Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
File: fobc3nEdVFNTl0szlVEI2d9Atuk.mft (raw, json)
Hash identifier: QY3/7Naz/VKsilGKF1m4RAoOy3sIDNlx37/pK+mKIzU=
Subject key identifier: 62:6F:2E:7D:CF:EA:63:69:91:54:47:0D:43:EC:63:E4:49:92:2D:E6
Authority key identifier: 7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
Certificate issuer: /CN=7e86dcde711d545353974b33955108d9df40b6e9
Certificate serial: 01976AAA5B2EFB0BD7C5C12867D527104BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
Manifest number: 0DD5
Signing time: Fri 13 Jun 2025 19:00:38 +0000
Manifest this update: Fri 13 Jun 2025 19:00:38 +0000
Manifest next update: Sat 14 Jun 2025 19:00:38 +0000
Files and hashes: 1: JQpnjsOMpFiQQJOrjnkEWtt3EFI.roa (hash: 4t67VWbmiq9bprri9rSmGg0uFh9lfRFrW2ITm8UtRrg=)
2: fobc3nEdVFNTl0szlVEI2d9Atuk.crl (hash: aIpRmNT67AgM9lw/8mzNr6ydb7SlHUcSjJ677yJZ7pM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:aa:5b:2e:fb:0b:d7:c5:c1:28:67:d5:27:10:4b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e86dcde711d545353974b33955108d9df40b6e9
Validity
Not Before: Jun 13 19:00:38 2025 GMT
Not After : Jun 14 19:00:38 2025 GMT
Subject: CN=626f2e7dcfea63699154470d43ec63e449922de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:40:b3:f5:6a:c9:4b:83:4d:81:7f:dd:07:
64:ea:f0:38:34:f8:95:65:28:ec:ba:2c:43:d1:ad:
10:6e:03:96:df:ef:14:70:3d:d3:41:0c:9e:ef:87:
c0:5f:e9:81:e2:f8:b8:cc:0e:d5:fa:65:41:7f:bb:
ce:9f:91:f2:4e:26:07:61:3c:ed:5f:1c:e5:8e:ee:
84:1f:8c:3d:ec:13:4f:f5:94:ce:7e:0c:e9:6b:f9:
ed:3e:09:dd:02:ee:ac:20:0d:7d:ad:a8:44:f4:88:
1c:aa:1f:bf:0e:73:9e:82:b2:91:3d:fe:68:2f:ce:
11:2c:e8:eb:47:4a:e3:2d:d0:1d:b1:ae:31:ee:36:
61:a5:fd:ab:2f:22:3a:e5:14:43:a2:d7:00:a0:98:
74:e6:70:ac:9b:38:8f:9a:92:1e:92:d4:17:65:3a:
33:02:e4:31:79:81:1b:a2:93:6a:5c:47:40:05:6b:
20:a6:ae:c6:c8:de:6a:e0:01:94:7b:5a:71:0a:b0:
1f:38:e7:3c:63:3e:97:9b:9a:db:24:63:ae:ca:04:
ed:0f:4a:38:3d:1e:dd:1f:7b:42:38:9b:6c:c6:d6:
a6:d1:ee:fd:0d:3e:ad:ec:f8:ac:c7:39:f3:1f:09:
4a:69:d2:75:76:32:76:2f:32:56:29:ad:21:d7:d1:
4a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6F:2E:7D:CF:EA:63:69:91:54:47:0D:43:EC:63:E4:49:92:2D:E6
X509v3 Authority Key Identifier:
keyid:7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:29:48:87:23:04:78:59:16:dd:a3:14:77:3a:23:e2:d8:32:
04:ff:0f:e6:de:fe:1b:28:c3:f3:ad:98:f9:86:b4:cf:cc:68:
28:96:26:04:4c:a0:80:cc:b6:c7:cb:04:b4:ee:31:cb:1e:b9:
e2:f5:f8:02:21:de:9e:dd:83:59:0f:7d:89:e6:fc:19:49:fb:
66:08:a9:d2:f2:16:46:c2:71:0a:b9:d1:9c:be:20:ab:91:00:
e8:91:f3:ac:8c:e7:6d:65:bc:8a:5d:1e:77:79:d0:92:00:05:
a4:b2:d0:5a:ee:f1:4c:e0:b6:95:e1:d2:6f:11:51:7d:0a:05:
dd:d4:93:9a:33:32:6f:b6:62:71:5b:dc:76:6b:78:62:b3:01:
64:7b:4a:11:40:46:a9:35:e3:b9:3e:a6:cb:3c:af:0b:df:a0:
c8:a9:65:b7:5d:ef:68:89:46:37:84:55:46:a4:5d:cc:92:51:
04:fa:5d:86:75:6d:1a:c5:cf:b5:4b:0a:fe:99:af:93:55:7b:
b7:a2:53:ee:ab:5d:33:24:62:73:ea:b2:10:a3:87:fc:b8:e1:
e0:b2:2f:7a:1b:75:dc:5f:e6:6e:ef:06:54:81:fb:97:e2:6b:
22:21:4d:42:76:c6:4c:12:ad:06:db:1d:66:2b:fe:c2:49:2e:
bc:8b:e3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:04:23 2025 by rpki-client