Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
File: fNFi3seCCbwDrdCBUn1Usn6E0m4.mft (raw, json)
Hash identifier: bKyQsEYouheqVVVbjwnLrkJD1xA1ObntPSdwEMByCJs=
Subject key identifier: 79:1A:E3:13:A0:36:03:EB:EF:14:A9:7E:0C:80:47:65:F1:B0:AF:48
Authority key identifier: 7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E
Certificate issuer: /CN=7cd162dec78209bc03add081527d54b27e84d26e
Certificate serial: 0197530F9A889275346A86DD64DFEFC905E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
Manifest number: 1585
Signing time: Mon 09 Jun 2025 05:00:20 +0000
Manifest this update: Mon 09 Jun 2025 05:00:20 +0000
Manifest next update: Tue 10 Jun 2025 05:00:20 +0000
Files and hashes: 1: fNFi3seCCbwDrdCBUn1Usn6E0m4.crl (hash: OGlR32s57R09eFxNvBikltHO47CS/HKi/naeBzZTkMY=)
2: p62St_0MRIeBUvHxqOmIuKO2S0g.roa (hash: V3Cr5hnF6tOsq5Vm2VEjfSqOP5RKmdhFpUZAhs7o/b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:0f:9a:88:92:75:34:6a:86:dd:64:df:ef:c9:05:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd162dec78209bc03add081527d54b27e84d26e
Validity
Not Before: Jun 9 05:00:20 2025 GMT
Not After : Jun 10 05:00:20 2025 GMT
Subject: CN=791ae313a03603ebef14a97e0c804765f1b0af48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:5c:1c:14:73:39:20:e6:ea:d8:85:e2:1a:
bb:ba:7e:1b:4f:c9:c5:66:9a:f7:43:6e:57:b6:2a:
6d:32:85:94:01:c8:e3:7e:ce:43:8b:e0:6a:6e:14:
e0:79:14:01:dc:2f:6d:ce:99:56:fa:bd:2e:57:94:
08:bb:ef:09:ce:7b:72:8a:f0:79:a0:78:df:16:7a:
c8:b7:e0:87:21:e6:fa:ed:37:0d:43:3e:9b:a0:c6:
06:76:1c:e4:97:7a:a3:ea:eb:76:63:04:59:ce:c5:
d3:3b:1a:0d:5d:f4:d8:7a:0d:c2:85:27:85:52:cd:
87:47:f9:94:de:56:9e:80:4c:26:ee:d3:ee:13:ec:
2d:f5:eb:2b:11:ad:cf:58:cc:5f:9a:9c:cf:3f:f6:
4b:c8:10:ff:63:78:0d:f4:a4:b9:05:c8:fd:27:43:
6c:3b:e7:33:92:41:10:45:6d:82:1b:80:f3:90:8d:
a0:e1:6d:44:da:36:01:b7:18:a9:5a:ef:9c:7d:f7:
67:5e:e1:ae:fe:41:7c:89:41:bc:9e:94:76:49:f2:
9a:71:59:26:ef:12:7f:a5:18:02:61:97:b6:41:7b:
7d:b8:6e:b3:cb:19:55:37:d4:ab:55:9d:66:6f:10:
a9:8d:a3:99:42:ce:36:21:c0:64:ae:59:4c:de:97:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1A:E3:13:A0:36:03:EB:EF:14:A9:7E:0C:80:47:65:F1:B0:AF:48
X509v3 Authority Key Identifier:
keyid:7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b8:84:8c:b9:76:d0:af:47:c6:b5:af:bf:6d:fa:46:d4:4e:
3c:d8:2d:f6:e0:b7:16:49:3c:24:ac:74:8f:77:80:f1:19:6b:
b0:d6:64:5f:0d:a8:84:39:d9:54:33:b0:cc:4d:cb:c6:11:de:
9b:82:d0:63:68:bc:d1:4d:0c:06:f2:0e:8f:6c:26:bd:00:03:
16:19:fe:48:66:10:a6:25:3a:11:55:b7:63:02:f3:a0:ed:03:
17:05:e7:aa:a9:8a:51:6c:95:52:b1:d9:7f:d3:61:53:e9:e4:
c6:fd:ac:4a:48:9d:09:08:8b:92:b4:81:0a:e9:bf:61:e9:e8:
f9:a4:a7:61:2f:bc:16:c4:9c:7d:4b:3f:d7:72:6d:6b:08:d0:
6f:2f:9c:07:22:95:fe:0a:5c:20:77:4e:51:75:4a:21:77:47:
6b:6e:83:f7:aa:f2:fc:14:dc:95:9f:3c:9a:d6:de:20:28:1f:
1a:65:43:c5:9d:6b:6b:e0:37:18:f2:c3:f8:df:3d:a6:54:fa:
a2:d3:0b:da:0f:b4:ce:29:67:14:d0:b5:0c:00:6c:65:97:30:
6b:87:19:e3:88:b1:cd:72:c1:ee:7d:f5:06:2c:b7:0c:0b:28:
94:49:b3:7b:ac:2e:90:c7:64:73:18:7b:b4:2a:fb:c7:8e:c2:
8e:83:5c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:45:41 2025 by rpki-client