Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
File: fQL6LFuiiSBF581Qpa39VNbbuMI.mft (raw, json)
Hash identifier: XnFXFokanhS7yI2v8mNXblYeSg91VnQxhkVf46JlqSw=
Subject key identifier: DF:AB:91:B5:D1:B3:C5:D1:47:0C:CB:F0:D4:34:72:47:0E:2A:A3:22
Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
Certificate issuer: /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Certificate serial: 019749681A8C1C39FEF5CB889A9BF744062E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
Manifest number: 145A
Signing time: Sat 07 Jun 2025 08:00:48 +0000
Manifest this update: Sat 07 Jun 2025 08:00:48 +0000
Manifest next update: Sun 08 Jun 2025 08:00:48 +0000
Files and hashes: 1: D0FtQbvZQzXxktB27DUgaEKlwyA.roa (hash: TJTUE8/n7jdIuoCoqw/ggE/DDwa5ne0vVYVe1eoGnag=)
2: RNOXkvXJ_ycI8OmwcuHSmaLAtH4.roa (hash: LUqOAenIf0vYCqR2aBBDyfZ5SWi7hY4GyrNgtlhdeZw=)
3: fQL6LFuiiSBF581Qpa39VNbbuMI.crl (hash: dPWIHGX8GnnRpmlf/WZWmAavMXUjanBnmXQC3o1bEbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:1a:8c:1c:39:fe:f5:cb:88:9a:9b:f7:44:06:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Validity
Not Before: Jun 7 08:00:48 2025 GMT
Not After : Jun 8 08:00:48 2025 GMT
Subject: CN=dfab91b5d1b3c5d1470ccbf0d43472470e2aa322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:28:53:b4:08:9d:83:96:11:4f:29:d1:e4:f2:
12:29:ad:20:8f:cd:db:74:bf:d7:1b:d7:3d:95:61:
31:67:36:ac:d3:cd:49:66:b1:c0:0a:4e:05:3e:89:
4a:c1:a7:66:0a:ab:6d:2c:1e:ca:a5:c2:be:bc:c9:
18:ce:4f:3a:e8:7e:a1:44:1f:9f:8b:77:87:4b:ae:
a8:ae:35:b3:3a:0c:07:b7:fe:ec:e2:2e:fb:78:ef:
42:cb:ac:f7:4b:82:6e:cf:3f:ff:54:ad:4c:bd:f1:
f6:30:63:98:5e:01:1a:af:66:10:b3:f5:db:a0:79:
a8:3c:bc:de:b0:6b:ce:11:9b:73:0a:dd:d5:6b:ea:
8f:ad:cf:75:75:b0:1e:85:d0:6f:d1:43:d9:64:0d:
58:3e:41:30:ef:2d:2e:78:a0:9c:fc:a7:97:15:73:
00:99:a5:d5:f2:3d:0a:bd:38:9f:32:0b:5a:75:99:
41:d8:08:e5:91:5d:23:47:53:8f:f5:36:5d:31:96:
7c:05:32:90:53:fd:8b:29:10:e4:c1:f8:0b:46:2f:
83:26:0c:7a:88:4a:f0:a6:25:2b:ca:43:3d:4a:18:
b8:a1:e2:01:ee:83:69:07:80:fa:f6:31:39:d1:83:
fe:00:0a:00:2f:aa:cd:d6:2d:33:17:9e:8e:52:f7:
df:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AB:91:B5:D1:B3:C5:D1:47:0C:CB:F0:D4:34:72:47:0E:2A:A3:22
X509v3 Authority Key Identifier:
keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:90:02:66:bc:75:ac:9a:9f:11:70:61:d8:14:af:7a:27:df:
d1:ec:e5:1e:33:6d:8a:6e:60:5b:92:34:b5:59:e1:51:7e:ba:
db:d8:ac:8a:e2:04:c7:25:99:72:df:4b:28:b0:ad:22:2c:67:
75:51:6f:a7:5f:eb:2a:7c:50:cf:80:33:3e:83:76:05:dc:2d:
4c:c0:43:61:23:25:03:92:83:30:58:d1:3c:c5:09:a2:89:ef:
a7:ab:e2:59:e6:4b:f1:95:5c:5f:6b:08:48:3b:2c:c6:95:88:
ed:ad:3f:bc:4a:8a:66:31:33:93:04:a4:3f:0b:18:10:bf:4a:
12:e3:b5:e9:73:3b:0f:a4:42:7c:c9:43:96:c5:87:a0:67:73:
35:a0:16:24:31:cd:46:23:0a:57:00:e3:b5:8b:2d:6c:49:d1:
94:31:02:7b:7e:2b:cf:0d:15:e6:c4:dd:3a:d0:cc:49:18:f1:
1f:d3:61:11:38:60:42:f4:3c:e1:be:6d:e5:0d:56:b3:65:8d:
15:06:c0:a1:4e:82:83:43:21:9c:7d:02:57:f4:5b:06:8b:3a:
b7:db:2a:d8:5c:4f:ed:4f:5b:42:b0:c0:70:d5:9b:28:e8:39:
00:2a:2b:c7:50:29:c0:b5:6c:12:61:93:ac:24:66:eb:01:a1:
e5:8d:9d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:49:53 2025 by rpki-client