:bd:9c:8b:
b0:d0:a6:c5:0b:77:b9:8b:99:44:c2:0f:a3:90:7f:
90:ff:5c:50:c7:6d:4f:5e:11:62:d5:1f:dd:bb:53:
68:ec:e3:c4:53:b1:a1:a0:a5:b2:48:a4:7c:19:71:
80:1b:b8:bc:6a:88:66:94:0d:74:6b:f6:0e:a5:53:
07:00:e8:e0:57:55:9c:de:fb:8f:c5:03:cf:f7:05:
15:8a:cd:ca:45:b1:47:41:55:02:74:9b:ff:7c:45:
70:87:73:91:4a:1f:d9:30:6d:78:fe:86:d7:78:a5:
a8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:30:B6:AE:C2:3A:D3:4A:98:22:92:4E:00:0A:33:31:45:3F:36:AD
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:18:2a:c7:a9:60:8d:94:54:60:2d:f0:9d:87:07:e5:b7:10:
1e:37:8e:c6:f2:51:8e:63:31:cd:1d:89:7c:ce:00:10:46:7b:
bd:da:52:3e:ae:e1:b3:9a:88:6a:33:5c:13:aa:0a:05:3b:b4:
8c:a0:fa:2c:aa:4a:a4:9b:80:89:4e:a2:87:cc:58:ed:07:c1:
5d:aa:5f:08:c2:a1:87:eb:db:54:95:3a:3a:19:b8:90:d4:be:
d4:e7:47:92:bc:c3:cf:1d:63:03:e8:f5:e9:c7:81:c4:a0:00:
1e:09:5e:f0:16:d6:b0:58:f8:2c:17:8b:bf:06:9a:bd:75:78:
27:5f:07:e4:88:af:4c:08:cc:37:61:f7:b1:4c:2d:62:98:78:
12:27:72:6a:7d:f3:e0:2a:5d:85:20:92:84:c2:a6:f4:af:fc:
fd:9f:99:f1:b2:83:6b:14:f0:2b:e6:41:6d:d3:38:57:f6:34:
c8:61:a2:58:f2:67:2f:34:0d:d3:24:51:13:de:dc:6b:b6:cb:
e2:05:8e:1b:07:43:ff:33:54:79:f2:d5:29:60:a9:4c:e4:43:
9f:22:69:a8:29:91:55:c7:99:83:4d:90:66:7a:48:df:9d:7c:
88:ee:e1:1f:dc:2a:4a:b4:2d:e7:45:93:14:f1:35:f1:1c:18:
ab:15:cf:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:05:05 2025 by rpki-client