Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
File: fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft (raw, json)
Hash identifier: mLnEnbHJYf1PFeSvuW3UvglW88zXINkIGROk28IcKfY=
Subject key identifier: EA:33:C7:42:FC:00:19:B5:71:31:09:D5:43:1E:89:16:3C:B0:5C:2D
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 019761A8285A56EB3A4CF3E9C758B3B3C049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
Manifest number: 1347
Signing time: Thu 12 Jun 2025 01:01:39 +0000
Manifest this update: Thu 12 Jun 2025 01:01:39 +0000
Manifest next update: Fri 13 Jun 2025 01:01:39 +0000
Files and hashes: 1: Qmn6qMcsYc4tSMLHc4aOlKWHzLY.roa (hash: Z49F7eb8HQunLu54eXsnAFNRgDwdiL3VgHCYWpkpRJk=)
2: fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl (hash: SLXC7Lb60SC7DV9sZOEexFSF37WVqNekq1xv/Z82DXM=)
3: mwGFMLP8urixZJ9W1x_56ovfS3g.roa (hash: FFppZXO5afH6JgZ/GAUgkUjtbJbJsW6ZdAq5a1dyQoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:a8:28:5a:56:eb:3a:4c:f3:e9:c7:58:b3:b3:c0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: Jun 12 01:01:39 2025 GMT
Not After : Jun 13 01:01:39 2025 GMT
Subject: CN=ea33c742fc0019b5713109d5431e89163cb05c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ff:63:b4:2c:33:eb:c7:d1:32:0a:ac:9f:7c:
24:a0:7b:ec:d7:34:cd:25:8b:e1:33:88:07:d4:68:
74:d3:b1:cc:9c:cc:4f:7e:16:f0:18:dd:21:42:cb:
78:fe:9e:7c:0d:64:74:9e:6d:c0:86:8e:19:15:66:
cd:21:b6:d0:54:64:6c:06:bb:67:67:5f:47:ba:6e:
a3:0c:25:d1:38:a5:01:1a:12:4e:ef:89:ab:23:da:
72:bc:af:33:75:b5:db:f6:f3:27:15:2b:23:79:d1:
7e:05:60:88:b0:ea:fe:14:66:c3:ca:53:4f:b3:fb:
64:f1:e8:97:d5:63:8f:31:03:61:f2:83:57:f7:a2:
ed:76:a1:82:aa:80:43:1c:42:a9:a1:af:47:3d:54:
ba:86:c7:28:31:88:11:36:b3:ac:2a:26:85:59:c4:
bd:1c:bc:0c:83:d1:11:75:7c:96:bb:1c:90:f4:e8:
c4:cd:8f:3b:fd:10:01:5d:26:cf:ec:2e:b2:29:f0:
6d:47:fd:18:34:c2:c8:a9:29:a1:1f:04:25:bf:a6:
b0:bd:22:83:a7:ec:f2:88:62:a3:6c:61:84:e6:53:
36:bf:48:43:8d:17:79:a7:1b:9c:53:1a:f9:0d:89:
c7:21:da:75:54:35:de:54:3b:d7:f2:74:f7:76:bf:
b8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:33:C7:42:FC:00:19:B5:71:31:09:D5:43:1E:89:16:3C:B0:5C:2D
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9b:1f:28:dd:e1:d5:f5:56:8d:cb:59:cb:38:76:10:e6:49:
3c:b9:9b:fc:8f:1c:d5:e8:c0:43:c9:e0:ce:8c:78:b4:44:10:
32:5d:a1:3e:8a:7f:b0:fe:c5:df:71:9a:cd:29:6b:7c:6b:48:
4d:5e:22:35:d7:fe:11:bd:c0:3d:80:e3:a6:22:d3:6c:f8:da:
5f:b3:a6:17:fe:c8:44:0d:a6:0e:4e:fc:58:1f:7e:6d:16:b5:
3e:c4:e5:13:fa:1a:6c:48:68:7b:73:2d:12:1c:32:7a:5e:3e:
b2:b9:99:a1:58:e6:6f:64:4f:1f:c9:6e:c1:58:bf:a4:a1:7e:
f9:fb:01:4d:72:8d:91:75:c8:1d:34:d3:44:89:03:b9:14:8e:
8f:4d:4f:ff:ea:65:cf:14:5c:67:d9:5f:6b:2e:e9:9d:02:c9:
7d:4d:a4:2a:05:7b:97:db:30:33:02:d1:73:ae:e9:01:33:10:
43:41:b4:ce:08:66:0f:4f:1e:df:a1:97:85:25:bb:55:55:ce:
d2:e7:a7:73:22:ad:39:90:27:04:96:5a:22:91:ea:a2:0a:37:
24:04:3d:f4:fa:d5:5b:23:13:62:86:6e:72:8f:cd:e4:17:52:
4d:fb:c9:01:6b:7f:82:a6:a5:6d:df:d5:6f:64:13:53:0e:a5:
07:c6:4d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 06:59:50 2025 by rpki-client