Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
File: fJEmcywvAZO8PeTo06vBX0uu1i0.mft (raw, json)
Hash identifier: HMPwPM3axIrXpJcEAZwm/DloBUhCxN2naYYckgavCrY=
Subject key identifier: 3E:8E:C0:1A:29:24:EC:84:E2:73:05:FD:0E:DC:8F:AC:6A:21:89:B6
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 019754C716B730ECE33A07B2997067979010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
Manifest number: 1587
Signing time: Mon 09 Jun 2025 13:00:22 +0000
Manifest this update: Mon 09 Jun 2025 13:00:22 +0000
Manifest next update: Tue 10 Jun 2025 13:00:22 +0000
Files and hashes: 1: FhiaygjAF_1CRSj0CN-vLLhuasg.roa (hash: SeFF3k4+NSW9uVrbVWJXjtkwiHNZBfGKLzdPBZ23zYE=)
2: REJSEHBqBmUbahN6hVMSYy6LHI0.roa (hash: M3m09unuab4iohEbcy0njc+8m8Kysxgeqz3sy5tQvW4=)
3: fJEmcywvAZO8PeTo06vBX0uu1i0.crl (hash: SUqP2vMzvibrwFHJk4JasNvqCAZQPl9gS2mCwAEU1ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:c7:16:b7:30:ec:e3:3a:07:b2:99:70:67:97:90:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: Jun 9 13:00:22 2025 GMT
Not After : Jun 10 13:00:22 2025 GMT
Subject: CN=3e8ec01a2924ec84e27305fd0edc8fac6a2189b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:98:3a:e4:82:73:6c:75:fc:11:23:39:c1:bf:
73:67:47:9b:1d:dc:5f:2e:d7:c4:5a:97:62:f8:20:
ef:01:fe:ce:80:fa:57:2d:28:58:f9:2c:11:5b:7d:
f3:40:f0:9a:e4:c3:b5:4a:21:47:c2:83:31:f9:03:
44:9e:17:bf:f8:73:5d:a4:14:70:ea:18:5f:71:ac:
0b:90:6e:27:88:11:d8:fe:82:e8:13:2e:f5:e5:de:
6d:c5:6e:63:ab:c4:35:f6:16:b5:c9:9a:19:9f:1c:
29:47:64:42:48:35:08:c9:84:40:8f:83:19:0c:6d:
03:47:6e:8b:8e:56:29:a9:6f:25:fd:df:61:bb:7e:
52:c2:5e:04:6c:58:21:8f:ac:b9:f4:6b:36:4b:98:
f2:c5:86:28:ca:b0:bc:df:ab:f2:6e:48:0d:47:8c:
c4:42:70:be:fb:a2:e8:c4:33:be:b8:79:d5:57:f5:
76:42:e6:23:5c:b0:73:30:de:18:32:a4:4b:bc:11:
6a:07:11:6c:15:7d:24:ed:60:b4:7a:13:59:a6:f0:
44:8c:df:03:29:7f:c8:0d:4a:bd:70:fb:ec:8f:93:
4a:f8:e6:c6:77:6c:b8:e5:01:da:1d:1c:a7:a3:b7:
ba:1c:f4:09:d6:d9:a7:41:6d:30:16:6a:ff:f8:5b:
79:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8E:C0:1A:29:24:EC:84:E2:73:05:FD:0E:DC:8F:AC:6A:21:89:B6
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:08:ac:5a:b6:4c:61:fd:51:88:f8:88:e0:43:8a:e9:54:8d:
1e:53:0f:61:71:21:e1:b0:be:90:32:73:f8:fb:1a:0e:74:83:
00:e8:97:22:9c:9e:c8:21:d5:fb:ae:32:24:7b:1b:27:ec:01:
95:22:23:e0:1c:f0:3b:13:1b:4e:7a:07:11:d8:ed:82:7a:2f:
ab:39:3e:c1:3b:33:3a:90:7e:e0:e9:2e:c2:74:68:bc:56:3a:
c7:fe:1d:70:09:be:0a:9d:2b:5a:c7:59:6a:f1:81:8b:e0:ce:
8f:42:2a:ca:77:6f:0f:c8:b2:a8:4a:fe:6a:72:74:31:17:65:
c3:55:c5:d6:95:3d:7b:e3:1b:fe:f6:bd:5f:64:15:c9:78:68:
11:90:4b:80:1e:d2:d6:17:29:cc:2a:5a:00:8b:c7:bc:59:19:
84:7f:13:cf:d4:aa:c4:34:3f:af:e7:6e:cb:11:b0:6d:51:86:
60:ea:66:cc:34:c0:73:56:68:da:dd:88:0c:44:cc:97:99:4e:
f9:8e:56:0d:90:6b:0c:e2:5b:ae:8f:f9:dc:15:2c:de:f1:a8:
0f:08:dd:75:73:d8:dc:a0:33:d7:ea:3b:e9:d8:56:30:72:86:
f8:fc:a0:22:e4:b1:2c:6a:3c:27:a4:43:ba:d6:07:d5:25:1b:
6a:62:8e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:14:07 2025 by rpki-client