Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
File: fktU39QWEHdP5_JC1904c6ZYRzs.mft (raw, json)
Hash identifier: mtWQp9N8bZkgBIeMLBV+smmnKP8MyOcjnsUvbZxtc3s=
Subject key identifier: C3:65:04:62:BE:F4:E9:E6:AE:A1:07:50:E9:48:9C:B0:1A:1F:F5:C4
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Certificate issuer: /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial: 0197481E9E6A0C85AD31792ED282B8B0666B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
Manifest number: 13D1
Signing time: Sat 07 Jun 2025 02:00:55 +0000
Manifest this update: Sat 07 Jun 2025 02:00:55 +0000
Manifest next update: Sun 08 Jun 2025 02:00:55 +0000
Files and hashes: 1: YRfkigtRLNkJN8VNtKbb3fRiIKs.roa (hash: CvzEdkr6eZNRd+mAapP+a07GKzLUJC/WQEw0I1mUkjI=)
2: fktU39QWEHdP5_JC1904c6ZYRzs.crl (hash: 0Cw0OYkYfJAF243N31tor31+TpxZStXA98BMAwKnvjc=)
3: hhzUk5P34fAewxviCp7L4orLbt4.roa (hash: anfj4g1I4XRHIljE+q3F4S8rJ8XQNKffMq+11otVUbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:9e:6a:0c:85:ad:31:79:2e:d2:82:b8:b0:66:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Validity
Not Before: Jun 7 02:00:55 2025 GMT
Not After : Jun 8 02:00:55 2025 GMT
Subject: CN=c3650462bef4e9e6aea10750e9489cb01a1ff5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:5f:be:cf:0f:09:4c:2a:59:c6:9d:0a:71:
2d:09:b6:bb:65:84:83:83:60:01:16:41:46:10:24:
f0:b8:c1:99:3a:d3:12:3b:2d:a5:c3:db:d4:b8:80:
52:ee:21:52:a9:1e:af:51:2b:de:7a:8f:4a:c0:ae:
66:71:0b:08:1b:f1:da:cf:01:da:b0:cc:b7:1c:13:
45:27:cf:55:14:a5:24:6e:15:ed:b7:c5:90:2c:44:
87:03:a3:8c:7e:5f:49:2e:09:c4:83:7c:ec:5f:cc:
db:3b:2f:82:b3:63:4a:d4:12:7c:40:ca:61:22:5a:
ba:27:49:d9:7c:3b:ee:0c:3c:8f:b0:61:5a:a8:f0:
70:28:36:71:78:08:9b:27:61:e7:ba:08:5a:31:c6:
3a:98:5c:62:04:11:50:ba:54:73:50:1e:39:81:4a:
da:74:b1:8a:80:1d:aa:7a:86:7b:d2:3e:d0:f0:c7:
02:fc:5c:48:6f:d1:70:df:43:7b:d8:9f:a4:49:b1:
44:74:c7:1d:ce:fe:ac:86:7d:15:36:28:4d:6c:4f:
6a:ba:90:ba:d4:ca:28:9a:1e:cd:5a:c6:68:bf:3f:
20:ba:59:ae:fb:eb:76:2a:cb:03:ab:c6:6b:03:67:
d5:ee:10:81:94:3f:1c:60:74:7b:65:d1:33:dc:b8:
93:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:65:04:62:BE:F4:E9:E6:AE:A1:07:50:E9:48:9C:B0:1A:1F:F5:C4
X509v3 Authority Key Identifier:
keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:28:19:b9:dc:72:66:42:71:63:46:5b:c4:94:fa:f0:b5:79:
43:5c:de:96:f2:c0:ad:bb:62:cc:4b:2a:26:2c:32:08:37:26:
6c:85:1b:29:f6:06:33:aa:8f:b4:16:7f:34:09:e0:02:f3:d5:
c1:de:83:c4:bc:a2:76:3a:5e:41:de:2d:2f:c7:40:ef:be:e0:
f0:29:8d:a4:94:56:46:54:40:19:58:44:71:d3:ee:02:c7:29:
60:a7:3b:e8:b8:c7:05:b6:a4:7c:ab:7d:9a:e5:b8:0e:ec:5e:
c8:d5:cc:2e:b3:28:0d:bf:b6:84:4d:f3:47:e7:8a:c2:83:14:
6c:ca:bf:33:79:96:83:b0:d8:cf:3b:fe:cb:78:4e:07:f7:8f:
56:1e:35:6d:90:fd:de:62:90:81:52:2b:b5:21:ef:7c:76:52:
62:49:83:90:dd:b4:0f:18:41:88:7a:39:ee:1d:b2:0c:36:45:
70:51:21:33:8c:e8:08:bb:fa:8d:9c:c0:ab:be:8a:5f:44:2e:
8a:53:82:59:8f:04:42:4d:75:5f:40:2a:65:42:9b:74:c3:6b:
ea:53:82:19:ef:72:04:3d:c5:f2:a7:35:63:d0:2e:f7:b4:b8:
2a:fd:26:67:93:94:f7:d0:41:4b:6b:8a:e9:be:ad:a3:d1:61:
86:2c:59:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:47:03 2025 by rpki-client