Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
File: fxiK2rW1UggeysghybCQOUhzsxU.mft (raw, json)
Hash identifier: KkwX2JmV9WVNY0IVrJMvz7wTsvKXW5pyDBn+5e9voPs=
Subject key identifier: 3F:FF:88:9F:9E:0E:56:82:C4:A8:6E:85:95:9F:64:58:8A:64:64:13
Authority key identifier: 7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
Certificate issuer: /CN=7f188adab5b552081ecac821c9b090394873b315
Certificate serial: 01975F14513B198BA4A962CB995591DC1035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
Manifest number: 0FF7
Signing time: Wed 11 Jun 2025 13:00:56 +0000
Manifest this update: Wed 11 Jun 2025 13:00:56 +0000
Manifest next update: Thu 12 Jun 2025 13:00:56 +0000
Files and hashes: 1: fxiK2rW1UggeysghybCQOUhzsxU.crl (hash: wk5OFFeXNKLSwjTkA1p8Cpo8H6364YZibXSRfpcGpdg=)
2: iSrIgRlu5YD7Koa8bEOEIApsG1I.roa (hash: 1rQNsMYOVuSbFnE+oDLQ6neckAWKt+MSYxXbU0fBqpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:14:51:3b:19:8b:a4:a9:62:cb:99:55:91:dc:10:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f188adab5b552081ecac821c9b090394873b315
Validity
Not Before: Jun 11 13:00:56 2025 GMT
Not After : Jun 12 13:00:56 2025 GMT
Subject: CN=3fff889f9e0e5682c4a86e85959f64588a646413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f3:5e:94:ed:db:81:f8:10:b2:a9:18:c9:39:
fa:de:f6:88:ec:68:a6:35:ba:e1:cf:52:b9:30:88:
ed:46:ae:0f:dc:49:92:62:6c:10:dc:8e:e4:c8:c9:
c9:e5:4d:45:16:3b:40:00:15:a4:6b:45:61:f8:88:
93:41:8a:68:94:c9:83:06:a4:1a:57:6c:c8:30:e0:
66:b8:83:ca:ca:28:da:e6:c4:1d:ed:b6:00:ac:b4:
f6:bb:a6:fd:1d:77:1d:68:be:44:be:8a:41:47:29:
e1:b9:86:54:1e:75:91:be:06:a2:e8:6f:14:03:bb:
30:17:1d:47:e0:bd:5a:79:e5:46:ab:6d:8d:96:17:
67:a9:ec:f3:3b:4c:da:5c:57:4d:cb:3c:6d:3b:92:
1d:d7:b3:e4:65:a9:63:f3:15:cc:3b:6f:ac:66:a8:
c0:e1:d4:79:9c:d4:c3:e1:ce:1e:02:e4:dd:48:50:
32:06:9e:ef:fb:68:80:9b:d7:56:85:2f:c6:75:7c:
53:4f:8e:e7:34:5c:75:6a:9f:d0:13:3d:7d:37:b3:
95:50:54:23:34:c7:a4:14:4e:c5:55:d6:53:63:e3:
df:e0:3d:0a:86:a2:8c:5b:6c:d5:94:3b:ca:3a:21:
70:cf:6e:62:b5:9b:34:e3:5d:6c:4d:ff:d1:b5:78:
57:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FF:88:9F:9E:0E:56:82:C4:A8:6E:85:95:9F:64:58:8A:64:64:13
X509v3 Authority Key Identifier:
keyid:7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f4:f4:6a:49:f6:86:89:49:f0:7c:dd:c0:a1:9d:99:a1:58:
7b:50:07:00:1c:a7:f5:02:da:29:8e:52:59:e0:a0:9c:91:60:
2b:d9:4e:bf:4f:62:ab:bb:2c:20:05:ff:be:b6:24:bb:55:45:
35:a6:64:78:98:a8:06:38:ab:97:a1:b6:e4:db:8a:4e:67:dc:
a3:77:9c:26:bf:6d:8d:f4:5a:38:46:9d:23:60:d1:7f:30:42:
a9:91:55:a3:15:17:da:30:04:d0:f8:d9:b6:f3:60:aa:7c:ac:
85:a5:35:fe:ea:19:4c:bc:d9:d8:31:11:3c:ab:60:67:a3:32:
5a:b7:31:0a:06:b7:95:3a:5e:d6:03:4d:9e:b9:ed:b2:fd:19:
3f:07:7c:ec:02:f1:15:cd:07:b6:d6:eb:a2:52:e7:73:91:4d:
8c:d3:56:e1:ea:df:05:f7:c5:d4:e3:1f:5d:2b:72:c3:63:a3:
76:ed:23:82:6c:f4:5b:af:be:64:67:bc:40:e0:3c:47:25:90:
c6:f1:c8:11:6f:9e:d2:3b:69:9c:d0:1f:03:a8:4e:f0:a6:08:
6d:93:f5:0f:b9:ba:9b:e9:15:7d:7c:78:50:84:31:7d:82:46:
91:d6:18:14:93:14:68:ab:6c:f2:9b:10:b5:79:92:88:26:b9:
b9:4c:91:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:23:07 2025 by rpki-client