Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
File: fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft (raw, json)
Hash identifier: PDbYwLyEPFEEUFHv1V4atsdzUajOc2aOiUD8vDhUVf8=
Subject key identifier: 27:69:E0:47:65:70:FA:65:74:77:99:9D:7C:24:4E:DE:F3:18:E1:8A
Authority key identifier: 7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85
Certificate issuer: /CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
Certificate serial: 0197499F3A29E45FCFE83F930A03323D700D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
Manifest number: 0A5E
Signing time: Sat 07 Jun 2025 09:01:01 +0000
Manifest this update: Sat 07 Jun 2025 09:01:01 +0000
Manifest next update: Sun 08 Jun 2025 09:01:01 +0000
Files and hashes: 1: fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl (hash: +I7d/dO/9O2jqcV10RTdzYuWJWpvs2YASrdmZjr1De0=)
2: mCKGYv7Hn8VpwzSrofG5k1K1u28.roa (hash: LkkBVbT8cmI52OeplrbujyTxipUcCUujJaGi2zW5iDw=)
3: o74rBkwgi-OLyw8qLeq0VZnWs9M.roa (hash: XmOmIlqK0EcHoxKDnpHB1Iv3cjgrTtgXMu4pU/uNCvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:3a:29:e4:5f:cf:e8:3f:93:0a:03:32:3d:70:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
Validity
Not Before: Jun 7 09:01:01 2025 GMT
Not After : Jun 8 09:01:01 2025 GMT
Subject: CN=2769e0476570fa657477999d7c244edef318e18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:82:2d:dc:ff:b8:87:3f:22:b1:aa:38:5a:
c7:f1:bf:03:15:a9:db:8c:36:98:54:6d:a9:5e:2c:
15:14:3a:5f:44:79:79:c6:fa:99:c5:b6:d4:59:da:
19:b2:5b:f3:74:31:30:11:8e:46:21:72:17:f2:a4:
e9:13:19:f9:a9:d1:44:52:f6:2f:d6:ae:bf:4a:fe:
6e:dc:d8:c4:7b:33:dc:58:44:e3:f2:69:9d:22:54:
1b:5f:f5:6b:c3:22:6f:58:85:d4:4d:41:48:8c:ca:
6d:2a:70:93:94:0e:b1:08:1a:08:23:17:a2:38:11:
98:e8:81:d2:6f:e0:1b:2d:c7:49:32:39:a1:59:29:
23:c9:b1:7f:d2:22:9b:73:aa:ad:6c:7e:37:c0:c4:
18:84:61:57:19:1e:8e:7d:77:86:98:6a:55:7f:e3:
c7:e6:29:98:6e:2d:8c:90:69:12:51:a5:d7:d7:86:
12:f3:e0:bb:1a:13:c0:d1:9f:74:f4:98:32:f8:8e:
c9:1c:f2:81:1b:81:08:86:72:d6:55:ac:bd:5f:dc:
a4:c4:4c:dc:09:1f:f9:11:3a:51:b4:75:99:bc:bf:
e0:d3:48:92:b6:c8:6a:4d:67:c0:c1:e2:45:ae:f3:
cd:5b:8a:63:e8:84:e5:43:09:01:cf:89:b1:f4:b7:
c3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:69:E0:47:65:70:FA:65:74:77:99:9D:7C:24:4E:DE:F3:18:E1:8A
X509v3 Authority Key Identifier:
keyid:7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:14:67:fd:a0:e0:c5:62:0c:06:4b:5a:11:6d:8e:aa:52:fe:
ae:a3:6f:b5:07:cc:9b:67:73:0c:4e:43:1b:ef:a0:43:51:8e:
83:c2:63:3e:dd:61:7e:72:ab:43:84:fb:62:0d:d5:c5:52:60:
33:eb:08:2b:c6:ee:c9:04:e2:ba:9a:88:db:dc:4f:72:58:47:
c9:c8:90:21:86:af:e8:f5:c0:db:44:8e:68:c6:b0:d3:7b:ed:
e3:79:7c:e9:ee:19:e1:36:27:0c:61:26:28:42:8d:56:2f:ba:
14:e9:4f:35:72:87:59:9a:83:63:07:08:02:c3:00:44:b0:69:
ee:b4:8b:c6:a8:a2:4b:9b:c5:cf:98:5a:85:6d:5c:f0:90:1f:
c7:ae:4c:81:c1:32:33:6a:7a:97:42:35:eb:b8:c7:c1:38:45:
01:76:e8:89:22:46:cc:83:2d:f7:ee:5c:d7:de:a7:44:c8:d8:
45:b6:1a:62:fe:4c:9d:60:59:74:52:1a:ab:62:de:35:40:6c:
7e:12:df:ce:07:b3:42:9b:d2:59:13:16:07:b1:a5:90:a3:ed:
21:03:aa:e5:6f:bc:c1:dc:d2:81:8a:05:4d:c9:78:44:4c:fa:
86:5a:f4:4f:4b:3b:d7:26:49:3f:4b:98:d2:9e:07:95:b6:5d:
8c:c3:9b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:21:27 2025 by rpki-client