Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File: fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier: lbqL21TTBu2N0m/4qaoEZuPEofTao6s5jF5S8NW2gj4=
Subject key identifier: 16:3E:C2:DF:45:45:7D:74:2F:C6:D8:09:43:03:EC:A3:16:8B:C7:73
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial: 01975046927ED34B24C7B5F9DE5EEADBB8BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number: 0AB5
Signing time: Sun 08 Jun 2025 16:01:31 +0000
Manifest this update: Sun 08 Jun 2025 16:01:31 +0000
Manifest next update: Mon 09 Jun 2025 16:01:31 +0000
Files and hashes: 1: XDbrvNT86ISN_spCbo4xvAzpVp4.roa (hash: VdcMI142dXyMiD8Y0gV4McGw1NiqJuUGtwcS5l0geTI=)
2: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: 3Jo6U8w3OuHUrzaiKEC99jJPiR9mlAVBzSobQcQxGOM=)
3: ziT1KvRp4nclVM5reU3sOFNH1x4.roa (hash: Q4C5iLbiXkuuyYxp+dYvmqYFnNUxA4NFMnWPDomm2KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:92:7e:d3:4b:24:c7:b5:f9:de:5e:ea:db:b8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Validity
Not Before: Jun 8 16:01:31 2025 GMT
Not After : Jun 9 16:01:31 2025 GMT
Subject: CN=163ec2df45457d742fc6d8094303eca3168bc773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e1:8a:5a:dd:1f:f8:12:ee:12:55:71:f4:86:
4a:e5:90:ba:44:98:8d:0e:3e:21:b3:fa:6b:15:5e:
33:09:7b:2f:e3:34:9e:e1:ee:38:ae:46:1e:e0:bc:
c6:c5:e8:03:2a:13:61:97:37:c1:d2:f8:78:7b:1e:
c8:94:03:de:c8:69:7a:f7:2d:3a:f8:bb:b7:26:0a:
7d:b2:ee:10:cc:90:d5:61:3b:11:6d:dd:6e:bf:50:
1f:bc:6c:e2:79:39:99:0a:2a:40:05:52:00:ad:f4:
44:38:5d:ca:68:54:aa:23:85:49:9a:8b:c7:65:90:
6c:2c:1e:05:16:93:d6:c8:37:96:e1:a5:d5:96:8f:
91:40:12:8e:80:66:03:e1:8f:54:30:ea:3b:1d:7e:
08:a4:17:ef:99:ae:b1:19:f0:a4:60:6b:ea:03:7a:
4e:cc:fa:bf:b2:82:d6:cf:3d:61:be:92:1f:4e:90:
79:8c:63:4b:44:41:ec:c6:bf:f1:7c:36:b5:e4:2e:
f4:7d:fd:4e:6f:d0:80:9b:90:f3:8f:62:cf:5e:89:
c2:c7:e9:6e:9d:a4:c9:d5:1e:5d:55:cd:ea:0f:1c:
84:d2:5c:ec:0a:e0:d3:69:9f:67:ee:97:3c:5f:30:
69:95:d9:ee:d0:4d:6f:36:92:81:1e:8f:dd:39:a4:
3d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3E:C2:DF:45:45:7D:74:2F:C6:D8:09:43:03:EC:A3:16:8B:C7:73
X509v3 Authority Key Identifier:
keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:70:8c:08:ce:8a:09:5f:17:63:23:90:75:31:31:98:c0:49:
fe:18:43:d6:dd:e5:23:32:e7:ad:b7:72:88:8a:e2:25:69:ae:
62:00:f0:53:ea:aa:99:72:f4:d2:28:05:10:84:ca:83:9e:28:
52:cf:f3:2c:b2:93:b3:ea:65:cf:ad:5d:2c:7d:15:d1:8d:fb:
fd:ca:24:5c:c7:fd:9b:7c:de:c3:1d:f1:2d:ff:fe:b8:6b:55:
de:db:d3:44:9c:26:1e:6d:a5:07:df:eb:6a:d7:82:26:ad:28:
d1:30:d0:30:1f:18:8d:e7:cd:bd:b9:a2:ac:74:d6:6c:fd:9e:
f6:30:63:fd:c9:d9:eb:69:96:0a:06:20:43:a9:6c:c1:ab:d2:
57:fd:60:a1:a3:68:25:ef:28:41:1d:c5:cb:03:89:58:94:0e:
6d:29:78:08:71:5b:f8:16:12:4a:02:3a:62:31:73:c0:17:e3:
9e:e1:c4:ba:c0:48:ea:2b:43:cc:a6:59:47:68:d8:fc:00:8b:
0b:ca:8c:a8:bc:03:34:5a:54:95:e7:da:0c:55:ce:20:7c:eb:
cf:18:1e:6a:84:66:e3:65:de:ae:a4:84:f8:fa:34:d4:5d:49:
66:38:9f:3b:f1:35:d1:40:26:7a:f7:d6:00:b7:83:d2:db:c2:
8e:2f:38:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:41:33 2025 by rpki-client