Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
File: FpCXDdu3YZzIIYbdtTbrTomF0t4.mft (raw, json)
Hash identifier: IPT3cbCTUXD22ovJmaOgEoUm2kBhhwRb6nkDhFaZGTs=
Subject key identifier: B3:81:07:7A:F2:28:FE:52:B6:0F:98:26:B9:DB:75:68:12:0D:87:47
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Certificate issuer: /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial: 01974D7C38A76C5461F80BD48F7DFEE1B60E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
Manifest number: 1584
Signing time: Sun 08 Jun 2025 03:01:15 +0000
Manifest this update: Sun 08 Jun 2025 03:01:15 +0000
Manifest next update: Mon 09 Jun 2025 03:01:15 +0000
Files and hashes: 1: FLzhahX1RfEQksVef8HwMw5EmEI.roa (hash: 3r/+kxvTsJcUwXkCOUAwIQMliVjMUukx9o6NgfAcfNk=)
2: FpCXDdu3YZzIIYbdtTbrTomF0t4.crl (hash: mpfkdxQUyL7PcEcbXh03fUg4CA0AhSEja2TcTT4t10I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:38:a7:6c:54:61:f8:0b:d4:8f:7d:fe:e1:b6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Validity
Not Before: Jun 8 03:01:15 2025 GMT
Not After : Jun 9 03:01:15 2025 GMT
Subject: CN=b381077af228fe52b60f9826b9db7568120d8747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:5b:6b:b0:23:9c:45:9e:3f:b9:03:16:bf:
87:1b:20:5f:99:2f:53:66:9a:78:7b:03:98:04:44:
a2:e5:f2:60:db:d9:a3:c4:ff:00:94:54:6f:3f:b0:
8b:ac:09:44:45:11:7f:23:9d:dd:94:b0:71:7d:a7:
5c:59:05:74:be:2f:2e:6c:a8:17:e1:41:0e:9e:59:
c2:6e:54:fb:71:e6:2b:b9:e8:2b:e2:d2:33:e2:e4:
6d:22:e8:2f:62:18:5f:b0:f3:b4:9d:ab:1f:d1:89:
f9:7a:c3:5d:96:4d:2b:f6:b5:c5:6a:a4:03:04:1b:
29:83:54:73:79:ce:ed:32:bf:d9:fd:50:65:d0:be:
16:86:50:bd:47:a7:63:93:e9:dd:8a:22:18:22:23:
0e:c6:40:40:82:0e:12:b4:24:73:93:0b:f0:8c:67:
73:3b:a8:a6:9c:83:49:6a:7c:45:18:6d:20:77:e3:
d1:d2:7a:86:34:2c:1e:2c:6c:48:75:2d:06:c6:e1:
db:05:f4:3f:ad:9a:9d:dc:f3:2c:19:49:b0:a5:10:
42:82:30:f5:c1:ca:d7:da:39:de:9a:62:ea:ee:a6:
0d:5f:66:38:1d:fa:7b:3a:9b:35:b4:e9:7b:45:b4:
32:25:5e:70:f3:5d:b2:25:94:b2:13:46:9c:99:03:
28:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:81:07:7A:F2:28:FE:52:B6:0F:98:26:B9:DB:75:68:12:0D:87:47
X509v3 Authority Key Identifier:
keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:38:3e:21:78:5e:87:74:42:89:9c:31:69:ef:ae:f1:03:c1:
0c:5e:a8:76:dd:c4:6d:81:66:62:6c:d7:dd:4f:46:98:7a:dd:
10:8e:81:b2:83:e8:18:e4:02:4e:97:dd:0c:31:ea:af:c4:1b:
f7:10:d3:d1:4b:2e:92:da:bd:13:7d:8a:ca:a4:bd:40:e1:b3:
a7:5a:64:90:1f:9a:29:ec:ad:48:81:f4:a9:12:39:c7:9f:58:
b1:ff:e9:71:ad:6d:16:1b:3d:5d:ed:da:de:05:be:7f:30:ee:
0d:08:d7:49:85:92:15:10:13:1d:7a:72:32:36:7d:67:dd:7f:
9c:c9:5c:2f:60:02:ae:ca:d4:9f:1e:84:86:b8:4a:56:7c:3e:
4b:60:9d:5f:de:c3:41:08:45:fa:50:db:e2:fb:f0:a4:61:e5:
46:de:b9:37:ca:49:fc:2b:5a:56:cd:10:06:8d:a6:b9:bb:86:
65:d8:99:c0:8d:f0:fd:64:86:a1:6c:0d:d5:ba:72:aa:6d:75:
cd:e7:02:61:94:24:d5:a9:d1:90:3f:7a:35:a4:a2:75:f6:b6:
55:d0:75:78:37:4c:72:d5:0a:4d:b5:79:d3:66:b8:1e:e9:d4:
f0:87:52:9b:9a:35:7a:d2:d9:6a:0f:4c:81:2f:aa:ef:2e:69:
08:e7:4b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:15:52 2025 by rpki-client