Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json)
Hash identifier: 8ZwRj29bjV90SqxjzNDwiHkRoGxHYmiGu+w+1lCmnSQ=
Subject key identifier: 6F:5D:60:D0:71:1A:52:9A:5D:68:8F:86:02:70:CC:0D:66:DE:C7:A7
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 019747E7CD2EB2B191659C8A60E37F33B149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
Manifest number: 0FA3
Signing time: Sat 07 Jun 2025 01:01:03 +0000
Manifest this update: Sat 07 Jun 2025 01:01:03 +0000
Manifest next update: Sun 08 Jun 2025 01:01:03 +0000
Files and hashes: 1: f-4yu6sDyBHuoUp0ijzfgQJpE8U.roa (hash: I5XhYKmiwTTC0KZ/h+71MELDdEucvcsXapf63tq8JL0=)
2: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: HHCQRdbfDcbtF8o6bS1IhCtQVZH6we70U1PyXLY4QPM=)
3: xNMYEYWeSRysGA1egNd5UYXQ2iE.roa (hash: mNuWxiNJNgSqM1Q6Fj113QLftCPa1zUr2fYNqR8cc3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:cd:2e:b2:b1:91:65:9c:8a:60:e3:7f:33:b1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Jun 7 01:01:03 2025 GMT
Not After : Jun 8 01:01:03 2025 GMT
Subject: CN=6f5d60d0711a529a5d688f860270cc0d66dec7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:1a:02:fc:03:01:5e:a2:40:1e:7c:e1:e6:
e2:fc:65:3c:1e:f7:60:36:9c:47:a0:c8:63:1f:a5:
3d:0d:db:c3:31:7c:22:c9:1a:2e:11:e1:3c:59:9b:
bc:c2:f6:fd:be:3a:ac:89:7a:41:b5:3d:97:b7:c2:
72:8f:99:7b:20:e4:b2:d8:8c:38:e1:1e:da:bc:3f:
6b:62:3d:a1:02:6b:07:36:f1:bb:3e:ce:00:de:a6:
34:5a:c2:4e:c0:6e:0d:b5:49:93:5e:dc:0c:c1:3d:
94:39:8b:94:12:08:4e:29:88:87:81:d5:93:e5:b7:
4e:d6:e8:d3:89:a7:31:c5:d2:47:1d:22:0c:35:3a:
ae:5e:61:82:8a:bb:5e:4e:e2:48:bd:a0:8e:d8:cf:
1b:69:10:5a:af:f8:92:55:2b:c3:e3:8e:5c:fd:f1:
bf:3c:cd:36:e8:34:45:0a:0b:3a:43:5c:ea:be:5b:
d7:28:da:ae:bc:f7:0e:fb:b4:81:0b:7b:be:c0:75:
ff:06:a9:1e:b8:ec:de:42:c5:4b:02:85:a4:01:ed:
bd:bc:3f:eb:62:9e:8a:75:94:f0:47:51:7b:0c:0c:
ab:3b:c1:53:26:88:a4:34:e0:84:af:28:42:24:73:
df:88:d7:e2:7b:ce:86:07:f7:d7:e3:17:3f:be:97:
f5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5D:60:D0:71:1A:52:9A:5D:68:8F:86:02:70:CC:0D:66:DE:C7:A7
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b8:4c:51:ce:aa:16:28:fd:a0:d8:9e:f6:d9:c4:30:08:d3:
1b:31:b8:a8:45:33:b1:38:ad:1c:1d:2a:83:f7:5f:32:fe:a3:
30:6b:b5:cb:f7:cc:6c:04:d4:06:fe:d8:f3:cf:79:b4:9a:8e:
eb:66:6d:45:20:10:b4:40:24:95:4a:5e:c5:ae:59:00:e9:0f:
6c:81:75:3a:c0:5c:0f:cf:c3:ab:39:60:da:97:70:eb:58:9f:
0b:9b:1a:47:f1:2d:59:3b:b0:e4:7c:e8:52:34:5d:af:e5:53:
7f:8f:1d:99:bb:6d:f1:33:66:44:10:84:d7:2d:b2:68:4f:fb:
1d:bf:a4:9d:3d:02:eb:0c:40:be:71:a3:57:ec:54:7b:e3:a0:
e3:96:cb:7a:08:50:ac:bb:64:00:e4:9f:aa:65:6d:2e:94:56:
41:65:2a:8c:04:ae:85:39:2f:82:8d:fa:58:36:8e:06:d3:a7:
df:9e:12:83:98:07:62:79:49:66:0a:e9:1d:cb:da:4a:48:e5:
ba:65:83:d6:fc:b9:a1:6c:89:17:2e:0a:c0:0a:d2:c7:a9:32:
c2:ec:67:1f:40:21:93:f0:98:0d:06:dd:ab:c5:b0:0b:a1:9e:
b3:cb:37:30:d3:c7:5a:35:37:ec:90:a9:dd:b2:9f:8c:84:9f:
4f:25:10:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:17:44 2025 by rpki-client