Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
File: fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft (raw, json)
Hash identifier: 16+EajJ+gnUlQ43FZ+Fu/uQPGoUWK+wpOnFvmB0t7c8=
Subject key identifier: 6B:D4:37:9D:07:06:68:90:34:39:1A:03:D9:9A:FF:0A:88:F3:9B:0D
Authority key identifier: 7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
Certificate issuer: /CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Certificate serial: 01974DB273F81ADE351A5F522FFE4443DBDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 04:00:30 +0000
Manifest this update: Sun 08 Jun 2025 04:00:30 +0000
Manifest next update: Mon 09 Jun 2025 04:00:30 +0000
Files and hashes: 1: MLwEXlz7vUwc5SjWgOx55jqHjfY.roa (hash: nEFYTn5TUjsaiq+RhC3lF8ai3Uf+0UFa/4rn5vibuks=)
2: fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl (hash: 9LGJePTHHLudBD4S5QkX0UwV0DYEAsRBT8qObCt7u5I=)
3: mfViMC5WzFmHy2d2V9evB-1C54M.roa (hash: AYo63SdEVlQlgz+glCe/AMcSKXW/Zi4rvSvNYshL2xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:73:f8:1a:de:35:1a:5f:52:2f:fe:44:43:db:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Validity
Not Before: Jun 8 04:00:30 2025 GMT
Not After : Jun 9 04:00:30 2025 GMT
Subject: CN=6bd4379d0706689034391a03d99aff0a88f39b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:06:5e:6a:c7:b7:b1:09:c8:6f:42:62:c2:
c2:59:1c:6f:e3:4f:1b:61:91:11:94:6e:70:46:60:
fa:a1:f5:11:3c:40:49:39:62:66:da:82:6e:72:aa:
e7:05:f3:5e:26:f9:41:d6:a0:75:d3:97:4d:9b:d5:
4f:0f:22:38:c6:c0:ca:f6:24:52:02:55:ac:88:ca:
5c:7d:4d:8f:6e:b6:f7:3a:6c:fe:eb:03:71:53:fe:
07:5b:6d:6f:ea:f5:e5:a8:ab:8e:46:47:66:72:2c:
7b:51:e4:d6:d6:1c:8b:d5:4c:42:6d:96:c3:39:b0:
d9:6e:d7:56:a8:f1:4c:24:c6:34:28:1d:bf:d5:35:
7e:22:54:37:89:1c:67:4d:9f:7c:28:ab:3a:7e:b5:
6a:c9:41:00:47:97:37:ea:52:95:87:e3:ed:58:e0:
94:54:42:22:2c:c5:ec:42:80:b1:1e:ac:91:a8:c3:
0e:c1:fd:e0:07:35:a1:42:55:b8:a6:56:7f:2d:f5:
fc:f9:94:51:a0:4c:30:f8:0e:17:29:86:67:92:95:
3e:75:3b:ec:0e:e6:4c:f6:ee:06:97:36:fb:0f:72:
c7:da:a7:0c:43:ba:6a:cc:d1:69:a1:10:3a:bc:57:
a7:e2:74:11:c0:b9:55:db:e5:00:36:39:5c:2d:cb:
bb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D4:37:9D:07:06:68:90:34:39:1A:03:D9:9A:FF:0A:88:F3:9B:0D
X509v3 Authority Key Identifier:
keyid:7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:fb:c6:34:00:01:ab:90:2c:25:e8:9b:86:84:a4:a7:f1:e3:
81:38:44:2a:1e:18:3d:99:7f:76:d6:de:8b:fd:5b:81:a2:65:
56:51:43:ab:d6:c8:11:25:2a:29:87:26:8b:5d:d7:48:b9:36:
89:e9:78:79:70:c4:87:d1:05:db:cd:77:0c:1a:63:50:45:e7:
0e:7a:d2:65:68:bb:6e:d5:6c:23:35:50:6d:0d:91:23:66:47:
92:c8:e6:b4:d7:84:fe:80:8c:32:65:9c:9b:ae:5a:08:f7:97:
c9:18:59:ef:d2:3f:b5:40:25:b8:b4:16:26:ee:cc:ad:c0:6d:
99:de:54:3b:31:00:9c:c3:7f:85:4d:6b:7b:93:b9:16:f7:fc:
8c:73:c6:cc:0a:54:d9:3e:cf:14:b1:c3:67:45:77:3d:ac:de:
22:ea:04:d1:d0:82:14:05:c8:48:5c:b2:aa:dd:47:bb:87:25:
94:88:a8:cc:06:ee:c2:e3:f2:ce:e4:62:c9:33:62:f0:6d:37:
4c:3a:9c:c0:1a:0f:41:ad:9f:96:d2:4d:5e:3a:bd:b2:f4:63:
5b:2e:82:ff:44:60:32:b1:5e:9f:13:09:03:21:ef:0a:84:50:
c2:c3:f0:12:79:78:82:1b:54:99:d2:07:8a:8b:05:4b:06:c9:
5d:17:f7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:42:56 2025 by rpki-client