Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
File: fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft (raw, json)
Hash identifier: Exmcsk+rjSiL85P3rq6tD1kWYmOHiT8foTxhAM6FJ3o=
Subject key identifier: AD:F6:D7:31:F8:0C:95:43:A4:B8:A1:46:8A:76:7E:4A:2C:6D:62:AE
Authority key identifier: 7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
Certificate issuer: /CN=7e3150f8c67063121027328954968d08d4cf329a
Certificate serial: 01974C69140668F835929EEAF81F1C1362C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
Manifest number: 0C
Signing time: Sat 07 Jun 2025 22:00:44 +0000
Manifest this update: Sat 07 Jun 2025 22:00:44 +0000
Manifest next update: Sun 08 Jun 2025 22:00:44 +0000
Files and hashes: 1: DcjYYjhsHbjRz2BRwn39VxHlNjI.roa (hash: Nq8VddF1MFSrpuvT27YW3AJCDDZOvbday1gSYp2MpMA=)
2: fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl (hash: PvTfEAq522uHelvTa6LYbY02G25CtNxPxt36U3j+JIo=)
3: itvM61LAfKyfPTjtxottIb5913c.roa (hash: swnmBd6zWo8E/AKMWxN3M8+VEsnPH81VxfrCxeSd18o=)
4: pE0B3mc5jQa5kOiMaFfY-HEjk3w.roa (hash: yYDclhfHv5O2Y6eNi65xViVo+BGYvQBylBinUeNq218=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:14:06:68:f8:35:92:9e:ea:f8:1f:1c:13:62:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e3150f8c67063121027328954968d08d4cf329a
Validity
Not Before: Jun 7 22:00:44 2025 GMT
Not After : Jun 8 22:00:44 2025 GMT
Subject: CN=adf6d731f80c9543a4b8a1468a767e4a2c6d62ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:ca:24:62:e2:43:d6:db:6c:8e:48:46:7c:
bd:ac:22:b1:d3:e7:a2:08:48:bd:7c:c0:20:f4:e3:
36:f1:59:e9:ad:82:f2:b8:8e:ba:e3:15:15:1b:45:
fb:80:93:ed:c0:89:8b:6d:39:8c:d2:1e:e8:06:82:
ba:99:eb:dc:20:55:c0:ec:59:d1:72:4e:7d:60:37:
4e:cc:8f:d2:df:7c:1e:d2:ef:7d:36:51:39:04:a7:
06:b2:4f:ef:2c:1d:d2:01:54:9b:67:ad:b6:5e:dc:
53:36:fc:db:17:d9:79:11:45:09:70:8f:32:72:e1:
49:f5:34:6e:7b:25:72:73:e0:65:44:70:da:42:f4:
a1:9e:3a:8d:7d:c9:19:8b:1d:f8:ac:3c:24:4f:b2:
05:bc:94:14:27:ef:cb:d2:6b:41:ba:2d:7a:1f:2e:
90:c0:39:99:b6:f8:c5:7e:90:06:f2:98:99:e1:40:
b1:46:01:8c:a0:5c:0d:94:8f:37:e6:ab:5f:26:23:
f8:65:ef:e7:a3:d9:7d:40:a2:1b:3b:96:2a:07:a2:
39:5e:96:51:4c:28:c3:df:1e:55:23:8a:28:10:e8:
e0:b1:16:17:7c:06:cc:8d:51:9e:f4:1d:40:01:9d:
a0:c2:5c:6f:fe:90:f7:c0:bb:7e:87:54:f5:a7:9b:
7c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F6:D7:31:F8:0C:95:43:A4:B8:A1:46:8A:76:7E:4A:2C:6D:62:AE
X509v3 Authority Key Identifier:
keyid:7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d3:a5:76:a5:c1:73:68:22:f3:d3:ae:f3:c8:fd:2f:0c:3f:
de:a9:c6:ab:bd:73:4a:72:a6:03:2f:e1:60:16:05:a6:76:17:
1c:d0:93:99:77:47:bc:59:04:98:de:90:7b:76:66:7c:2b:b6:
5e:20:56:fe:30:92:73:d8:74:72:82:b4:3c:46:2c:98:18:ef:
77:a4:14:05:91:13:a6:ee:b2:17:0a:fb:75:fc:5a:57:63:08:
48:5a:5c:be:16:ae:44:29:86:6d:68:76:00:8e:7a:c1:87:f7:
ca:ff:5a:83:32:14:9f:01:db:8f:e4:5b:59:d0:e8:12:af:18:
f1:25:1c:1f:d3:e8:d2:79:27:e1:77:ef:1c:ec:9e:1b:24:06:
9f:90:3b:d3:6e:83:5f:33:85:de:31:5f:18:df:1f:af:0a:38:
76:6f:5e:c7:81:84:9d:4d:45:f9:6b:68:9d:50:1b:20:6e:26:
2d:bc:f3:cd:78:34:52:bb:05:c1:e8:2b:5c:32:ee:53:34:b7:
d4:72:6c:47:46:5b:dc:db:35:e7:76:3e:5f:a1:9b:c9:e3:71:
9d:44:37:23:f7:8c:48:fb:2c:ea:12:44:71:95:9c:4a:7c:22:
be:64:15:4e:64:f2:f6:67:fa:ee:16:c1:97:4d:30:be:fd:d6:
78:37:d4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:51:06 2025 by rpki-client