Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
File: F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json)
Hash identifier: FvOYUjcG6Dk7DtUPy96NwfNz4I2DjuhaN8bzJpjw1RM=
Subject key identifier: 07:ED:35:C6:12:1D:99:A4:75:ED:47:86:BB:DB:7A:F6:4B:EF:0C:78
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Certificate issuer: /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial: 019766971124C50F3D39A141869AA1DE6864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
Manifest number: 0DE9
Signing time: Fri 13 Jun 2025 00:01:05 +0000
Manifest this update: Fri 13 Jun 2025 00:01:05 +0000
Manifest next update: Sat 14 Jun 2025 00:01:05 +0000
Files and hashes: 1: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: wiTxKPrcPC+iUxRgcuGWodT0mDGrki1gS18HnwuY+i0=)
2: sUbLpeFS3XLLLQIvzdPabGUHzHo.roa (hash: 3V72mhpNF2hyMt7Kyc3iG5tEZ6zvkVberiaxQXV1Hcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:97:11:24:c5:0f:3d:39:a1:41:86:9a:a1:de:68:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Validity
Not Before: Jun 13 00:01:05 2025 GMT
Not After : Jun 14 00:01:05 2025 GMT
Subject: CN=07ed35c6121d99a475ed4786bbdb7af64bef0c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d6:b6:33:26:df:96:5f:5e:5a:40:d8:57:b8:
3c:cc:cb:e8:89:24:a9:2e:61:0a:2d:d0:fc:88:d6:
4a:77:32:94:76:eb:c3:cd:66:83:49:ce:4c:ce:af:
7f:9f:45:68:bf:d5:9e:44:69:a0:1b:74:b4:f4:e7:
1b:fc:4d:9b:64:e7:24:b9:87:5f:a2:6f:15:a6:0c:
e3:63:f9:8c:ad:16:09:1e:37:16:16:09:a0:9b:d4:
80:b6:a4:0a:77:4e:3b:43:f5:e7:37:73:b6:77:6e:
f6:63:4c:50:f4:21:32:ba:40:af:8a:6f:b9:dd:46:
ea:55:ff:c4:6a:73:ab:b1:26:b9:16:31:be:77:d2:
8e:e4:ae:07:d6:8d:0b:2d:d6:7f:9e:cf:40:37:60:
3c:6e:4d:c5:6f:16:61:0b:b6:7b:8e:66:e3:01:13:
5f:86:48:e5:79:bd:4a:3f:3a:62:7f:d6:86:7a:05:
1b:95:9d:c3:f0:f9:37:90:84:73:fe:62:ae:22:be:
54:a1:22:37:e4:1e:fe:53:73:ea:81:3f:c1:d0:69:
d9:22:1d:a0:57:1b:a6:bc:57:76:20:68:06:5b:0d:
7f:e9:8e:1b:b6:d6:09:75:92:2f:31:96:ba:a7:ce:
2a:b5:cb:1c:cf:85:db:87:06:e8:33:12:14:23:41:
b8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:ED:35:C6:12:1D:99:A4:75:ED:47:86:BB:DB:7A:F6:4B:EF:0C:78
X509v3 Authority Key Identifier:
keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a8:4b:66:30:c4:69:0b:46:99:c9:f2:08:d0:b4:53:9b:b9:
87:35:09:8b:81:83:37:31:ab:88:9e:03:45:d3:b2:23:9e:1b:
40:78:53:d8:9f:1d:df:41:eb:07:d0:46:a9:5d:e5:c5:c6:28:
2b:c0:b6:3e:49:b1:65:cd:e2:3e:74:10:11:fd:8c:7d:f2:94:
b1:99:b5:25:0e:2c:6b:ec:01:ba:00:63:bb:ae:e7:39:85:ed:
af:97:48:f7:fd:c4:b8:4c:8f:1d:60:df:3e:9d:dd:40:88:93:
81:0c:d9:d5:e3:ef:7d:c6:21:15:f6:ca:29:8a:cd:91:2e:d3:
5e:9f:d1:53:50:03:d1:2e:38:d9:a8:d2:f0:d4:fb:3b:1c:fa:
f2:17:87:a5:9d:87:8a:bb:f6:b2:52:0c:c4:f8:f4:57:77:73:
e0:f1:5b:6a:30:17:d3:4d:97:63:4c:23:df:d6:33:96:1b:f5:
e8:e9:e7:ef:e4:8a:b2:31:0e:24:47:b9:94:3c:54:0a:d2:b4:
b8:a6:68:c8:ef:02:2d:80:ad:3a:8c:93:4a:d9:67:ba:b6:fc:
89:53:55:a5:58:8e:17:97:d9:02:7a:b6:65:ba:b7:df:a1:71:
a1:9d:8d:55:55:85:e3:f8:5a:ce:01:e0:06:8f:3b:ea:8c:82:
f5:0f:cf:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 07:57:06 2025 by rpki-client