Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
File: sFRCxP_pwddh58VpNg6tBCQ4-QM.mft (raw, json)
Hash identifier: vlD8CyTVlbl+9+RXYWFWjUWUpLPp7OkrGkMYm487Kbg=
Subject key identifier: B0:23:F0:B5:B8:20:7F:EC:F2:75:31:42:31:D5:ED:47:28:AD:6B:D6
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Certificate issuer: /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial: 019749685FC01D36B42983ECCDE8F5C202D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
Manifest number: 1334
Signing time: Sat 07 Jun 2025 08:01:06 +0000
Manifest this update: Sat 07 Jun 2025 08:01:06 +0000
Manifest next update: Sun 08 Jun 2025 08:01:06 +0000
Files and hashes: 1: 2eKsq5jA6VcPDqKfgIi0E91JruI.roa (hash: qGG/9s4LOddy+BisdFXc5EQ3ZhAY8xD4+uBXz/g3pwU=)
2: 8v_aiBgvpLDJT4bE3zxJWwrf4Ao.roa (hash: wcB7NvMB7REyv6Xd72Vh3AOoxDTtyyThVZ07XtgTGL0=)
3: sFRCxP_pwddh58VpNg6tBCQ4-QM.crl (hash: sNsI3E33g5PcRq2CFfVlKwYdP8ADmG0Aw9nApi8cNxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:5f:c0:1d:36:b4:29:83:ec:cd:e8:f5:c2:02:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
Validity
Not Before: Jun 7 08:01:06 2025 GMT
Not After : Jun 8 08:01:06 2025 GMT
Subject: CN=b023f0b5b8207fecf275314231d5ed4728ad6bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:b4:18:ed:f5:cb:c4:02:4c:3b:0b:61:58:
6d:60:40:f7:1e:f9:99:98:86:7e:5a:d0:e5:b2:7c:
ce:a2:c2:59:21:4b:70:87:08:4f:da:55:fb:be:a8:
88:a1:16:4c:d1:2f:5b:0c:56:13:0b:67:91:09:a2:
ff:8a:09:52:5e:37:c8:e2:0c:24:cd:15:e3:ba:b7:
85:15:0d:e0:d9:5b:44:69:4f:3d:b6:fc:ca:10:b4:
24:ec:68:5f:21:3c:d9:da:93:dc:04:3c:15:02:61:
d9:4c:99:e0:7a:ad:77:aa:66:04:a9:1c:e0:76:bd:
ed:dc:b2:6c:e8:19:2c:89:39:c7:49:88:09:7e:45:
a8:24:8d:cb:c5:ab:f5:4b:0a:ca:76:35:4a:f5:00:
62:c5:13:d6:e7:bf:64:0b:71:0d:af:31:74:ee:c6:
d7:ec:97:29:fa:b9:df:80:71:97:49:74:ca:2e:aa:
d0:47:bc:89:15:d3:60:da:bc:10:5d:8f:d6:e3:1a:
27:79:e3:f2:3b:7b:a4:38:f5:a2:b0:43:57:9c:54:
2b:f8:ee:4a:79:a9:04:25:50:eb:19:0d:1f:6f:1d:
8b:8b:29:33:5b:0d:cd:b6:04:f8:d1:7d:2f:80:2e:
d7:2b:07:31:1a:15:f7:10:8d:18:90:0e:4b:92:ab:
a6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:23:F0:B5:B8:20:7F:EC:F2:75:31:42:31:D5:ED:47:28:AD:6B:D6
X509v3 Authority Key Identifier:
keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:40:af:53:25:0b:f3:56:c1:b1:d3:f4:2f:ad:e9:3c:01:96:
8a:1d:9f:bc:33:46:cf:15:71:32:7a:08:93:52:60:1a:d9:c7:
33:4e:33:12:a3:8f:48:11:d4:75:e8:f5:6c:55:3d:11:f0:0b:
f6:57:9b:73:1f:7a:68:36:68:69:99:76:cc:73:39:66:80:22:
9e:b1:d1:8d:82:cb:a3:be:09:9f:63:8a:e3:22:27:97:6a:ab:
d6:80:8b:24:d7:7c:fb:d2:98:6f:07:e8:da:1d:b1:af:c5:40:
ef:45:8f:db:5a:ae:09:e3:5d:c6:07:c0:4c:5f:eb:b7:ae:f8:
47:41:b7:c2:08:34:f8:e9:ef:7a:d2:72:b6:ee:43:04:88:b1:
77:0c:d5:58:30:61:85:18:f4:9f:17:d6:25:8f:8f:a2:15:2a:
6b:9f:dd:3d:da:13:c5:c2:9b:8e:06:28:16:91:55:50:d2:94:
3e:43:0a:29:74:ca:9e:35:99:5d:bc:20:13:8d:ad:f5:7c:37:
cf:3f:b8:e4:93:42:dc:f7:dd:b2:31:2f:14:f7:62:d9:9e:bf:
93:73:15:1c:15:39:af:91:9a:ca:bb:2d:44:80:6d:d6:85:1f:
5f:6b:ba:b8:5c:89:0a:f6:af:af:8d:62:eb:e9:db:91:91:ce:
f4:2e:4f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:44:01 2025 by rpki-client