Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
File: fdw2QUyZG_qNkvYCflMINwsitqY.mft (raw, json)
Hash identifier: 9YdX3fL4IiQCvJ+734DUiE2JjOeSUhFXe5O4xPFpQxw=
Subject key identifier: 93:A7:E3:B7:A0:B8:EC:1A:11:13:AB:7A:6E:2E:83:FB:62:67:A6:5B
Authority key identifier: 7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6
Certificate issuer: /CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
Certificate serial: 019746301A47FE48A349EE49C3F85DEF2BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
Manifest number: 06D1
Signing time: Fri 06 Jun 2025 17:00:46 +0000
Manifest this update: Fri 06 Jun 2025 17:00:46 +0000
Manifest next update: Sat 07 Jun 2025 17:00:46 +0000
Files and hashes: 1: fIi6Y7TMQAIgGM-S2BYF-rhLP0U.roa (hash: frVihHDK+8j5US3CUXtBypHsqdv++cToSbTh8ao+mTk=)
2: fdw2QUyZG_qNkvYCflMINwsitqY.crl (hash: IR89qy2iAj09zqwOUc7zvTJvo7ttvoPl44L+KvNSlfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:1a:47:fe:48:a3:49:ee:49:c3:f8:5d:ef:2b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
Validity
Not Before: Jun 6 17:00:46 2025 GMT
Not After : Jun 7 17:00:46 2025 GMT
Subject: CN=93a7e3b7a0b8ec1a1113ab7a6e2e83fb6267a65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:6b:5d:6e:73:e3:01:a9:32:1d:1d:65:9f:
bf:f8:8a:09:3d:6e:61:99:e7:97:11:1c:5b:87:44:
76:c0:19:e6:c7:94:04:6d:e1:6e:9b:c8:e4:d2:95:
d1:36:9c:6f:49:5f:b3:b5:29:e6:99:53:f5:34:ed:
9a:74:ba:97:d7:e7:bc:2c:ba:5b:0d:08:32:dd:8c:
ac:08:b3:0a:fe:d0:10:8b:80:27:27:43:62:f5:1d:
e1:d4:0e:87:68:67:5d:7b:27:1f:c7:6a:6b:0b:8b:
ac:ba:18:99:36:11:7a:fc:b8:12:ac:7f:dc:a4:9a:
4d:52:54:00:a9:e4:9c:76:ee:3a:98:4d:ac:6f:fe:
2f:14:93:3d:db:c9:2c:60:8c:54:3b:6a:82:7b:92:
33:c3:aa:1d:e9:d0:35:8b:51:0f:4d:4d:9e:bf:c6:
02:f6:37:8f:75:1b:f2:46:0a:c9:eb:03:bc:64:48:
b9:d0:10:26:2f:9a:48:cf:af:94:3e:32:7e:35:c4:
36:4e:62:ce:d5:fb:f1:87:81:40:cc:ad:6c:26:ca:
56:66:3e:20:e9:43:bf:f6:8b:98:c2:8d:b7:07:81:
ff:a8:83:c4:dc:de:76:99:df:b1:92:45:c9:f2:e2:
b6:d8:de:47:d1:93:cc:b5:2f:92:73:0e:18:44:f8:
90:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A7:E3:B7:A0:B8:EC:1A:11:13:AB:7A:6E:2E:83:FB:62:67:A6:5B
X509v3 Authority Key Identifier:
keyid:7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:dd:4b:c3:15:37:c0:16:10:ac:cc:af:34:ed:38:28:17:87:
61:8d:7f:0a:c7:45:c9:37:af:6b:f6:00:27:6c:2e:f5:a9:05:
9c:a2:11:8b:1f:7b:19:48:00:07:30:f6:08:2a:01:a7:9d:8c:
ce:4a:98:0c:8d:5e:eb:1e:b5:26:8e:17:7b:ed:73:29:28:da:
d8:33:a7:a2:0b:2a:cc:71:52:53:25:cd:e8:10:08:df:13:73:
59:c2:c9:f5:7b:ec:9d:66:07:46:fa:f1:90:f6:b1:ba:b9:65:
a7:ae:ac:13:b0:1c:f0:44:fd:f9:8d:d7:46:37:ef:09:9e:e5:
38:d6:46:b2:ed:9f:6b:a4:9d:f0:70:11:ee:36:d3:6a:d4:34:
36:74:4d:08:c4:e9:eb:70:d0:87:c4:81:00:75:0d:f6:6f:63:
14:0b:0f:6d:b7:48:52:a7:b6:84:56:e3:05:5d:23:01:96:3a:
4a:aa:4c:fd:ae:5f:de:aa:d8:81:10:2f:fb:03:f7:61:af:55:
db:e8:64:97:0e:80:e8:8d:ae:ff:14:70:0d:4a:aa:ca:55:6b:
65:fd:a4:7c:e7:80:ef:1f:96:f5:ca:19:06:78:2a:84:58:ff:
f0:a3:ec:f2:04:f0:4e:74:4e:39:34:16:0b:92:7b:bb:1c:bf:
72:6c:95:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:28 2025 by rpki-client