Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
File: fTssMztylVesC-AnQLIiltgCv4E.mft (raw, json)
Hash identifier: s/rPSypgDQESBaUaY6pgR/D2ew2/QVpg1jj1bZLpucs=
Subject key identifier: C4:44:7C:AE:AF:12:36:25:D3:A8:83:9A:93:AB:01:79:06:B0:87:68
Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81
Certificate serial: 01974743052DD7FDEE6930BD1FC6153E7EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
Manifest number: 1553
Signing time: Fri 06 Jun 2025 22:01:03 +0000
Manifest this update: Fri 06 Jun 2025 22:01:03 +0000
Manifest next update: Sat 07 Jun 2025 22:01:03 +0000
Files and hashes: 1: WqjB7EtZkSL-ePfOxy2nv62eOkA.roa (hash: PG/xFOwvIaW9rUlAX7rZLKuzOPksgvVi2XmtGvzJW70=)
2: fTssMztylVesC-AnQLIiltgCv4E.crl (hash: HbV7K0C3H9+4Rw7DEaDzg6+fKiLfahF+dF3y2K9sjJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:43:05:2d:d7:fd:ee:69:30:bd:1f:c6:15:3e:7e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81
Validity
Not Before: Jun 6 22:01:03 2025 GMT
Not After : Jun 7 22:01:03 2025 GMT
Subject: CN=c4447caeaf123625d3a8839a93ab017906b08768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:c2:2c:d8:7a:33:ec:b9:d8:d1:99:60:ce:
13:74:1e:0b:04:e8:01:b9:2e:91:15:08:71:86:25:
ff:9b:e1:0d:c6:f1:ba:15:67:3d:32:95:bc:92:cb:
38:3e:f4:05:d0:91:b9:13:97:66:12:63:e7:3d:b6:
19:df:85:32:f1:4e:55:91:75:b5:77:01:b7:cc:09:
0d:b1:a2:10:6e:a9:f0:f1:43:20:4b:b7:fd:8f:1c:
ac:59:00:82:ca:09:31:cb:80:83:d3:6d:ae:43:0d:
7e:48:8b:99:eb:4e:50:42:3a:16:25:b5:fa:a6:1a:
c8:4e:f9:ef:9e:6d:3e:99:b1:df:e1:48:6e:5f:c5:
24:0d:10:1f:da:9d:e0:20:d4:31:d2:4c:98:4a:d0:
16:8a:71:f1:db:4a:93:2d:84:62:92:7e:52:65:db:
57:0f:64:95:26:58:d1:ef:90:52:bb:8f:09:ab:ee:
3e:9c:56:4e:02:8f:72:aa:ae:0f:60:c8:ca:12:41:
5a:2d:a9:fe:5f:93:d6:f5:00:e4:e5:d0:f8:8c:87:
32:65:30:f8:41:a8:9d:6b:5d:82:08:03:a6:bd:b7:
92:78:91:ba:67:0d:f3:dc:9d:5d:f2:b4:f7:bf:46:
28:f1:5a:81:ef:f8:cd:af:8e:7a:5e:e1:12:a7:ce:
ae:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:44:7C:AE:AF:12:36:25:D3:A8:83:9A:93:AB:01:79:06:B0:87:68
X509v3 Authority Key Identifier:
keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:3c:0b:55:90:03:65:f0:e9:1e:98:d7:7f:bd:41:c0:63:a6:
ee:1a:97:09:0e:5e:af:83:9a:24:e0:00:86:84:74:5b:62:c4:
3d:05:6f:e5:a4:c1:0f:e0:d5:1f:1f:19:1c:74:37:89:87:5f:
30:d6:c4:d6:31:b6:cb:4f:31:53:f7:4d:09:02:08:fd:e3:1a:
f5:0a:41:cf:23:28:db:b0:df:eb:e2:82:03:ca:2d:7c:4d:df:
e8:4f:52:c2:bc:d0:34:f4:6e:e8:4c:10:b1:fd:ac:6f:39:26:
71:3e:4a:94:35:8a:23:a1:f6:97:68:60:05:18:e4:17:01:21:
40:0f:90:6c:ba:92:d6:90:98:81:c6:8b:d0:ee:5b:a3:04:ed:
e5:9c:7c:bb:50:d4:62:5e:0f:0b:73:3e:a9:5c:b1:fe:c4:2d:
c3:9d:8a:e3:69:49:c7:03:58:5c:2e:b5:c2:69:98:4f:d4:2f:
e6:fd:4a:39:c5:ba:4f:bc:d7:e7:bd:6a:8e:85:e8:5f:28:91:
12:1b:62:bb:bb:e5:8a:86:b2:39:e9:73:84:27:b8:d2:a7:3f:
c6:a9:93:fc:a5:5a:3a:26:92:9b:25:0b:6e:c5:bc:d7:a7:ae:
a1:ce:9e:36:d7:c8:c7:41:25:69:98:e1:72:dd:11:2d:dc:2f:
a7:e4:7d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:13:21 2025 by rpki-client