Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
File: fD5YWlm1I7uG1mCnFo4cHroJTaA.mft (raw, json)
Hash identifier: vmiofzIhg1klt9LeSM9kpVTfq8P34/gfol23mycDwa8=
Subject key identifier: 4F:C7:DA:15:56:54:5F:A3:56:6E:CA:ED:B0:5C:91:F1:37:13:43:8F
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 019748C2F6B721EE22875401CB518B20B17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
Manifest number: 0C82
Signing time: Sat 07 Jun 2025 05:00:26 +0000
Manifest this update: Sat 07 Jun 2025 05:00:26 +0000
Manifest next update: Sun 08 Jun 2025 05:00:26 +0000
Files and hashes: 1: fD5YWlm1I7uG1mCnFo4cHroJTaA.crl (hash: Z485AZ3gmTcwQFEfa+GFD2z5w7GTNXgAm2S7Ldgqf6M=)
2: h5NF_Tx5Gv6vWtfnwGyh3VRdnTk.roa (hash: BKuppRUn6Xq2lQXG35ViYm1avyM64S8t8uEWZ7eoEGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:f6:b7:21:ee:22:87:54:01:cb:51:8b:20:b1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Jun 7 05:00:26 2025 GMT
Not After : Jun 8 05:00:26 2025 GMT
Subject: CN=4fc7da1556545fa3566ecaedb05c91f13713438f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:af:26:f2:50:7e:f7:47:53:f4:22:3e:92:
94:e7:d6:a2:b4:d3:f7:f0:20:a1:b3:46:40:5e:2e:
93:f1:27:e5:9e:1c:d7:76:cb:df:de:eb:0e:c0:41:
8c:4a:c4:5c:60:e0:20:85:67:81:93:fa:a7:12:39:
08:0c:90:73:9d:78:26:e2:82:c7:9e:df:db:b1:f3:
27:a6:bf:4b:16:84:47:14:fd:6b:34:07:9b:4e:c3:
62:b7:df:5c:17:50:f2:df:f3:c1:6f:02:d9:f2:d7:
c8:97:a3:94:7c:33:f3:ff:ac:14:08:69:6e:f5:65:
55:83:26:ab:43:d8:ac:d1:93:4e:83:e2:f1:a9:9d:
52:6f:92:4e:8f:b4:bf:c5:ac:f3:71:8b:f2:ec:58:
fa:bf:09:cb:f5:5b:e7:44:f0:61:6a:b6:9b:a8:af:
34:dc:c4:5a:8d:3d:ae:cd:b8:e8:05:74:ad:9c:86:
32:60:e8:2d:dc:19:8a:10:df:6d:d8:e0:92:d6:e8:
2b:9e:a5:de:a1:31:92:e4:e4:d8:35:d1:21:06:d1:
9a:ce:d0:30:aa:ad:9d:d0:cc:2f:d0:44:1b:0a:47:
b9:64:b0:d0:47:a9:42:dd:8b:4a:c1:60:48:dc:16:
2c:6a:d5:3f:6d:46:89:8b:94:0e:ff:ab:48:ca:bc:
54:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C7:DA:15:56:54:5F:A3:56:6E:CA:ED:B0:5C:91:F1:37:13:43:8F
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:40:79:57:7f:c4:9c:f5:c3:a4:d4:58:1d:8d:2f:07:7a:32:
e6:a6:96:a9:55:f9:59:c7:7a:48:16:3b:fb:43:e6:5f:99:c6:
66:44:75:a7:5e:f8:e5:80:72:d9:f1:27:cc:bd:03:0d:3d:cd:
8e:f2:5d:09:24:70:b5:7f:31:b9:a3:a7:84:3d:2c:08:e1:2b:
f5:0f:f9:69:45:fe:93:92:77:e4:c9:23:18:75:75:5a:15:fe:
07:e3:fb:19:8c:7c:70:9a:b9:ee:d1:50:5e:74:b0:1c:3f:37:
a4:00:c6:81:b5:b1:8b:d8:25:a9:99:cd:a7:c4:1b:da:5a:60:
af:84:bd:41:76:b5:4c:20:72:5d:8c:40:a6:01:8b:98:12:24:
72:73:33:13:32:66:d1:21:38:98:c4:94:df:23:da:3e:9b:44:
b4:8c:08:f8:86:f6:69:87:25:7a:d8:74:de:24:0b:80:0f:84:
63:d1:1d:e8:33:e1:0f:d8:66:ae:b2:79:38:71:62:0e:7c:84:
2a:6e:f3:05:64:dd:eb:e2:f7:99:d1:05:77:5e:15:0b:a0:9e:
bf:bd:99:ec:98:57:45:0c:6c:02:c5:09:22:12:bd:d8:30:0a:
fd:19:92:d4:ad:ff:7a:35:65:8d:a3:5f:20:4d:d3:97:79:24:
cc:c9:96:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:16:35 2025 by rpki-client