Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
File: fvh727KV4chetLDjVmFTwiGEX4E.mft (raw, json)
Hash identifier: y8CIazqLbCxDQDPRXdH1rSvOTFD4L1pwVy32xGAhz2w=
Subject key identifier: A1:7F:AB:60:12:25:FB:89:F0:CA:F5:D3:38:85:3B:F7:CA:DB:C3:51
Authority key identifier: 7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81
Certificate issuer: /CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
Certificate serial: 0197496843CB1C1A899B4113CF80E5D15E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
Manifest number: C4
Signing time: Sat 07 Jun 2025 08:00:59 +0000
Manifest this update: Sat 07 Jun 2025 08:00:59 +0000
Manifest next update: Sun 08 Jun 2025 08:00:59 +0000
Files and hashes: 1: XEatfg0Tk9Kl1lViBPnIbXw5FzE.roa (hash: G4U5UCTvd/mqwuDmGGvlZs+iLYiclpaGMY0aTsyHcfE=)
2: fvh727KV4chetLDjVmFTwiGEX4E.crl (hash: aFJlL9vY1RTJW3rBMlfa0efK++FUXSgP6poantHz5nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:43:cb:1c:1a:89:9b:41:13:cf:80:e5:d1:5e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
Validity
Not Before: Jun 7 08:00:59 2025 GMT
Not After : Jun 8 08:00:59 2025 GMT
Subject: CN=a17fab601225fb89f0caf5d338853bf7cadbc351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:be:7a:29:33:5e:56:06:75:e6:2c:d5:f3:5b:
21:44:4a:32:de:53:f6:4c:9f:76:46:71:5d:cb:ed:
36:73:3f:0b:11:40:9a:2f:23:b1:b9:be:51:15:ad:
7c:33:29:99:fe:4b:66:25:2a:73:79:3a:25:99:d9:
41:e1:13:64:93:aa:16:48:5a:da:74:c8:0b:89:b7:
75:f1:43:22:64:1c:c9:51:d3:4b:0f:6c:2f:14:60:
3b:35:2a:9d:8b:2b:48:0e:42:75:45:e2:03:b7:07:
aa:01:03:9f:ae:0d:9a:4f:bb:8d:eb:83:74:c3:db:
e4:27:15:dd:78:da:19:da:80:e0:df:b9:a4:38:ce:
11:ed:45:ea:b9:c3:c7:7a:33:c9:c0:ea:1a:96:0a:
3f:1a:68:09:01:66:99:9e:c3:02:c5:7c:d8:d9:33:
25:d9:19:5b:9b:82:6f:46:a4:41:52:2a:44:04:80:
ba:9f:02:75:bd:b2:c7:17:9c:64:9d:dd:db:4d:8a:
fd:88:e8:9c:5c:8e:16:8b:f4:c6:30:02:34:a7:a9:
b1:10:d6:97:76:12:db:aa:f8:14:d3:19:51:e9:25:
ee:97:7d:13:7c:35:6c:ba:88:3e:04:f7:68:68:80:
0b:4f:8e:26:50:a1:9f:6a:5f:f7:85:71:eb:d3:b5:
fe:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7F:AB:60:12:25:FB:89:F0:CA:F5:D3:38:85:3B:F7:CA:DB:C3:51
X509v3 Authority Key Identifier:
keyid:7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:33:0e:00:e1:3e:dc:e7:49:76:42:99:36:72:0c:ae:77:e2:
4e:b1:5f:a9:e8:d0:37:41:d9:5b:47:dd:3a:82:d1:d4:36:67:
c4:54:da:1e:8e:92:cb:dc:d0:d8:fc:77:11:1d:fd:75:e4:49:
c5:6b:b9:e9:9b:93:88:7a:c8:c8:b2:75:87:ed:74:6e:7b:46:
88:45:c3:51:4f:c0:e8:f5:74:39:ee:7f:61:bf:f6:db:f0:1b:
4d:87:e7:9c:bc:f5:c1:38:e5:fc:b5:ab:a6:31:db:4d:f7:a0:
09:0b:5a:30:9e:37:96:f9:b8:48:f7:38:8f:2d:65:47:05:7a:
b7:2c:1c:7e:93:bd:ff:0c:e4:30:67:27:70:c1:02:3f:03:22:
bc:09:10:79:e8:58:15:14:b8:8c:95:e3:d8:10:96:31:85:fc:
a1:a4:78:30:a2:77:75:5e:0e:3b:e9:be:d5:98:35:d1:2d:20:
2c:02:cb:1b:02:9f:14:af:c7:95:7d:8f:38:11:93:fa:1f:46:
b0:7d:59:94:ca:5c:3f:3d:25:26:93:a4:7c:5f:ae:ff:ac:e5:
3e:07:01:f0:8d:bc:85:56:ee:6e:ac:60:ff:b2:d7:0b:fa:46:
0f:9d:4a:fc:c8:f1:e3:ec:3d:9e:a5:41:f5:a4:21:36:15:5f:
26:f5:a9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:28 2025 by rpki-client