
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
File: fBbp1X79rNP3vH6YSWtxn63Frkg.mft (raw, json)
Hash identifier: lKkx/+bchB65zTpwWY8pIqBk5fkeMN0ScW7/16fTiyk=
Subject key identifier: 7F:B9:71:4A:31:D6:E8:52:86:35:53:91:A9:0D:90:02:89:BD:33:27
Authority key identifier: 7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
Certificate issuer: /CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Certificate serial: 019745F913B5B2F098128C562CA42336F033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
Manifest number: 08C5
Signing time: Fri 06 Jun 2025 16:00:40 +0000
Manifest this update: Fri 06 Jun 2025 16:00:40 +0000
Manifest next update: Sat 07 Jun 2025 16:00:40 +0000
Files and hashes: 1: 9x0C1ycahYIp0jhnR--av7frEvs.roa (hash: TxO2zK2Lq7rKbvn4CVYDpMwFmpWv6oOsKAtfhF9aA3s=)
2: JiDLUAEWCf0QMkfngpohCbhKNuQ.roa (hash: g9GotTDpZgVRPRfg5qW5M4wBYQLWFDrkzBNLKf+GOCs=)
3: fBbp1X79rNP3vH6YSWtxn63Frkg.crl (hash: UClY0Wjrw5aPlHW7JQi219Z7ZszxuunDvyEaha+ZSEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:13:b5:b2:f0:98:12:8c:56:2c:a4:23:36:f0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Validity
Not Before: Jun 6 16:00:40 2025 GMT
Not After : Jun 7 16:00:40 2025 GMT
Subject: CN=7fb9714a31d6e85286355391a90d900289bd3327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:2b:21:3b:ed:b2:bb:ed:93:8a:11:85:0a:
e0:1f:58:69:a3:4e:2b:d9:da:04:b9:8d:49:d2:34:
b4:cc:c7:3d:92:33:7e:46:19:24:fb:88:a3:07:f5:
78:38:d5:db:64:72:d7:10:22:63:73:18:ad:fe:0b:
3c:4e:2c:58:2b:77:b0:f1:a1:60:10:d9:28:9b:42:
eb:4d:7d:60:8e:95:b3:e0:fc:50:bd:8a:84:a4:80:
53:db:37:dc:c6:57:fe:00:e6:23:fd:db:3b:7b:a3:
2d:c4:af:b9:cb:75:38:bd:bf:c0:c8:be:4a:7f:b9:
fb:42:6f:3f:83:d3:19:c2:bf:2f:e5:92:a4:07:c0:
bc:2f:a9:e2:09:68:82:ea:ef:a3:40:4d:12:fb:91:
0f:91:e0:61:00:8b:00:c5:17:16:80:f4:d6:8b:d5:
eb:30:25:f7:3d:1f:9b:b3:f8:91:ca:47:82:6a:f5:
64:bf:1c:be:3d:4c:d1:15:de:d3:dc:70:c3:96:95:
2f:28:f9:0c:aa:5c:d2:d3:67:23:30:4e:f8:0c:2e:
c3:b1:a2:1d:1d:2e:78:17:85:5c:b5:59:97:0a:67:
c8:42:d0:44:db:63:ef:05:d0:46:e4:f4:50:00:af:
bc:62:eb:85:a8:ba:70:0c:4b:f8:89:6b:18:f2:65:
1b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B9:71:4A:31:D6:E8:52:86:35:53:91:A9:0D:90:02:89:BD:33:27
X509v3 Authority Key Identifier:
keyid:7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2b:bc:44:1c:35:00:a0:73:9b:d4:e8:95:dc:db:aa:c7:5c:
20:09:5b:12:cf:db:22:d8:ed:e7:e6:59:ee:08:25:e5:ba:19:
13:89:ff:bb:7d:73:2d:ca:81:83:ea:5d:77:14:c9:03:d4:a4:
01:94:e7:e2:ed:19:45:d2:cd:70:3e:53:64:35:1f:ce:2a:74:
ad:f1:ce:57:27:2b:d1:0c:65:c9:7c:d8:45:77:55:bd:ec:4c:
a4:9a:fc:92:aa:5e:c9:3b:e8:a8:4c:9e:ad:31:b4:72:d0:bf:
54:f6:01:fb:02:f0:5f:ed:91:b0:6b:37:17:81:8b:58:2f:36:
00:8c:c8:e6:9d:ad:e6:d6:d3:eb:05:12:fc:7b:84:ae:90:bc:
d1:9e:0a:87:4d:39:53:5f:3d:ed:7b:24:ba:71:37:94:4f:80:
33:97:42:96:56:73:3c:3b:88:26:59:d0:3e:a8:75:c9:36:9c:
12:dc:b0:ab:c0:b9:55:3f:f4:b5:61:d1:16:65:20:f5:c9:b6:
35:c7:ea:d7:87:ef:77:05:68:52:8f:ac:bf:c4:25:a8:e7:a2:
40:da:7c:7b:27:83:8b:0e:12:10:19:ab:34:bd:87:52:39:5f:
0c:bb:47:e7:5c:19:f3:94:ed:93:63:76:89:0d:60:8d:e6:38:
fd:d2:41:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:20 2025 by rpki-client