
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
File: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft (raw, json)
Hash identifier: 5n0pzOpY/ctsx09ys/C8lvC1hbZBJlYNMk4RoBHhIYg=
Subject key identifier: 36:8E:33:42:50:06:A5:CC:16:37:49:8A:11:CA:81:59:9C:C7:D9:F2
Authority key identifier: 17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A
Certificate issuer: /CN=17972d43835cd6a66e54e5a5856ce57de282d43a
Certificate serial: 019758A432E787CD6E812353061DAFE64619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
Manifest number: 0C7E
Signing time: Tue 10 Jun 2025 07:00:45 +0000
Manifest this update: Tue 10 Jun 2025 07:00:45 +0000
Manifest next update: Wed 11 Jun 2025 07:00:45 +0000
Files and hashes: 1: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl (hash: JSakDSMnO/k4rwZFf4IamJFq4Y/WhZ+wFeIEh1QamOw=)
2: nD9K7BuoobBm0UoH5h6nnInzZ5M.roa (hash: n+EpS4FTLeyovvcIgss8uVwl4+ZqeSqmuV4HpNA3yWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:a4:32:e7:87:cd:6e:81:23:53:06:1d:af:e6:46:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17972d43835cd6a66e54e5a5856ce57de282d43a
Validity
Not Before: Jun 10 07:00:45 2025 GMT
Not After : Jun 11 07:00:45 2025 GMT
Subject: CN=368e33425006a5cc1637498a11ca81599cc7d9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:53:e6:77:76:23:8a:de:89:e8:8d:f9:3d:7f:
58:31:34:2b:9f:76:37:57:6b:59:2f:5e:20:fc:d8:
e1:e6:e0:2b:c7:dc:5f:6b:16:73:56:7a:7e:35:5a:
a9:5b:47:17:84:24:fe:7e:d5:f0:1a:cc:59:a4:3d:
df:cc:5c:fe:19:2a:61:e0:65:bf:cb:15:46:e4:9e:
84:28:f0:7f:0a:ca:1d:4a:18:b8:8f:db:eb:dc:75:
86:6b:c7:6e:7c:bd:1c:37:4c:14:58:65:bf:fe:84:
f3:10:44:de:66:f3:9c:80:f0:a6:f2:25:54:b3:34:
41:42:e5:a4:e9:57:f2:f1:0a:c8:39:f5:57:b5:4e:
17:cc:6f:b7:52:0c:24:11:18:79:02:7b:4d:bf:ee:
64:7e:90:27:c5:0e:34:9e:d6:2b:f2:59:de:87:34:
fe:92:08:3a:d5:cf:4d:bd:c4:9e:90:ee:59:6f:d7:
45:ce:1c:45:ef:fc:ce:c5:81:12:42:3f:90:05:48:
c8:ff:9e:18:f1:c1:ee:ff:6b:aa:0c:e8:13:a4:0d:
33:f0:33:e8:89:7c:28:31:43:6b:c1:82:2f:a0:70:
ac:9e:a2:3b:cd:46:17:2e:f3:5e:35:51:b8:eb:68:
68:1f:62:44:2c:63:77:0a:a8:89:31:e2:53:50:89:
c2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8E:33:42:50:06:A5:CC:16:37:49:8A:11:CA:81:59:9C:C7:D9:F2
X509v3 Authority Key Identifier:
keyid:17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:18:62:d9:b7:99:ba:32:d9:31:02:08:52:1d:3f:92:2a:d2:
3e:57:1b:d8:e0:14:27:cd:8a:9e:a5:39:18:75:ce:9c:19:45:
72:4d:35:d7:1b:d3:12:38:25:96:a3:99:77:df:04:63:4b:74:
39:89:c9:54:c0:2c:6a:ba:e0:b8:91:8f:b2:25:d8:4f:d0:9a:
d4:1a:1e:ea:49:08:78:8b:e3:22:96:60:05:e4:60:15:18:67:
d6:23:cc:ec:91:4e:3d:89:df:cb:48:3e:eb:c2:e6:2c:85:17:
e0:4e:1a:b0:42:35:f0:b1:37:31:00:f0:07:e9:1d:54:30:b3:
ff:17:92:61:70:f4:46:36:0d:be:db:51:57:4d:b0:a9:7d:dc:
ec:34:22:e3:b7:8f:cb:ce:53:13:69:94:82:33:2f:f7:3e:37:
6a:5c:e3:1a:5e:e6:aa:8c:ac:e3:a3:4e:e8:98:66:4f:50:e5:
42:82:11:53:6f:d3:60:99:6b:c4:88:f1:c7:b9:d4:5b:eb:7d:
d2:32:34:ce:f0:8d:6e:54:e3:c7:8d:d9:66:e2:65:21:4a:1a:
24:4f:19:e9:3d:90:e6:20:c8:ba:6a:25:e0:b5:93:75:70:d8:
cd:1b:9e:68:0d:43:83:4e:7a:6f:60:13:11:e8:ed:dd:09:8b:
2a:ce:b5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:42:25 2025 by rpki-client