Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
File: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft (raw, json)
Hash identifier: ji77YEtcJHlLNYmOI1hdLRUPskLsrN4dF402yWOY7DM=
Subject key identifier: 40:CB:F0:65:4E:64:E7:B8:02:46:83:0C:7F:0E:7F:82:5A:4D:72:DD
Authority key identifier: 17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A
Certificate issuer: /CN=17972d43835cd6a66e54e5a5856ce57de282d43a
Certificate serial: 01975E6F6AC16467BF2C79F99523A2E31164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
Manifest number: 0C81
Signing time: Wed 11 Jun 2025 10:00:49 +0000
Manifest this update: Wed 11 Jun 2025 10:00:49 +0000
Manifest next update: Thu 12 Jun 2025 10:00:49 +0000
Files and hashes: 1: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl (hash: kNtQontMOYkpWXZ4jvZ+q0sb9CEpfXFwHt+jaXtwyc4=)
2: nD9K7BuoobBm0UoH5h6nnInzZ5M.roa (hash: n+EpS4FTLeyovvcIgss8uVwl4+ZqeSqmuV4HpNA3yWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:6f:6a:c1:64:67:bf:2c:79:f9:95:23:a2:e3:11:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17972d43835cd6a66e54e5a5856ce57de282d43a
Validity
Not Before: Jun 11 10:00:49 2025 GMT
Not After : Jun 12 10:00:49 2025 GMT
Subject: CN=40cbf0654e64e7b80246830c7f0e7f825a4d72dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:33:04:05:70:8d:a2:e7:ed:20:d4:89:08:50:
5d:e9:3f:8a:61:53:61:cf:ff:a4:02:21:bb:a5:82:
13:8a:5c:07:0a:e9:3e:50:61:ef:3e:07:31:e5:fb:
9d:86:9e:69:db:c2:c9:26:1c:ec:0e:35:0d:81:59:
ee:a4:8f:61:0b:e5:54:16:35:ce:85:2c:93:10:de:
76:77:ca:a7:d3:f0:a4:25:1d:96:d2:31:70:c0:58:
f0:14:31:41:c3:81:c5:17:ac:d1:8b:bf:2c:e3:0d:
5f:4e:fe:8b:6f:be:3b:44:42:cc:27:1f:9f:df:21:
5c:2e:94:d6:bd:54:dd:82:0e:ea:7a:90:e5:1d:da:
33:1d:3d:28:ed:22:30:cc:ea:ec:95:ca:b4:68:d4:
bb:36:81:80:6d:99:02:19:12:a3:90:62:f5:30:5d:
95:ff:47:9b:52:f0:a6:e1:08:79:2f:24:28:e1:24:
04:94:f6:30:65:b3:a9:4f:ab:ec:45:f8:47:f3:9f:
9e:a0:21:f9:9f:2b:f4:b6:c2:aa:c8:36:39:0c:ab:
06:c6:5e:ca:c7:45:33:8b:18:ed:68:bc:cf:f8:ef:
18:04:ac:8e:33:3c:8b:88:f0:d0:f3:90:d3:03:f5:
49:c9:1e:62:fd:0b:86:f3:b9:db:20:6d:ed:f8:5d:
df:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CB:F0:65:4E:64:E7:B8:02:46:83:0C:7F:0E:7F:82:5A:4D:72:DD
X509v3 Authority Key Identifier:
keyid:17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:51:27:39:ac:a8:3a:cb:b8:c5:33:d9:66:ba:2e:82:c9:07:
c4:63:30:ee:9e:6b:05:8c:76:88:66:96:76:6b:43:7b:3a:92:
c1:2f:9a:2c:f2:9c:dd:77:9c:c9:69:90:86:2b:fd:b6:83:f0:
b3:ce:9b:98:8e:f9:12:ff:bf:49:50:b7:18:37:cb:f0:1f:6b:
46:81:fb:b2:f2:5d:52:4c:b5:c2:1c:46:4e:02:4e:48:60:82:
7d:c3:da:d4:53:f2:92:28:7d:23:45:d0:5e:40:2f:a3:8b:1f:
aa:45:d7:75:d4:ef:38:5a:34:e1:c8:eb:72:6a:f2:e2:6e:ee:
6e:17:d5:6b:4f:4b:70:8e:5f:74:07:5f:cd:59:80:a7:63:10:
b0:c4:60:4d:1e:8e:48:a5:4a:4c:6c:84:5f:63:11:6a:c8:ca:
50:ae:c2:14:cf:2a:5e:83:fe:c8:5c:99:25:29:88:e5:e6:56:
6c:55:4a:4d:00:02:d5:c2:bb:b2:76:cf:ce:1f:c2:d2:62:8b:
d1:78:e0:fa:35:31:8c:b2:e2:a8:fc:73:21:fd:37:5b:4f:fb:
20:f0:a1:6c:08:ac:27:5c:6f:54:20:26:21:89:be:55:40:30:
b3:dc:64:49:93:50:f0:fa:75:4f:fa:d0:0b:cb:13:42:ea:71:
25:bc:87:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:54:55 2025 by rpki-client