Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
File: fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft (raw, json)
Hash identifier: dkzxxCC1N7q2B7stG0Hmsp/STKdCfpMTo9eFlTPW5u4=
Subject key identifier: 81:E9:F9:88:E1:FB:1F:55:EE:73:87:A0:7B:31:F5:A9:A3:48:6E:67
Authority key identifier: 7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
Certificate issuer: /CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Certificate serial: 019750B367785A9D19F8C1E4E345633B3EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
Manifest number: 0DDA
Signing time: Sun 08 Jun 2025 18:00:24 +0000
Manifest this update: Sun 08 Jun 2025 18:00:24 +0000
Manifest next update: Mon 09 Jun 2025 18:00:24 +0000
Files and hashes: 1: fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl (hash: Yml8a/sbazVpG35R+ByTuG2Euo50rVapiXftsDiImuQ=)
2: r6JJsn0eajhp7sOEpygQyvJsZMU.roa (hash: cxRi0/gis8Ga5ROT0QtFOFL60z01cmboldkWqbkptMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:67:78:5a:9d:19:f8:c1:e4:e3:45:63:3b:3e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Validity
Not Before: Jun 8 18:00:24 2025 GMT
Not After : Jun 9 18:00:24 2025 GMT
Subject: CN=81e9f988e1fb1f55ee7387a07b31f5a9a3486e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f1:ef:83:6f:9b:34:7c:0f:d6:f7:b2:dd:e2:
d4:81:b8:13:64:4d:41:f7:d2:42:b0:d2:fd:df:a3:
af:37:bd:c7:b3:c1:61:67:d4:ed:38:65:c2:c2:b4:
45:1e:f8:45:d1:e7:e6:03:89:e3:fd:b6:71:6f:62:
a0:b2:83:d9:41:68:26:6c:1d:24:10:66:6f:29:63:
63:c8:46:d5:7e:91:58:75:f7:1a:53:79:c6:0a:6a:
3b:d9:d8:08:7a:a6:dd:d9:46:be:b1:98:53:e2:23:
1c:dc:88:4b:a4:55:61:63:71:e8:bd:9d:21:f2:60:
3f:c1:ac:55:82:58:11:b6:cf:57:67:53:71:28:cd:
12:a2:ed:6c:9d:7e:0a:96:52:d7:c6:dd:69:f9:ea:
bf:43:4b:3b:59:ae:b0:97:d2:fd:4d:f3:6c:b2:96:
c1:6b:c6:d6:db:1f:dd:9d:04:2d:29:21:97:de:3a:
15:c7:05:5a:bf:99:2b:ff:e9:8d:a8:83:1d:3a:21:
af:3e:d6:ce:24:7b:58:86:ca:46:0d:3b:74:b9:35:
c1:13:82:01:f1:b7:70:2c:03:f5:8c:7a:18:eb:84:
3c:2b:50:29:31:3d:c4:75:43:eb:92:3d:f3:83:17:
98:51:3e:e8:7f:7e:a2:7d:b6:2e:23:b4:77:65:5e:
8f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E9:F9:88:E1:FB:1F:55:EE:73:87:A0:7B:31:F5:A9:A3:48:6E:67
X509v3 Authority Key Identifier:
keyid:7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:52:b5:d1:ae:df:99:83:c7:54:f7:a2:ef:ba:77:fd:6c:25:
14:0d:d2:39:05:ef:4c:1a:01:eb:1f:a3:e7:64:ea:e4:b6:e7:
31:21:e5:51:2e:a1:a5:4e:b0:03:f6:79:32:91:00:96:bf:fa:
d0:31:c0:ba:93:e1:4e:c9:97:29:78:c2:3d:f0:33:b9:4f:be:
d9:ec:fc:31:a1:65:95:71:38:ed:74:ce:b4:d2:f1:ca:bb:4a:
b8:ec:55:ee:05:41:77:01:82:9a:9b:1e:b4:78:1a:86:0d:38:
d1:6a:4b:cf:e8:86:3a:44:87:04:25:36:af:6d:a6:f8:e9:18:
d0:62:e6:de:7d:56:b1:25:b4:2c:bb:e8:4c:b9:7d:1d:61:77:
6d:cc:07:3f:9c:25:b7:a2:5c:fd:63:28:db:94:cb:da:4a:a5:
3b:ce:2a:a2:ed:51:8c:86:30:9d:af:3c:09:6b:8d:b9:56:4a:
4a:a0:1d:2d:8a:4e:c9:d3:2c:80:b4:15:38:db:4c:d3:ed:9c:
24:46:8c:c5:5e:0f:56:ef:c8:39:cf:07:45:30:69:a9:63:8a:
19:16:55:57:28:b2:91:aa:08:c4:85:de:33:e9:17:03:60:ca:
a2:51:8e:79:d0:f6:bc:b0:b5:0f:8e:b4:35:fc:06:4a:3b:71:
54:c0:56:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:47:31 2025 by rpki-client