Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
File: fYx0FDwic-IBpnVxVDHfryj-F7I.mft (raw, json)
Hash identifier: bJtMNjfj8cCxn2B7WEb8EXYU8A3HjIZ67nu2U/AWMi0=
Subject key identifier: 50:1B:2E:03:02:0A:E0:7D:62:04:9E:3E:0A:14:9E:3C:D1:91:18:6D
Authority key identifier: 7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
Certificate issuer: /CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Certificate serial: 0197537DCEE862FCE25616FB7B80D50EE5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
Manifest number: 0A0C
Signing time: Mon 09 Jun 2025 07:00:43 +0000
Manifest this update: Mon 09 Jun 2025 07:00:43 +0000
Manifest next update: Tue 10 Jun 2025 07:00:43 +0000
Files and hashes: 1: Xrjs-S2RSbrZu3yjzq9Uz6FE53U.roa (hash: BOs1xZvMppiPo1LljXNukiOUbDIO0taZ6bkmR9k5vfQ=)
2: fYx0FDwic-IBpnVxVDHfryj-F7I.crl (hash: PVAq2tr5tgFq+9b+LeH8d9aWUtfB5InWX7+RwmT7vsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7d:ce:e8:62:fc:e2:56:16:fb:7b:80:d5:0e:e5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Validity
Not Before: Jun 9 07:00:43 2025 GMT
Not After : Jun 10 07:00:43 2025 GMT
Subject: CN=501b2e03020ae07d62049e3e0a149e3cd191186d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:52:21:0d:15:5e:db:85:96:61:97:a6:aa:a0:
cd:5b:b6:e3:ef:df:5a:4b:b6:6d:b3:c8:dc:b7:2f:
87:d7:e2:e8:58:b0:6b:08:4b:84:f2:95:d5:b9:3e:
ea:e2:64:8f:6e:4c:38:21:71:5d:6e:7d:f7:e0:3a:
f1:3c:89:85:4e:ef:c3:48:3e:2b:b4:a6:99:35:88:
c1:91:9c:07:15:4c:e4:51:bc:71:68:57:66:5e:c4:
3e:77:1c:da:89:36:1e:34:e1:ff:fc:9d:0d:ea:83:
83:c0:e4:7d:86:0c:89:4e:ac:87:07:de:e4:a1:58:
8e:d0:1b:65:f1:d4:3c:51:a3:14:59:27:ee:f5:85:
9d:e3:88:40:52:89:57:36:7b:b6:54:e9:6f:86:d6:
dd:c2:ef:bf:d5:20:27:61:9d:e7:f4:c5:79:7b:60:
47:36:0e:64:9b:f0:01:89:be:cf:1b:d7:af:8c:da:
83:08:1a:bb:c2:23:7c:5b:ab:ed:b7:34:aa:c1:aa:
af:7b:8e:1c:8a:66:a5:e9:27:83:ef:a8:e1:39:c1:
dc:8f:b8:c3:19:d5:31:75:2b:c3:d0:a7:fe:4b:d3:
2f:00:3a:91:6a:99:a3:0a:3a:01:1b:d8:86:b6:a2:
8e:a2:50:aa:f2:e6:77:9f:c9:0d:a9:59:17:fd:a0:
20:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1B:2E:03:02:0A:E0:7D:62:04:9E:3E:0A:14:9E:3C:D1:91:18:6D
X509v3 Authority Key Identifier:
keyid:7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:64:24:5a:24:4d:9b:f2:d8:61:92:12:50:16:58:26:e5:1f:
5f:e4:56:36:79:92:8f:1c:fa:a7:f5:ba:d5:88:62:a3:6e:a6:
3a:b2:a3:68:13:fd:d4:5a:43:e9:af:9d:8c:de:5b:46:36:f5:
df:45:9c:db:4a:e0:82:35:a6:72:09:f4:0a:1e:dc:9c:3c:7a:
86:a5:ba:b5:77:fd:6e:42:a5:07:86:c0:8e:92:b9:b6:bc:6e:
c7:63:95:ee:d2:83:df:95:3c:04:34:ff:cb:75:ab:ad:8b:f1:
22:6b:d7:81:82:a8:e4:91:32:c6:a1:e9:a9:41:0f:69:8e:4a:
b9:c4:14:a2:26:38:ac:9e:ea:56:40:79:40:5d:19:2c:e3:a1:
ed:b6:37:39:98:1b:e4:22:1a:05:51:b3:57:c7:c0:47:cc:53:
95:aa:85:42:44:5b:e2:2b:7e:ee:c5:3a:ae:f0:5e:d1:3a:89:
72:fa:8c:d0:6c:ff:58:39:e4:97:40:20:7c:c1:cd:ab:5a:61:
a0:8c:8a:b5:91:fa:53:04:c8:75:f2:0a:10:42:59:ac:00:3b:
de:3c:49:34:70:72:35:48:14:08:cb:b1:68:a3:27:28:50:cb:
8b:b0:cd:a0:97:73:de:74:a7:e3:d1:8b:f6:c2:60:52:6a:11:
5f:5b:66:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:51:00 2025 by rpki-client