Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
File: fruIjyuZ3ply4kRuugWKuOLNez8.mft (raw, json)
Hash identifier: Kd5/EOn28Ih1GnmjxZh/qOuFwtVCQp4EI0fNyVURA2M=
Subject key identifier: E8:2D:4D:47:73:59:0E:DF:F8:FF:3D:6A:18:E8:D2:C5:DD:42:94:BC
Authority key identifier: 7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
Certificate issuer: /CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Certificate serial: 01975158AFAFAACF17946572325BD57F985D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
Manifest number: 1588
Signing time: Sun 08 Jun 2025 21:00:55 +0000
Manifest this update: Sun 08 Jun 2025 21:00:55 +0000
Manifest next update: Mon 09 Jun 2025 21:00:55 +0000
Files and hashes: 1: JN5O0QCPrYg2gGsd5bY4WvuMm88.roa (hash: Fx9qqqMuryeKb6+Rb+Dr8zIFkW7rIV44uKPsq4V2Qsk=)
2: bAMnl2_6RRTmNV4zQKgmKBPIhlw.roa (hash: V9YqmjnltEXUALOTq/OVrSw9uYwMaY1gDtJwBPznHa8=)
3: fruIjyuZ3ply4kRuugWKuOLNez8.crl (hash: kVfEYxNImziw9FWzkzA/C9BWB3ZASWSMmrpzg7VIYRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:af:af:aa:cf:17:94:65:72:32:5b:d5:7f:98:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Validity
Not Before: Jun 8 21:00:55 2025 GMT
Not After : Jun 9 21:00:55 2025 GMT
Subject: CN=e82d4d4773590edff8ff3d6a18e8d2c5dd4294bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a6:be:f6:8e:5c:cc:cb:0c:f2:4c:df:3f:36:
60:ea:20:e9:86:62:e2:3a:72:01:25:96:55:f5:03:
97:a7:38:e1:14:8d:2e:e2:b3:a1:97:00:d7:4c:4b:
96:34:95:66:76:3b:44:10:4a:a8:5f:23:02:9c:94:
4d:98:b4:dd:2a:f3:3f:c6:36:2f:4d:63:24:55:08:
f4:99:c9:2b:ab:56:45:31:b8:03:31:a6:59:d9:73:
c3:2d:6d:4b:15:bb:8b:56:e8:77:c9:68:04:c7:2a:
28:6b:21:bf:65:5b:9b:85:12:ee:8f:52:f4:bc:78:
1b:4b:a6:82:ce:98:4e:4b:5f:fe:36:ee:c7:d2:48:
d7:6e:1e:ec:08:65:8f:a2:61:57:51:34:fb:42:e4:
94:b9:7e:9b:d5:e9:fa:44:84:f9:d6:14:d6:94:02:
2b:83:69:d4:fe:73:f9:c8:6b:81:ee:7d:2d:ff:dc:
09:39:89:cb:16:41:08:be:0a:06:97:3b:c2:1f:0d:
b8:66:58:8f:e7:db:94:b4:30:28:f4:49:90:08:e5:
cb:57:72:41:dd:66:13:37:b3:bb:17:b2:ce:ad:d6:
b4:24:ac:7d:25:f5:c0:93:8b:90:fd:4c:b0:82:83:
49:93:24:92:a4:1c:52:dc:2c:8d:c4:0c:95:10:54:
91:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2D:4D:47:73:59:0E:DF:F8:FF:3D:6A:18:E8:D2:C5:DD:42:94:BC
X509v3 Authority Key Identifier:
keyid:7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:95:7a:fd:bd:6b:c5:59:7a:6a:1e:f2:89:59:1a:ba:4a:4b:
4f:49:8a:44:83:1c:94:59:a5:4d:3d:35:35:f8:a1:68:93:e9:
55:02:8b:f2:5d:8d:36:7a:72:d6:cb:d3:ff:65:68:f7:1e:39:
fc:e1:7e:ba:b2:1b:a9:cb:1d:8a:78:4d:44:08:e1:e1:8e:82:
fc:1e:77:1c:dc:d5:47:5f:2d:e1:a6:c2:54:0c:d6:c5:e2:e3:
43:50:5b:79:e1:22:74:e0:72:2f:23:81:31:5e:11:23:3a:15:
8c:ba:f1:23:a9:c3:fa:a9:17:9d:a9:bc:a2:7e:92:71:01:e9:
b2:04:26:28:34:89:a6:45:5b:ae:2a:63:54:82:25:e7:2e:62:
2f:53:fd:b9:53:91:26:73:c1:df:23:d3:0d:21:84:76:6d:ee:
1a:99:47:a1:a1:82:2a:1f:16:ed:13:15:53:7c:cf:e4:eb:f1:
08:87:b1:46:33:78:76:1b:fb:f4:16:da:32:b6:71:3b:7d:87:
04:c1:a7:76:3c:ba:01:c9:bc:52:c7:7d:fe:c3:70:0e:c2:e3:
e6:67:b9:cb:14:05:b6:ba:d5:48:a4:7b:8f:9d:51:18:1b:aa:
64:a5:89:4c:02:a0:70:ac:e7:02:5d:27:36:fb:0a:83:aa:16:
ef:d2:af:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:21:32 2025 by rpki-client