Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json)
Hash identifier: dOrLwx2HsQvfc15Ps9ofCRoY9PXu8zVOJbVEsQhHNe0=
Subject key identifier: A1:82:C6:58:3B:A6:8E:7C:56:35:C7:00:7E:94:2C:FA:2A:60:21:3A
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 01974A43AD0958C28B027E37DE4C9F1A2CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
Manifest number: 1228
Signing time: Sat 07 Jun 2025 12:00:38 +0000
Manifest this update: Sat 07 Jun 2025 12:00:38 +0000
Manifest next update: Sun 08 Jun 2025 12:00:38 +0000
Files and hashes: 1: SSnanM1-AOhB6jazpGw2Wx5qtsA.roa (hash: PJm2LHbdL6q86F0ojR19eAq4coi3I/A843rYXRGwOLE=)
2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: BnCjv2mGSW/cFkQsdN2kWRdugLTob+kiMS1MbLtgV4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:ad:09:58:c2:8b:02:7e:37:de:4c:9f:1a:2c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: Jun 7 12:00:38 2025 GMT
Not After : Jun 8 12:00:38 2025 GMT
Subject: CN=a182c6583ba68e7c5635c7007e942cfa2a60213a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:23:e4:2b:0d:e5:99:9c:30:77:a1:d5:a0:53:
69:29:12:45:fb:65:c6:28:bc:07:83:2f:a8:65:a0:
65:da:63:00:fc:e8:72:68:df:e5:68:ff:0c:fd:d3:
0f:dd:de:b1:11:88:60:89:34:0c:2f:55:45:c8:d5:
02:df:2b:40:55:ea:cd:58:9a:a8:c6:16:e7:1a:ec:
b6:9a:9c:96:d6:57:28:2e:6a:62:92:8b:71:41:13:
b8:21:2f:ee:fd:3d:e2:e0:b9:6d:2d:a2:27:b8:4c:
f3:f1:99:fe:d0:ab:92:e8:2e:5c:9e:fa:4d:7a:51:
3b:70:56:e6:c1:1a:32:88:f4:76:5e:d2:f7:61:49:
85:36:6e:72:59:2b:b8:7a:1e:41:7b:ff:22:2e:33:
57:08:d2:42:92:51:5e:ee:4c:38:ab:73:fa:8b:e8:
0a:12:6f:68:99:aa:93:7f:97:71:f6:9b:f9:68:ce:
08:e7:f7:2d:df:15:b9:c9:6e:4e:1d:97:c5:7d:31:
a5:b2:e1:b6:06:7e:da:16:b6:72:70:e1:95:ac:09:
95:6d:ff:d1:08:ec:0a:cc:39:20:e4:40:34:4d:e3:
0d:e6:71:c3:6a:a0:35:c6:ba:2d:45:3c:ab:27:a4:
13:0b:25:e5:02:ab:f7:ae:7e:fb:1c:c0:94:7c:40:
92:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:82:C6:58:3B:A6:8E:7C:56:35:C7:00:7E:94:2C:FA:2A:60:21:3A
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d0:5a:b5:cf:13:60:85:79:54:47:03:42:b3:02:4a:68:ab:
f8:e0:29:ee:27:30:f6:81:81:44:49:82:e3:93:47:5f:12:69:
92:4b:02:d5:08:d3:86:dd:91:d2:06:a7:e4:81:39:a3:69:e5:
7d:79:e4:28:b9:d9:d2:4a:94:45:ad:41:c3:9a:0f:9e:4e:20:
99:9b:84:f0:f0:87:40:3f:f8:2e:bb:83:ab:04:06:44:c4:24:
65:85:d9:b9:ae:c7:da:3f:be:87:5f:47:ea:a9:bc:1b:bf:dc:
90:23:54:ee:19:40:67:be:18:b3:75:91:e3:d4:bd:59:af:97:
b6:a8:58:35:de:bd:cc:8b:6e:8c:bb:e1:1e:2f:f4:4a:69:66:
48:80:a0:4a:ed:b1:3e:45:ab:e0:79:9f:27:63:c8:0c:54:36:
38:ff:7a:e6:4f:c2:48:d0:3e:19:8e:b3:c7:52:e3:6b:d5:50:
90:95:17:c6:53:d9:14:d4:ec:4f:db:ff:73:9f:11:a6:ed:07:
9e:4b:af:46:d9:6c:8e:dd:a2:ef:6c:09:c6:d3:30:24:fd:c7:
c8:91:78:9f:78:70:3d:46:97:7e:e4:b0:b4:1c:53:24:bb:f0:
c5:f4:a5:af:ab:f7:c8:f1:6e:86:ca:8e:bd:f5:68:8c:91:26:
84:3c:8d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:41:00 2025 by rpki-client