Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier: 4wDUgO7ZnJjZl8jXtd9NKTVsdEbOEQ8ZymxmPUtNqjQ=
Subject key identifier: 3A:D1:E3:3C:98:B6:F9:A9:84:B4:9B:7E:D8:07:05:6E:B3:A0:03:6D
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 01974FD7E638AED163A6C822118A3D488F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number: 07DF
Signing time: Sun 08 Jun 2025 14:00:38 +0000
Manifest this update: Sun 08 Jun 2025 14:00:38 +0000
Manifest next update: Mon 09 Jun 2025 14:00:38 +0000
Files and hashes: 1: 45wj0w29EVb12lgzB4yBvbTkqGs.roa (hash: 4Uf4k8PcGp1LUe7lAU3OcDE8Hhp21WcetwJsk03S3B4=)
2: ZHtshAVSbLpIP6v49gVS0CpZjoA.roa (hash: mR3WUJCnn8qyhWMeXp3I4DCHuYg0Dpb1YM8jPQjkryI=)
3: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: P+IWdSf9geeUzUz5ct9cTuOLiTarrgBRif97uGLGIzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:e6:38:ae:d1:63:a6:c8:22:11:8a:3d:48:8f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: Jun 8 14:00:38 2025 GMT
Not After : Jun 9 14:00:38 2025 GMT
Subject: CN=3ad1e33c98b6f9a984b49b7ed807056eb3a0036d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2e:74:34:8c:6e:22:86:1c:69:92:0e:9f:cb:
67:66:d4:af:96:53:bd:80:cb:70:eb:bb:c8:75:b9:
a1:92:8f:4a:4a:4a:05:6f:3e:76:f8:ba:2b:0e:a4:
1d:80:86:67:22:f6:e9:f0:49:f1:07:ce:d0:45:49:
a9:bb:b5:0d:78:8f:3e:1c:74:f9:8c:dd:90:c9:9c:
fa:c3:25:1b:ef:be:4a:24:5c:d5:8b:6b:b1:df:d4:
80:4a:36:ca:fb:16:14:14:53:5e:81:3a:0c:0b:96:
bd:d9:27:fd:3e:6f:77:94:87:65:79:fd:88:1a:26:
c4:aa:f8:99:6a:df:c7:8f:ab:fb:b0:9b:a5:de:e4:
c3:c8:75:1e:0b:d3:4d:5d:96:6a:05:3c:21:1c:63:
d4:7f:8c:9e:34:30:c0:46:da:d6:1a:64:fd:41:d7:
ac:34:1e:94:d9:65:57:44:ed:ba:e4:76:1d:c5:85:
e8:9f:e3:35:9a:f9:19:3b:7c:24:da:e7:1e:0b:3d:
0d:6b:cd:9d:5f:fe:07:8d:36:e9:3d:82:6c:91:8b:
c7:75:b2:6a:a3:5d:47:58:fc:8d:43:49:2b:70:4d:
de:ba:b4:bb:f9:e2:96:1f:40:db:20:f6:cb:e2:29:
90:36:8b:e6:2f:b6:19:62:f9:66:85:a6:d6:48:c1:
88:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D1:E3:3C:98:B6:F9:A9:84:B4:9B:7E:D8:07:05:6E:B3:A0:03:6D
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ff:24:6e:12:cf:e7:e3:1e:c8:b7:7f:8a:60:8b:ac:36:f9:
54:57:04:01:f1:0a:67:59:dc:3f:1d:76:90:cf:b8:ac:8d:0c:
8d:6f:32:f8:a0:78:5e:f7:b1:e1:af:17:39:75:2b:59:76:7d:
27:43:9a:f7:95:b2:3d:e7:98:02:a9:41:d8:a7:72:16:7f:91:
ae:d2:1f:41:19:29:2a:91:94:34:76:59:bb:d2:01:01:2c:e1:
ca:88:ba:0a:de:18:c3:30:c6:11:bc:02:f7:af:27:06:07:c9:
b4:65:8e:6a:f1:93:13:fe:16:24:78:b1:30:bb:df:d2:c2:e1:
95:b3:fa:6d:ab:17:77:e8:4f:75:25:38:08:e1:ef:20:7d:58:
63:76:67:e1:bb:28:4d:cc:1a:4c:01:3a:47:e7:3e:6b:48:cf:
2d:2d:63:26:33:4b:54:92:31:87:96:69:58:a4:20:6f:57:6b:
d5:9f:7c:c9:1a:54:d4:fb:db:29:e8:52:48:23:c3:18:88:3f:
a7:b9:3a:f6:06:a9:1f:e8:32:b2:4d:46:71:46:bd:80:46:ae:
2d:16:d1:eb:6b:2d:c2:3e:df:bb:06:f3:3d:f3:c9:4b:76:fb:
1c:82:f2:bc:44:4e:37:7f:c3:24:b8:7d:29:96:a4:86:ae:b2:
66:10:7a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:45:15 2025 by rpki-client