Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
File: fdUdwQKkl1GOFgkeZegFwkOO8ls.mft (raw, json)
Hash identifier: D951kAg+TeT9zc2mRi+jGhIR8gmwFws+ZvPp9NmkL1Y=
Subject key identifier: C6:FC:21:66:88:E2:B0:DC:64:2D:9C:B0:19:72:26:F1:84:3F:BC:CE
Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
Certificate issuer: /CN=7dd51dc102a497518e16091e65e805c2438ef25b
Certificate serial: 0197470BCBFB6A427A853563738A5228E8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
Manifest number: 068D
Signing time: Fri 06 Jun 2025 21:00:44 +0000
Manifest this update: Fri 06 Jun 2025 21:00:44 +0000
Manifest next update: Sat 07 Jun 2025 21:00:44 +0000
Files and hashes: 1: TbMjDWj4JjSbzv98od3kf6H3oLQ.roa (hash: 6tue5GmhUL7N95x2Z4BFABU7q9BYKT3YDkCK4sofjnc=)
2: fdUdwQKkl1GOFgkeZegFwkOO8ls.crl (hash: sBaxQWeOgqVmiyvQ6atAOYp5ClPYyLHGlVIWb3DHmYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:cb:fb:6a:42:7a:85:35:63:73:8a:52:28:e8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b
Validity
Not Before: Jun 6 21:00:44 2025 GMT
Not After : Jun 7 21:00:44 2025 GMT
Subject: CN=c6fc216688e2b0dc642d9cb0197226f1843fbcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ff:f6:a1:f9:96:bb:89:75:c6:c8:06:69:15:
ce:d4:e1:32:7a:f5:49:14:e7:fb:a3:99:ab:51:8c:
cd:89:e1:23:50:d6:d6:0f:dd:55:68:5f:4d:ea:b2:
ce:50:62:9e:3f:94:0b:28:a8:db:f9:5d:7b:d3:f8:
24:35:8d:82:4b:48:5a:c5:29:48:a1:83:87:5a:a8:
d0:00:a5:30:72:b5:9a:1c:26:27:e6:76:cd:5e:3d:
b9:25:2c:df:03:6e:cb:9a:c6:bf:81:68:e6:b5:9c:
db:6d:c5:b7:e6:68:4a:a2:24:df:a6:9d:b8:77:00:
00:40:a3:c5:13:e9:07:0e:60:e7:d3:4c:42:03:2e:
8f:9c:9e:02:32:fc:b1:a4:8f:19:22:10:13:0f:8e:
2b:50:21:32:67:51:a4:e3:4c:08:b2:0c:34:f5:f3:
dd:87:0f:c5:97:73:6e:7d:ca:e1:12:15:11:3a:32:
38:c2:dd:3f:c2:42:06:8a:4c:8a:74:3d:f4:0b:87:
3a:fd:c2:c1:1a:b7:fe:d7:1b:7a:1c:cd:0b:f9:36:
48:8a:c8:33:42:bc:17:80:c0:a2:eb:31:e7:bb:b1:
ac:bd:ad:a0:cb:56:75:b6:27:24:f2:fa:64:85:0e:
0f:bf:b2:91:f3:26:4b:94:1e:9e:68:49:a6:af:7b:
55:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FC:21:66:88:E2:B0:DC:64:2D:9C:B0:19:72:26:F1:84:3F:BC:CE
X509v3 Authority Key Identifier:
keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:00:ef:6b:96:c8:3b:59:f2:a7:72:4e:df:8d:d8:cc:8e:49:
0d:42:d9:11:5a:01:b8:38:bd:0d:bd:58:42:3a:8f:16:5c:4c:
6b:d1:38:9f:f1:2b:34:43:84:87:83:d1:f9:51:c8:cf:8d:9f:
66:62:fe:62:e4:a5:d9:56:3b:a8:10:6c:f9:18:4b:54:1a:b2:
8d:c8:6d:69:6d:73:5b:9c:2d:44:8d:c0:17:82:71:dc:93:8f:
72:3f:98:03:bb:50:1d:44:5c:32:6e:04:f7:eb:05:72:7f:b0:
5d:c0:8d:43:ba:d4:03:9c:83:b4:f1:c4:06:8e:87:0f:2e:7d:
7c:64:9d:ce:1d:9f:2e:a2:50:62:9a:b7:60:a8:8d:f7:89:f3:
55:2f:23:ff:1e:38:41:05:27:a0:ae:ce:d1:5c:d3:c1:1d:c0:
1a:d3:aa:6c:e8:8e:32:98:a9:be:b7:8b:a0:81:c2:b1:23:d7:
2a:4f:22:bd:29:5b:9d:77:b8:fb:24:6d:fa:16:7d:62:58:cf:
35:e2:3b:63:58:ae:f3:72:0a:ef:92:b8:f3:f8:5d:e7:80:ab:
73:b0:63:8f:78:a6:8b:b3:17:44:09:bc:24:f9:7d:83:cd:d4:
d2:cb:3a:74:03:aa:6d:c4:f8:c1:ae:c2:29:aa:bc:17:b1:fe:
aa:18:e7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:19:06 2025 by rpki-client