Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
File: f0LSfCHahsfp-_RK4OVsmPPS-As.mft (raw, json)
Hash identifier: WAJ9P6nOzl5hKsbBpYBw80N/5qvIQlSy6ZCC9sNEc1w=
Subject key identifier: 63:B9:78:D8:66:56:30:71:4A:1B:F5:D7:CB:A2:61:A3:CD:56:0C:72
Authority key identifier: 7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
Certificate issuer: /CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Certificate serial: 01974A4370FBD3C52ADB623F08CA3767390C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
Manifest number: 0D1A
Signing time: Sat 07 Jun 2025 12:00:23 +0000
Manifest this update: Sat 07 Jun 2025 12:00:23 +0000
Manifest next update: Sun 08 Jun 2025 12:00:23 +0000
Files and hashes: 1: f0LSfCHahsfp-_RK4OVsmPPS-As.crl (hash: sfrIYNIVpHTNjT9oVWQHMPU2OrDv9+hpKDjWqG3o1Y0=)
2: ldAiZGhEA6PQQSWSUu13vFbKCqU.roa (hash: sA9s3rJXQHu5BKgisYTJyKuldiob4VBrcuXc+pLot6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:70:fb:d3:c5:2a:db:62:3f:08:ca:37:67:39:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Validity
Not Before: Jun 7 12:00:23 2025 GMT
Not After : Jun 8 12:00:23 2025 GMT
Subject: CN=63b978d8665630714a1bf5d7cba261a3cd560c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:18:cb:6f:ce:85:db:2f:e6:32:85:95:50:5c:
43:07:1b:e0:21:ad:f4:30:6c:eb:94:58:fa:34:5f:
63:99:fb:11:e1:e8:19:11:a0:8a:c5:72:3c:fd:79:
6f:74:ed:a2:d2:e0:e4:25:d1:5b:9c:5a:47:ea:ef:
ae:96:2c:78:97:ad:b9:58:f3:25:e2:53:3b:ed:9e:
87:d6:5c:a3:8e:67:56:eb:dc:d9:25:e9:66:3c:55:
1e:ef:00:f2:59:a5:e0:d0:91:f9:a6:f2:dc:f1:a6:
ee:1b:ff:29:db:a8:95:f3:50:a1:dc:3e:00:69:44:
3a:0d:45:0b:b2:19:82:31:ea:2f:5d:00:9b:41:10:
c1:46:ad:29:d1:25:63:fe:9a:e3:44:c3:0c:a3:36:
f9:68:5e:05:78:80:d3:32:99:a7:57:34:e0:ca:43:
18:b0:37:0a:e3:c6:5d:51:44:c5:f5:00:cc:89:35:
b1:d3:9f:1f:9b:e8:67:99:cf:09:f5:3c:cc:b2:71:
70:42:c7:cb:9d:0c:19:c0:b8:0c:f4:0f:9a:05:e8:
16:11:2c:a3:00:a0:77:e8:29:b4:4f:e0:cf:9e:ca:
c8:55:fd:03:65:0a:2e:95:19:04:b6:66:cc:ea:cf:
99:4c:2e:8c:47:c8:4d:d0:e8:bf:a5:e1:db:1f:a1:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B9:78:D8:66:56:30:71:4A:1B:F5:D7:CB:A2:61:A3:CD:56:0C:72
X509v3 Authority Key Identifier:
keyid:7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:53:99:80:45:e3:c1:4b:43:5d:f5:72:6f:07:c1:c4:2d:6b:
27:88:cd:00:34:91:fd:4a:ba:ab:0e:41:e6:a2:ea:a5:65:c9:
eb:a7:f9:05:b7:b1:33:cb:7b:6a:d3:17:0b:0c:44:e2:64:e1:
17:12:1b:5e:91:ec:d4:6c:8e:69:ec:cc:3f:26:9a:5d:30:d1:
f1:dd:bd:b9:9e:37:25:8f:df:bc:28:b6:50:e6:d2:63:94:d1:
3c:c1:31:bf:a6:23:d9:ca:d7:e0:fb:b1:b2:d0:37:a7:66:82:
27:0d:22:fe:87:d0:d6:52:94:c7:3a:51:12:4b:46:db:74:28:
8e:15:ba:b8:17:9d:7f:01:d0:d7:9c:36:75:1f:f4:67:9f:f8:
d6:3d:aa:d7:25:1d:81:ab:fb:d3:bb:e9:ca:79:03:dd:fe:ba:
18:85:34:5b:64:fd:1a:51:9d:b9:ff:2c:0c:27:0e:b3:bc:0e:
b1:ca:a9:c7:64:a8:d3:17:89:cb:01:47:1d:5b:58:98:5f:3e:
04:7f:ea:db:e3:1e:ab:26:d9:a1:b0:29:3d:04:f8:9a:7c:0a:
84:a0:db:1b:ab:2a:e8:1d:62:ac:e3:e3:cd:e3:bf:2c:21:bb:
75:66:8f:fc:2d:f3:9e:fe:71:98:f7:39:2d:fc:6f:42:b1:06:
5f:b6:f8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:39:30 2025 by rpki-client