Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
File: femPSOmIeQ0OB5NTeUG0E9LmAwY.mft (raw, json)
Hash identifier: ihcgv2gPQ8e7/BD7MWn6nEEhmqxfVHXnqLE+Psw0h7Y=
Subject key identifier: B6:80:06:BA:EA:2F:3A:D9:D2:22:6C:1E:3B:E4:09:07:66:36:9C:BB
Authority key identifier: 7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
Certificate issuer: /CN=7de98f48e988790d0e0793537941b413d2e60306
Certificate serial: 019747E749525BB3DA26EFE9FDC2C3890AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 01:00:29 +0000
Manifest this update: Sat 07 Jun 2025 01:00:29 +0000
Manifest next update: Sun 08 Jun 2025 01:00:29 +0000
Files and hashes: 1: L1sOGUpC5vf81IjAWo9yjqNWdoc.roa (hash: qAhDSU9NhG7HL0VsMDn5fszVhTOJb2FN5MRmMe3Ne7s=)
2: VGUAWcdE_uWGBzoEXuUWxSaeofE.roa (hash: ldYqKdQLO9amLNP7UTQrP4DX3OqZoopvjfltJwygHwg=)
3: akdoIFbGGphPsOua6vOPfJFx_n8.roa (hash: r5YdXtt32oyVRXJKLiujx5qPKEB9WTaTcVsGTt7qfvg=)
4: femPSOmIeQ0OB5NTeUG0E9LmAwY.crl (hash: co3LrXx96Lr7w/AVkP/N6uSHVxUiNUEuDuMvMVdoZbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:49:52:5b:b3:da:26:ef:e9:fd:c2:c3:89:0a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de98f48e988790d0e0793537941b413d2e60306
Validity
Not Before: Jun 7 01:00:29 2025 GMT
Not After : Jun 8 01:00:29 2025 GMT
Subject: CN=b68006baea2f3ad9d2226c1e3be4090766369cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:38:72:05:97:15:17:da:ff:11:76:f1:6a:
a1:e7:49:56:39:39:74:09:aa:23:b7:d9:cb:22:8c:
99:b4:97:df:e1:b3:13:67:71:1e:f3:f4:51:3d:e1:
e2:2a:5c:da:09:43:5d:df:3a:c7:45:10:0a:a2:29:
92:e9:21:58:3d:d5:37:9a:ee:b3:d3:b5:96:b1:57:
f8:8b:a6:c7:92:4c:be:73:f7:56:be:ac:1d:27:80:
d3:8a:48:ac:b5:02:75:5b:3b:f8:e1:d0:75:9b:93:
21:86:c8:a9:b4:e8:c3:68:5a:e8:32:f0:87:0a:e9:
45:72:68:fa:8c:15:cc:17:e8:cc:19:0e:68:2a:da:
30:16:27:5d:5d:b1:ca:fa:d0:02:f2:ea:e3:b1:02:
4c:db:d3:dd:0b:39:2d:5b:32:f0:c4:9c:17:f6:68:
b8:53:ea:5e:f0:e3:26:58:94:cc:7e:93:53:5d:f6:
3c:09:2e:f9:77:d8:e5:08:4d:87:3e:34:dc:d0:6b:
b3:fa:72:15:2a:f4:cf:ea:97:e2:e0:d0:43:32:8e:
3a:37:19:76:f3:20:12:96:48:b5:9e:c2:83:5a:52:
9e:4a:a7:f1:3d:9a:6c:23:c5:15:73:d3:b6:0c:08:
2c:3a:20:68:45:02:32:7c:69:2f:33:aa:2c:56:62:
02:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:80:06:BA:EA:2F:3A:D9:D2:22:6C:1E:3B:E4:09:07:66:36:9C:BB
X509v3 Authority Key Identifier:
keyid:7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0f:d2:38:02:3d:b5:51:6a:88:9c:31:56:5a:4e:cb:bd:07:
da:38:f6:ef:b0:bd:2a:46:b4:67:85:05:31:0a:05:8c:28:12:
f2:93:d3:9f:5c:01:7d:c3:c9:50:25:79:18:88:f1:55:bc:3f:
33:6d:f7:44:2f:c6:85:6b:9d:32:eb:df:8b:77:c2:99:3d:f4:
77:ed:11:42:a1:3b:9d:81:d9:4d:8e:5c:e5:e6:db:07:fe:da:
d0:66:a2:96:a7:1a:e9:dc:7f:cf:a0:56:94:ef:28:c6:89:1b:
1c:76:42:48:00:ca:b2:65:37:b1:ec:2f:88:f2:5a:90:05:df:
1d:a7:76:a2:34:97:93:0b:00:54:9c:6e:61:a3:92:4c:5f:4d:
95:fd:57:01:ec:d3:6b:81:df:93:7e:56:b0:c9:d7:ca:da:67:
78:52:73:0f:0c:1e:a4:b8:96:e6:3e:54:33:83:46:0b:ff:46:
54:e3:9e:68:81:58:07:04:88:f4:7e:61:3b:d4:6e:95:a2:8f:
67:e7:51:ab:db:1e:5c:28:ff:80:f4:e3:96:a0:6a:fc:78:9e:
0a:81:01:4c:a7:92:ea:03:25:17:6e:6b:dc:7f:7b:7b:89:47:
a1:90:b9:04:bd:59:9b:c5:e9:ff:60:4d:dd:a0:e1:f7:24:1b:
fa:15:f2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:45:56 2025 by rpki-client