Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
File: fmdQ5YygordfLFO99vYf9j7IMcs.mft (raw, json)
Hash identifier: Bo0F1c7iyGDj692oI1YLeUw4RK3BDFUbsFXxZCI2aBI=
Subject key identifier: CF:07:C9:81:4E:54:9C:9A:68:F2:03:63:5A:05:BC:02:BA:49:9C:10
Authority key identifier: 7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB
Certificate issuer: /CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb
Certificate serial: 01974A43CC0182539630DB726D6C6D84C544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 12:00:46 +0000
Manifest this update: Sat 07 Jun 2025 12:00:46 +0000
Manifest next update: Sun 08 Jun 2025 12:00:46 +0000
Files and hashes: 1: 1jPmqvt1ilYlmNcTs9vv0mQwV2Y.roa (hash: eLo4dRJvSmA8RvGBVuxw5fjwL9gDtsf1LW0xwTy98e0=)
2: fmdQ5YygordfLFO99vYf9j7IMcs.crl (hash: /E6YiLD43BhaWTF+olFQrKzjqNshgYDjooFh4duCoRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:cc:01:82:53:96:30:db:72:6d:6c:6d:84:c5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb
Validity
Not Before: Jun 7 12:00:46 2025 GMT
Not After : Jun 8 12:00:46 2025 GMT
Subject: CN=cf07c9814e549c9a68f203635a05bc02ba499c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:3a:dd:e5:89:35:a8:46:27:f2:09:66:4f:
4c:74:73:48:eb:cc:e0:0a:e6:cb:f6:22:dd:6b:25:
00:b2:22:f4:a7:fb:53:83:05:29:9f:18:f6:29:8d:
ed:db:33:86:86:4e:bf:26:b7:43:23:0c:21:c7:8b:
3c:75:c4:0e:e6:04:fc:7c:d5:f3:ab:3e:52:52:ea:
76:54:92:10:fb:ff:c2:45:4f:62:92:b6:cb:71:a3:
1b:da:70:d8:fb:de:6d:da:b3:5c:9d:32:80:04:d1:
1a:e8:db:63:33:e4:b3:35:57:f8:af:7c:47:5c:2e:
ed:67:88:10:ea:25:57:0b:fc:b9:c4:5a:03:6e:fd:
1d:f5:e7:f7:50:cb:aa:67:ca:55:46:a5:80:6f:80:
7c:f8:9f:36:2c:cc:de:9d:57:81:64:02:de:47:90:
83:6c:bc:d5:68:fa:87:16:a1:01:18:42:01:18:2e:
53:25:62:0d:71:27:a6:85:c5:35:a3:df:8b:8f:42:
86:71:86:55:89:a7:7f:1b:7a:3d:af:c4:9d:62:22:
29:b2:5f:16:23:cf:75:0c:90:6a:d2:41:46:6d:cc:
83:01:b4:98:fa:20:59:a5:b1:65:73:67:02:9e:a9:
03:c3:c6:ed:dd:0b:a5:b3:83:b9:14:9f:ac:8f:ce:
d1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:07:C9:81:4E:54:9C:9A:68:F2:03:63:5A:05:BC:02:BA:49:9C:10
X509v3 Authority Key Identifier:
keyid:7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1f:60:22:b1:66:bd:fe:a9:aa:ec:56:4a:9a:ff:6b:e1:a7:
80:74:81:4c:55:04:65:d9:3d:e2:80:b0:d8:ce:62:3c:db:0f:
6c:5f:a6:e8:79:0e:5e:8e:a0:e5:6d:bd:50:8b:7a:8a:48:0e:
ca:5a:b0:98:92:75:08:f8:df:29:2c:1e:eb:f6:72:6b:c8:63:
92:07:c3:85:94:2f:d2:a6:09:89:86:b9:98:48:72:c6:f8:83:
73:7b:a2:fc:b1:ee:d5:7e:5b:2c:a2:d3:c2:a6:41:3f:4f:08:
ed:ba:51:65:71:31:74:e0:92:76:72:17:8a:46:8d:06:72:90:
19:f3:fc:99:d2:59:14:d1:cc:0d:f9:2d:c7:14:f0:ae:1a:93:
25:e3:85:d9:10:f2:f3:13:f0:28:8f:69:ba:eb:3f:6a:9a:1f:
27:95:41:99:c9:3c:e8:d8:ff:c6:e1:7e:97:e5:c6:60:e2:43:
c2:c8:30:31:68:2c:72:99:63:73:57:84:8e:fd:9a:78:be:d8:
4f:ba:75:58:60:b6:b8:fc:71:ee:79:62:b4:73:c0:f8:ce:cd:
76:24:4f:9a:60:af:0c:06:e8:f4:6b:ba:11:4b:52:c7:87:d4:
64:0a:58:e9:72:9e:33:65:0d:38:3e:2a:de:9f:42:6d:3f:7a:
9a:cd:c9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:03:02 2025 by rpki-client