Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
File: _cNlqvvg5FoE3RXpwjESHp6uqPI.mft (raw, json)
Hash identifier: gK55T3jFr0zyHj+/k1Tv8xxgoPvmFzpXQAJnTMwhFF4=
Subject key identifier: A0:2A:57:E7:0D:94:D9:74:55:1C:7A:D2:D3:EF:A1:E8:78:52:CB:FB
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial: 01974CD6C4A5C0FCEC41D55112C41A73CE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
Manifest number: 08C6
Signing time: Sun 08 Jun 2025 00:00:32 +0000
Manifest this update: Sun 08 Jun 2025 00:00:32 +0000
Manifest next update: Mon 09 Jun 2025 00:00:32 +0000
Files and hashes: 1: WkM1k4qAimxGoAXfYc3XtjG5aS4.roa (hash: JEjZGh4dEBWAy5uvNyzYoFAxp8bWgzv1444j2h2JEVg=)
2: _cNlqvvg5FoE3RXpwjESHp6uqPI.crl (hash: zH4FfLCLL3LZuFwCmBtPvohZzisNlhRXgbfQ5XcJ7hM=)
3: jqc-CSQwW-qQ7TAEXOV-0DlhyHo.roa (hash: 2Wow4x7KtU4iQlp8s7jxmW893ftKcMCmze/PFHE6hj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:c4:a5:c0:fc:ec:41:d5:51:12:c4:1a:73:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Validity
Not Before: Jun 8 00:00:32 2025 GMT
Not After : Jun 9 00:00:32 2025 GMT
Subject: CN=a02a57e70d94d974551c7ad2d3efa1e87852cbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:07:2a:78:9e:6b:e0:45:94:07:ac:4f:93:
52:0a:ea:ad:42:fa:89:22:14:a2:c8:7e:e1:0a:a1:
0b:75:44:4f:5a:32:1d:c8:64:fe:10:7f:87:2b:5d:
53:24:da:e2:06:03:47:ba:bf:89:f2:a5:07:6b:11:
5d:cc:f2:69:b7:f1:34:72:d9:9a:f5:92:9d:ed:9f:
1a:aa:c3:70:86:b3:61:63:af:b3:25:80:a3:0a:33:
1f:76:b8:1a:7a:57:b7:42:4f:a8:cf:cb:8d:de:aa:
56:51:d0:69:0d:7f:d2:7d:db:ef:e5:d2:89:00:99:
b8:a7:d1:c7:b5:69:bb:c1:ef:51:44:ae:2f:55:59:
43:c7:2c:e5:6a:0d:6c:b5:d2:bb:e8:ea:69:56:4e:
af:08:17:22:bc:e8:d6:ad:2b:12:06:1e:99:5f:c1:
4d:05:3e:73:38:4b:50:3f:00:3c:1c:28:e2:85:73:
47:4b:d2:32:84:9f:e8:bd:64:0c:fe:51:f1:b6:2f:
ec:bf:e1:86:dd:a0:8c:84:9d:dd:ca:1c:67:54:3f:
61:8e:1f:20:be:bb:25:79:d4:29:aa:bb:a4:ff:12:
b8:f1:99:c8:e0:51:27:0e:28:72:b1:a0:dd:09:e1:
e0:83:c6:81:ac:fa:4f:50:38:1d:71:f5:16:ae:ca:
4a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2A:57:E7:0D:94:D9:74:55:1C:7A:D2:D3:EF:A1:E8:78:52:CB:FB
X509v3 Authority Key Identifier:
keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:57:80:fa:fa:02:97:28:6e:a8:71:dc:b9:6e:d6:7b:9d:98:
20:e7:02:2b:77:4c:31:f9:09:45:01:92:27:95:b5:8b:92:c7:
52:fd:41:d0:77:4b:b6:44:bc:f9:85:79:85:01:bc:66:ef:98:
e1:38:ba:51:d0:a7:03:da:ee:75:41:c5:6b:69:37:be:da:8e:
54:c4:5b:d6:6b:22:88:cc:ab:ec:a6:93:eb:a1:01:8f:0e:ba:
d1:3e:d8:08:6b:86:8a:05:a7:23:73:02:6b:79:b1:a7:b1:ed:
94:1e:58:27:25:49:92:79:78:f6:0b:ce:46:c2:7b:b5:4a:42:
18:f3:4b:0c:6c:a4:9a:4f:f1:62:cd:27:3c:18:93:7a:53:70:
c8:a8:19:60:71:59:87:b8:14:6e:6d:4a:07:38:b4:a3:81:71:
43:67:26:28:5e:23:0d:39:c8:5b:66:bc:04:79:e1:0e:a6:08:
91:d2:5a:37:3f:8b:ca:c0:b6:da:21:a5:5e:15:5d:5c:2c:c7:
a1:23:cf:a3:38:23:8d:80:17:a8:5a:9f:22:2b:f3:6b:f2:c8:
88:52:13:a6:9d:a8:00:ed:b3:b9:db:2f:4b:55:00:e6:c5:ad:
76:1c:20:be:1d:3f:d1:26:31:9b:e2:0e:3a:d2:92:61:5a:64:
ed:7e:9b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:48:19 2025 by rpki-client