Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
File: fxePr2QB4vNxbjF2RWnfcx31jyI.mft (raw, json)
Hash identifier: mpt25tEeUJyFD8mTNmpPyz+bwURzxQDKU03AHwXy8Lk=
Subject key identifier: B6:89:14:02:A6:06:DE:E4:AE:D3:28:2D:C7:3B:2B:3E:02:D2:49:18
Authority key identifier: 7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
Certificate issuer: /CN=7f178faf6401e2f3716e31764569df731df58f22
Certificate serial: 0197470BADB4D440B78E97F693A2F5F0D340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
Manifest number: 0FEE
Signing time: Fri 06 Jun 2025 21:00:37 +0000
Manifest this update: Fri 06 Jun 2025 21:00:37 +0000
Manifest next update: Sat 07 Jun 2025 21:00:37 +0000
Files and hashes: 1: aO3R8Yo3eBCEfuvERnCJCw4GHKw.roa (hash: 0+s8Oxr+vc9N7zEky4ZV5zDnUpXVmpiBsxhTGsefbzg=)
2: fxePr2QB4vNxbjF2RWnfcx31jyI.crl (hash: FNcfRveUpPL0CFTU4RiN8n2EX6KXWnkSjLfqBPMf/Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:ad:b4:d4:40:b7:8e:97:f6:93:a2:f5:f0:d3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f178faf6401e2f3716e31764569df731df58f22
Validity
Not Before: Jun 6 21:00:37 2025 GMT
Not After : Jun 7 21:00:37 2025 GMT
Subject: CN=b6891402a606dee4aed3282dc73b2b3e02d24918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:81:18:e2:fe:3a:91:ed:c3:33:65:0a:8e:66:
7a:f4:b5:58:dd:c4:11:1f:f9:e3:fa:20:b1:b0:b2:
ec:09:6a:16:0b:11:23:36:4c:3c:3f:a6:7c:f8:86:
69:74:10:25:72:d9:0b:79:05:1c:69:81:63:9f:9f:
ee:51:fb:32:f1:3d:c1:a5:7c:41:6b:af:ca:77:7e:
32:02:00:a4:76:c9:12:9f:92:bd:bf:45:9e:a9:b2:
86:13:3b:42:ef:e0:c8:ec:8c:72:57:d3:22:b1:f5:
2c:d2:46:7a:60:92:fd:93:d5:c9:b4:fe:e4:0b:e6:
2e:2f:db:6b:1f:b1:02:71:30:6d:94:99:8d:26:33:
07:fa:94:f3:ca:d4:23:80:4f:1e:9e:2b:9c:f0:10:
83:3c:16:e2:c9:2f:1f:ea:fb:da:5e:24:22:e5:13:
a7:05:18:d9:37:18:32:c5:32:6c:4d:6b:76:8a:4e:
35:e7:58:2c:78:88:e3:24:3c:c2:29:61:d8:31:72:
d5:2c:66:5e:1f:ff:6d:cf:78:71:4b:80:7f:c9:20:
5d:ca:68:cc:92:2a:51:03:b4:61:4e:35:89:f1:49:
d8:3f:fd:50:08:4b:d7:84:dd:5d:5b:06:6c:e3:00:
6c:38:fe:dc:2b:0f:0e:e1:47:08:79:a4:1b:9d:fa:
2f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:89:14:02:A6:06:DE:E4:AE:D3:28:2D:C7:3B:2B:3E:02:D2:49:18
X509v3 Authority Key Identifier:
keyid:7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:95:ac:3e:b7:1f:bb:2a:5e:50:36:b6:0f:da:d9:b9:47:5c:
a1:16:c1:15:4a:9c:ad:84:0c:cc:cd:39:87:30:01:ce:d7:be:
f8:4c:5b:ff:47:a6:03:a8:1a:ae:d1:71:93:17:1e:a5:63:b8:
5d:aa:14:88:ff:2c:1c:1b:ad:6f:32:c5:9a:40:0e:79:2a:a6:
57:dd:c6:98:cc:12:70:e7:3f:36:ae:8e:52:f8:82:ac:13:bb:
ad:c7:fa:30:67:de:eb:af:e6:c8:5d:25:c8:e3:f4:4b:ba:53:
a9:94:2e:e3:d2:67:88:16:c2:94:98:29:7e:a1:3c:0f:d8:df:
09:08:72:f5:01:46:1b:42:e9:58:53:8f:1e:4f:aa:84:12:fd:
9d:70:c3:fb:3f:5a:f3:13:64:e1:d0:76:73:84:be:34:27:0a:
02:9a:88:4c:9a:1f:14:f0:67:20:49:55:75:ac:2e:bc:37:3a:
2e:65:b4:58:7a:01:6b:92:87:2c:a7:3f:9e:b5:8d:ba:c8:1a:
cc:77:68:f8:d5:53:8a:bd:fd:2c:74:6e:b3:23:5f:a6:4d:4c:
54:5b:2f:97:c1:5c:ab:05:53:4d:0e:66:a3:81:ee:44:1a:04:
4b:8d:f7:9a:72:24:83:8a:f9:a8:85:3a:0e:3a:80:e4:c1:95:
09:da:37:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:45:06 2025 by rpki-client