Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
File: fFV1K31vznKGsaGi5DvIbUWE6D8.mft (raw, json)
Hash identifier: LCBt0o7U0Sty2orPzEEUk8HSZNQQdY2TBAJlYN11a/o=
Subject key identifier: 68:47:39:DF:A7:47:41:F6:66:2E:42:7E:58:1F:92:65:17:5C:D7:10
Authority key identifier: 7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F
Certificate issuer: /CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
Certificate serial: 0197537D713D5CF8A57C288C431C89FC18C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
Manifest number: 0B35
Signing time: Mon 09 Jun 2025 07:00:19 +0000
Manifest this update: Mon 09 Jun 2025 07:00:19 +0000
Manifest next update: Tue 10 Jun 2025 07:00:19 +0000
Files and hashes: 1: 8IVwcCAer2YFK0PD_eW_7QPltRk.roa (hash: DtzwrJfpj+KzExIWMGXO37ECdwLmhMCQMNWrFN/oGf4=)
2: fFV1K31vznKGsaGi5DvIbUWE6D8.crl (hash: dGfUuavH+J/82UCoTW5MWytCk9mo0NQKllK7Z5koRUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7d:71:3d:5c:f8:a5:7c:28:8c:43:1c:89:fc:18:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
Validity
Not Before: Jun 9 07:00:19 2025 GMT
Not After : Jun 10 07:00:19 2025 GMT
Subject: CN=684739dfa74741f6662e427e581f9265175cd710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:3c:75:1e:f1:6c:51:07:50:88:96:17:ef:05:
a0:f0:31:9a:c1:dd:aa:a3:44:85:21:64:7a:8f:62:
4c:f6:95:7e:98:01:3e:42:32:3c:09:df:cc:bf:cb:
2b:3e:18:28:53:e7:c6:db:30:0e:89:16:66:c8:de:
18:44:a9:7b:fc:20:52:d7:16:70:fe:6f:fd:2c:35:
3e:7c:fb:11:43:4f:16:74:01:d7:1a:bb:85:eb:ea:
00:f7:e8:b4:1c:32:2c:b6:35:3f:df:b5:d2:7a:3e:
c4:66:35:ab:18:43:ab:01:60:b9:3d:5c:d2:f4:69:
a6:97:34:a1:e8:c9:4e:03:29:f4:28:53:f3:ad:50:
c0:59:3d:69:2f:fd:5f:63:32:e5:6a:0c:75:7e:b6:
01:4d:73:1e:06:cc:b7:d7:30:9e:2a:f3:8a:b2:26:
5a:32:62:9a:d7:2c:9e:97:e3:3f:07:fa:50:a3:a5:
76:3e:37:7d:ed:50:a9:b5:2a:f9:16:f0:11:16:eb:
24:6d:1b:db:20:1d:25:93:c6:18:21:24:6f:38:cd:
3a:ce:ef:a3:c8:54:5a:64:bb:c7:f8:a9:3f:3a:90:
a5:c3:e2:ca:30:d3:9a:1a:07:1e:5c:72:0c:22:4c:
30:87:a7:2b:63:d0:9d:ac:be:06:ce:ed:ae:94:6d:
1a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:47:39:DF:A7:47:41:F6:66:2E:42:7E:58:1F:92:65:17:5C:D7:10
X509v3 Authority Key Identifier:
keyid:7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:16:42:61:42:9b:55:1b:aa:c3:45:6f:1b:aa:ea:ca:d4:24:
ec:84:1e:36:f8:76:08:34:5d:3d:46:cd:a8:2e:a9:6a:01:f4:
19:8b:41:9d:bf:68:55:d8:38:4b:c7:e5:fb:59:2e:c0:0e:67:
ef:17:29:31:9e:5d:5b:7b:ea:9d:1b:7b:c1:9f:4f:76:27:57:
a9:73:65:95:d5:50:6c:a8:10:3f:18:99:21:c6:a9:c0:ac:af:
b0:30:68:ca:6c:6b:0b:e2:bc:1a:d8:f2:69:01:ba:e9:89:3d:
6d:4c:4d:67:26:c3:1b:63:76:46:7a:c4:fd:bb:e7:fe:de:69:
5f:a6:84:b5:0c:9c:da:ea:5c:44:34:43:f3:9e:9d:08:a2:6f:
2f:5e:af:74:48:8e:92:b2:62:55:9c:a6:b4:28:5e:a2:d9:2b:
01:9b:71:34:c4:4e:43:61:3c:b7:ff:c3:25:aa:58:f8:b4:20:
ad:bf:e0:b8:1b:f3:9a:5f:12:16:59:56:ea:84:24:cd:7f:b2:
9c:c1:55:91:c2:0f:29:b5:ed:7c:0a:e1:9a:3b:95:b7:2b:d1:
f9:63:c3:4f:cc:59:b0:40:0e:e5:97:10:c4:53:72:e7:d5:17:
65:eb:88:96:ea:4f:c0:e3:bf:d0:5a:fd:d3:ed:72:e3:11:93:
8e:d4:e5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:21:28 2025 by rpki-client