Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
File: F1ogYIrOEedRHIZpVgY2cwqeKr8.mft (raw, json)
Hash identifier: hZZoFOANIZh5ZE5aTY3WKvYtiv5PM5A7w7C/lVpa9GI=
Subject key identifier: 2D:82:1C:E2:23:87:B2:0A:01:04:FA:36:9B:C3:A1:DB:30:63:38:59
Authority key identifier: 17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF
Certificate issuer: /CN=175a20608ace11e7511c8669560636730a9e2abf
Certificate serial: 01974D7B9A63CEB1ADB73147A9EA290B1189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
Manifest number: 043A
Signing time: Sun 08 Jun 2025 03:00:35 +0000
Manifest this update: Sun 08 Jun 2025 03:00:35 +0000
Manifest next update: Mon 09 Jun 2025 03:00:35 +0000
Files and hashes: 1: 2U-2Eym6KYW6qLxuFsjcorsxKnc.roa (hash: KrlvkjS9SKD/PHB33xX+CX5Zyn9t48T8ugGL2ErULzA=)
2: F1ogYIrOEedRHIZpVgY2cwqeKr8.crl (hash: fGmSddB/KPiRwDI5sejLUxJDfMysX4bs/JTJ8c3Qqsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:9a:63:ce:b1:ad:b7:31:47:a9:ea:29:0b:11:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a20608ace11e7511c8669560636730a9e2abf
Validity
Not Before: Jun 8 03:00:35 2025 GMT
Not After : Jun 9 03:00:35 2025 GMT
Subject: CN=2d821ce22387b20a0104fa369bc3a1db30633859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:53:79:75:dc:a6:85:64:6c:02:f9:63:6b:
13:3d:a0:a8:f9:c3:6c:57:33:5f:de:51:81:49:5f:
3a:e8:ce:c5:96:d9:d0:95:c6:96:cf:5a:ca:a5:f9:
be:de:00:20:01:69:a9:8a:0f:fa:ed:c7:8b:f9:b5:
32:c4:05:d7:cb:57:4a:03:70:6e:72:82:b2:c0:d6:
1f:2d:9c:19:17:3b:03:06:5e:1c:e0:8f:d1:08:5c:
38:3f:54:ce:90:ef:cc:50:2c:4f:44:9e:c3:85:46:
e4:93:08:d6:25:d8:8b:9f:29:b8:2c:49:26:69:3e:
49:da:95:cd:73:cd:47:c5:dd:97:68:8d:21:b6:63:
90:35:7b:37:67:38:2e:ae:4c:ff:b9:55:3f:8f:d2:
75:71:ed:32:bc:9a:03:0f:b2:85:cf:3d:af:6d:bf:
2b:ed:d0:0e:cd:e8:47:f3:48:c1:64:19:32:8a:e0:
46:9e:df:dc:17:b1:36:f0:38:c6:01:76:c3:f9:ab:
8a:fe:f8:22:3b:21:ea:f4:5c:af:f5:4c:ca:a0:74:
b6:48:50:d9:b1:8d:52:16:11:cd:ad:e4:9c:8b:39:
46:a1:50:07:95:38:f0:78:15:a6:0e:08:34:82:6e:
4a:48:ad:6c:ac:b2:d4:25:ca:bc:3c:4f:0d:3f:b0:
52:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:82:1C:E2:23:87:B2:0A:01:04:FA:36:9B:C3:A1:DB:30:63:38:59
X509v3 Authority Key Identifier:
keyid:17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:58:b7:8c:4e:7a:8c:ad:bf:52:91:fb:1a:53:ab:49:a8:5a:
48:cd:69:95:f8:23:71:50:d5:40:83:35:3e:b8:1a:00:88:7e:
d3:3a:9f:8f:0d:66:b0:08:39:2c:27:df:02:20:2b:83:21:a6:
f9:0a:b1:f3:f2:fd:bb:e3:b9:94:17:65:aa:6a:9c:36:42:35:
6b:85:86:27:6e:34:38:07:22:0b:52:bf:3b:a4:ec:83:b5:35:
54:17:f8:f0:d4:66:2f:0d:4c:cc:9f:1e:f2:a3:31:03:2b:48:
6e:ce:7b:28:c5:8f:2e:42:8f:5f:ff:f9:3e:d0:56:f5:69:68:
6b:41:7f:43:ef:72:40:23:58:38:9c:c3:e9:ad:72:38:07:50:
17:67:b0:c4:51:5f:42:d4:1d:53:8d:69:ef:65:38:ed:ce:eb:
84:52:cb:f6:27:49:9f:14:7c:5d:c8:b6:58:04:42:82:a7:51:
02:d2:c8:96:5c:3b:f8:6f:a3:da:31:55:7e:dd:d3:c5:00:2e:
a8:00:b5:c9:eb:11:ea:b2:df:ca:0d:c8:63:6e:7b:a2:41:36:
67:47:6d:bf:73:10:2a:8a:95:89:70:d5:6e:ae:76:80:ae:41:
60:b7:05:dc:51:38:c4:ab:76:6a:b2:07:9e:7d:f7:55:3a:99:
4c:78:fd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:45:48 2025 by rpki-client