Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
File: fJEmcywvAZO8PeTo06vBX0uu1i0.mft (raw, json)
Hash identifier: FkvLspRuDHbn2i+hQasKOJf8CjOGjqfey4ki87Jy6wQ=
Subject key identifier: 3B:BF:D4:5C:83:9F:B3:B2:7E:4B:58:40:80:E7:09:4F:C3:86:67:5E
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 019768173EFF8CBDD92F91B7D6ED5C36E191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
Manifest number: 1591
Signing time: Fri 13 Jun 2025 07:00:43 +0000
Manifest this update: Fri 13 Jun 2025 07:00:43 +0000
Manifest next update: Sat 14 Jun 2025 07:00:43 +0000
Files and hashes: 1: FhiaygjAF_1CRSj0CN-vLLhuasg.roa (hash: SeFF3k4+NSW9uVrbVWJXjtkwiHNZBfGKLzdPBZ23zYE=)
2: REJSEHBqBmUbahN6hVMSYy6LHI0.roa (hash: M3m09unuab4iohEbcy0njc+8m8Kysxgeqz3sy5tQvW4=)
3: fJEmcywvAZO8PeTo06vBX0uu1i0.crl (hash: 42B2CM/PFUIO/eOSOfGjBSFqGRdtDymmZfluCE9hOF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:17:3e:ff:8c:bd:d9:2f:91:b7:d6:ed:5c:36:e1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: Jun 13 07:00:43 2025 GMT
Not After : Jun 14 07:00:43 2025 GMT
Subject: CN=3bbfd45c839fb3b27e4b584080e7094fc386675e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:88:ef:7e:75:36:db:3b:e6:c4:91:02:89:c7:
21:e9:7c:5b:c0:13:ae:fb:13:bb:33:22:3e:0d:a0:
be:a7:7b:07:a4:7f:2a:bb:fe:1d:f2:e5:6b:45:bf:
12:63:d3:d0:31:f9:72:ea:d4:9a:a1:f9:9e:88:70:
72:12:6a:b9:f5:37:8e:1d:61:77:49:be:c5:ac:57:
b2:df:77:76:ca:c8:27:ef:39:fe:92:d5:f5:01:a2:
2d:96:e5:4a:6c:ae:6c:4e:59:5b:35:70:29:c2:af:
4e:7e:59:27:96:8a:f2:3d:c2:8c:b5:79:65:a3:4d:
9d:2e:bd:e2:b7:7b:ca:bf:4f:53:df:87:64:09:ab:
b1:09:7d:fd:ed:eb:08:b3:a3:c9:7f:63:82:5b:68:
7c:60:b7:52:a4:43:b2:32:a4:e6:40:f3:0b:53:26:
29:5f:b5:df:88:0a:e4:4c:d7:6c:f3:9b:63:a6:6d:
10:b7:eb:6c:10:4c:4f:0b:2d:bf:01:07:d3:2a:8c:
71:c0:ea:52:c6:6c:21:c0:ee:75:08:49:83:b1:b2:
dc:c4:b0:07:e9:82:91:7f:a6:4d:02:79:d3:b7:a1:
ea:56:df:7d:65:c9:a3:3d:16:f7:1d:74:8b:4b:be:
5f:0a:c3:81:6b:c4:f8:3f:84:ee:7c:41:69:eb:af:
2b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BF:D4:5C:83:9F:B3:B2:7E:4B:58:40:80:E7:09:4F:C3:86:67:5E
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e0:ff:47:b9:92:46:a8:f4:71:c6:53:d8:05:5a:60:58:23:
7d:87:58:f8:6e:36:ff:ba:c9:3a:b1:78:d0:dd:02:30:db:20:
4b:53:bc:9e:04:dc:94:dd:0e:8d:ad:59:01:25:03:25:f7:ba:
81:36:e0:37:8f:58:73:2c:50:d4:66:6f:6c:7d:78:a9:ef:60:
e9:b3:c6:98:0b:31:f6:b1:bd:2f:ef:34:03:f1:a9:9a:fd:b4:
e0:e0:1b:b4:41:0b:b8:c2:79:ac:fc:b1:b2:4f:14:88:a6:37:
00:4c:2f:c2:e7:17:f4:96:0c:87:aa:71:cd:c9:2b:7b:18:2a:
99:cf:0c:b1:3c:d1:99:42:9c:67:cd:80:7e:18:bf:56:7d:d9:
f2:c0:d4:97:1c:79:1b:b7:24:2a:81:6c:fd:82:55:7d:ee:6c:
bc:38:e9:f1:ac:07:7a:63:26:20:05:10:9a:ac:f5:4f:46:89:
b0:0b:b0:84:f4:5f:06:6a:9c:70:54:01:78:21:29:4c:9d:c4:
6f:6b:01:ff:4d:e4:d6:80:01:f6:c0:82:bc:4b:23:dd:a9:8e:
fa:31:66:19:50:94:07:3c:f6:49:c6:f4:66:10:f3:5a:7b:77:
b5:f5:7f:28:3b:ad:12:27:aa:2c:05:80:f1:4c:b1:77:0c:5c:
71:4d:7b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 17:08:02 2025 by rpki-client