Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
File: fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft (raw, json)
Hash identifier: uyuIC0/QZ8YyHVYEVD09S7ux630kTwEu7KqpUFqNzDU=
Subject key identifier: E9:F9:0E:9F:3F:D4:1F:1A:D1:4A:B3:D2:4F:D6:8B:88:7E:E5:AE:20
Authority key identifier: 7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
Certificate issuer: /CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Certificate serial: 01974C69659C9778A576D5061FB31C036BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
Manifest number: 08BF
Signing time: Sat 07 Jun 2025 22:01:05 +0000
Manifest this update: Sat 07 Jun 2025 22:01:05 +0000
Manifest next update: Sun 08 Jun 2025 22:01:05 +0000
Files and hashes: 1: WdmL2O8VPrkR42ZOw2QephNcMKQ.roa (hash: hlVVES8UOIZDvKYVagg5Nkh0JVEcOtJVFmlV0ra9F/8=)
2: fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl (hash: HKyMchX/LpDot8Z4LPgImwvEZdit7y+1UvfNwS6zUJ4=)
3: lujy_B0CgE3UQHNrtRpIDknhG84.roa (hash: HhEZYonW06tw2KSs5U9keAqL3PO1g1AoWXaLns6T1aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:65:9c:97:78:a5:76:d5:06:1f:b3:1c:03:6b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Validity
Not Before: Jun 7 22:01:05 2025 GMT
Not After : Jun 8 22:01:05 2025 GMT
Subject: CN=e9f90e9f3fd41f1ad14ab3d24fd68b887ee5ae20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8d:9a:7c:01:0e:36:69:1d:09:5f:c6:7d:93:
11:7d:e8:99:af:e2:5e:ff:48:c7:a7:8d:e0:33:fb:
7b:cc:1d:50:fe:5d:cf:12:6e:23:0b:72:30:3c:ca:
8d:f5:73:b3:b0:f3:81:cc:08:65:13:9c:fc:91:e8:
bd:9c:ee:43:d1:36:17:90:83:66:07:f9:63:12:95:
36:75:d4:38:f5:d6:0b:79:02:1f:69:91:11:e1:ad:
63:c1:f3:d6:15:f3:a5:ad:72:a7:00:6e:d9:ee:af:
aa:ae:08:e1:9e:4d:e1:ff:e1:c1:8e:c2:b1:96:a8:
e6:dd:2d:97:a4:d5:d4:43:53:ac:d1:40:8f:a0:76:
6d:e0:25:e0:8f:f0:86:10:7e:f0:ad:ce:6c:8f:5f:
d3:a4:bb:8b:4e:a2:75:22:fe:80:5a:7c:70:96:c0:
4d:75:42:e0:11:bc:d6:ae:22:22:4f:07:7a:93:ff:
1f:b9:15:11:ba:e8:3e:0e:2d:cf:66:09:4a:cc:d7:
1d:da:3a:40:84:e3:9d:c0:8a:f0:aa:e0:98:30:43:
69:77:11:f1:d9:36:f8:cc:e3:3e:6e:3d:3a:ab:e7:
cf:7e:b1:4b:0c:b6:62:50:d1:fd:76:1b:36:3d:d8:
a5:be:75:08:60:8b:e8:1f:ba:bd:46:14:c5:63:f3:
9e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F9:0E:9F:3F:D4:1F:1A:D1:4A:B3:D2:4F:D6:8B:88:7E:E5:AE:20
X509v3 Authority Key Identifier:
keyid:7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f1:72:79:32:d5:de:67:be:4f:82:87:c2:dd:9a:52:c9:5f:
73:7f:5d:33:61:28:3d:09:30:24:36:ba:12:71:ba:58:81:5c:
d0:e8:8e:00:65:d7:0d:7b:7f:eb:fc:b8:2f:9e:7e:0c:f4:78:
6d:e3:fe:aa:55:20:87:01:7f:62:06:f7:2a:de:8a:11:b4:5e:
5e:32:0f:1e:1e:d3:8d:85:4d:96:38:98:7f:95:d9:48:48:d9:
20:37:42:de:44:a8:79:3a:ac:3e:d9:88:d3:3c:9c:67:5e:55:
72:81:da:c7:9c:31:ab:49:13:65:70:5c:c2:10:4e:fd:1f:84:
a3:62:14:58:89:b2:8c:ce:06:e2:10:fa:b6:94:84:99:69:a6:
b2:3d:83:6f:9e:84:8d:6f:98:be:4e:0a:d4:6c:05:7d:e8:ec:
aa:c1:53:a1:6f:62:dd:d8:65:0c:95:ab:ec:a7:db:b7:0c:c5:
24:fd:d6:cf:fa:7a:d0:5e:4a:14:95:3e:e6:77:dd:b0:1e:9c:
a0:ac:5a:1d:da:bf:e6:48:3d:3e:28:23:56:42:b6:2e:77:3e:
f9:14:59:0c:54:57:0e:0f:f5:ce:23:24:d5:69:e2:e6:c8:c4:
33:48:a7:07:92:db:16:14:2d:92:1e:aa:13:b3:0e:c4:a2:ee:
1d:c8:49:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:14:31 2025 by rpki-client