Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
File: _m1KNjQMPa2HoDkh0PiP9lFiiXo.mft (raw, json)
Hash identifier: dXkcfWdfQ0K5oxgdl3Y7FPQIe3POcKGImwpMCipmY5M=
Subject key identifier: 6F:A8:6C:BE:28:79:29:79:00:43:B8:33:87:F2:6E:1C:B4:5A:2C:77
Authority key identifier: FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
Certificate issuer: /CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Certificate serial: 01974BFB27C8916F0AC39B52BA2F3F98029C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
Manifest number: 0A44
Signing time: Sat 07 Jun 2025 20:00:40 +0000
Manifest this update: Sat 07 Jun 2025 20:00:40 +0000
Manifest next update: Sun 08 Jun 2025 20:00:40 +0000
Files and hashes: 1: _m1KNjQMPa2HoDkh0PiP9lFiiXo.crl (hash: q94XYODbBELiR2bCEoRJv+Lh30unmjMTeJrC3HaDnaU=)
2: fNjIviZE-rak2nx-LNx6AaZmje8.roa (hash: OJD0Sen5B4Pm8+7K0PKLwNWQlIZiuvKDQ8wOO8ai7W8=)
3: vtbeMLgEiJIMz5_yaCwan-k-_x8.roa (hash: aUmr6KPHOpH3nBu3CynTnd8kH0I7Kbxq4Ukon/iSThY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:27:c8:91:6f:0a:c3:9b:52:ba:2f:3f:98:02:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Validity
Not Before: Jun 7 20:00:40 2025 GMT
Not After : Jun 8 20:00:40 2025 GMT
Subject: CN=6fa86cbe287929790043b83387f26e1cb45a2c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d6:fa:1f:db:ca:aa:30:38:20:e1:ae:ec:20:
35:ab:ba:aa:53:69:32:51:bf:a6:48:6c:b1:b2:98:
89:57:cf:f2:0d:93:a2:64:16:ed:4a:25:10:0c:3f:
a2:2b:31:05:8d:17:92:ad:59:84:55:a6:f7:8a:28:
c3:71:79:5b:a2:3e:6b:d1:23:81:6b:73:b1:b8:38:
74:5d:72:1a:a1:ff:91:f4:40:b2:e6:07:ea:a5:a4:
42:e5:ee:64:a0:6b:6a:8a:54:42:86:de:f4:57:e4:
f8:1a:41:60:c3:ec:6a:d7:dc:8e:17:15:73:d9:ac:
88:b9:9e:41:48:a0:fb:47:52:d3:d2:f4:ec:48:96:
b0:39:54:72:f7:9a:46:73:86:f6:69:24:7b:83:71:
55:9e:5e:c2:8b:5c:00:63:72:a9:27:f2:9f:f7:20:
44:a3:24:67:27:ed:f0:06:8e:9b:ab:6c:3d:14:6d:
51:21:40:b3:fd:64:33:0b:0c:74:8e:e9:f5:9c:09:
67:68:e9:a6:f8:cc:e2:69:d6:cb:1e:de:82:75:8e:
bf:a7:3b:30:6d:ad:5e:25:f7:ee:3d:f0:bf:98:86:
d4:eb:18:e1:5d:ac:87:41:2f:9f:91:fa:a1:bd:b9:
29:e3:e4:ab:a6:5b:39:be:77:15:85:4b:7f:9a:2f:
9b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A8:6C:BE:28:79:29:79:00:43:B8:33:87:F2:6E:1C:B4:5A:2C:77
X509v3 Authority Key Identifier:
keyid:FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9d:87:ef:9f:e5:4b:99:91:56:4d:f3:1e:7e:7f:60:93:34:
8d:7f:74:8e:7c:20:64:da:c4:51:3a:fc:c0:64:50:10:91:05:
ea:95:a6:a2:53:59:d6:72:e2:89:48:94:5e:83:68:97:0b:65:
1c:ec:2e:31:8f:90:b7:12:e0:ff:66:4b:75:bc:d6:4c:d1:1d:
7e:2e:a5:dd:da:95:5a:32:53:b0:9d:fc:3f:44:4d:22:94:35:
b6:7c:7d:1e:b5:6f:ae:a5:b4:5d:1b:36:f4:31:11:ea:f9:56:
8c:56:31:21:7f:a4:26:17:3e:ef:80:77:c0:af:b5:98:e3:61:
bb:c3:91:02:22:0c:93:0a:6a:e0:ea:99:f9:4d:f2:ef:ce:d5:
aa:d0:ed:8f:43:01:c8:c0:82:90:38:d2:e2:3f:41:ab:94:b9:
13:d1:f6:08:20:09:7e:7f:f7:00:aa:59:9a:eb:8e:b1:2e:04:
85:8d:23:9c:23:74:71:b1:d1:e0:e6:69:d8:dd:e7:3f:13:25:
ce:af:92:c5:e3:3d:09:f5:bd:44:50:b6:32:5d:f3:d2:ff:10:
eb:5e:e0:6c:59:67:df:c3:a1:a9:92:40:34:0f:e5:7c:75:b4:
fc:96:b8:2f:b8:ae:53:f1:df:04:ac:3d:e6:48:67:6f:88:68:
88:db:13:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:36:32 2025 by rpki-client