Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
File: F42BIe9wTXqXcMPs4eIFYUeQrDk.mft (raw, json)
Hash identifier: GqmWiDpk/E+N/IftP/LUVpBbzBIy8lvh7jprGIhXZ0c=
Subject key identifier: 2C:53:EA:42:B6:F7:01:41:91:5B:B6:01:99:12:06:E4:73:B1:AE:9A
Authority key identifier: 17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
Certificate issuer: /CN=178d8121ef704d7a9770c3ece1e205614790ac39
Certificate serial: 01976215C19EC7A9D9AC774567BA8FF541CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
Manifest number: 04E1
Signing time: Thu 12 Jun 2025 03:01:22 +0000
Manifest this update: Thu 12 Jun 2025 03:01:22 +0000
Manifest next update: Fri 13 Jun 2025 03:01:22 +0000
Files and hashes: 1: F42BIe9wTXqXcMPs4eIFYUeQrDk.crl (hash: T48IIFlPLPqQ2DYaxxWHnkntWpNfQvP7MCCzEYC5fi0=)
2: tQhQQED_2rbtgmsDxQqfycOcoj4.roa (hash: 7QkytynjV9fTl5bHPu2TPRokrjL3zXWtRN7glg7QEBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:15:c1:9e:c7:a9:d9:ac:77:45:67:ba:8f:f5:41:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178d8121ef704d7a9770c3ece1e205614790ac39
Validity
Not Before: Jun 12 03:01:22 2025 GMT
Not After : Jun 13 03:01:22 2025 GMT
Subject: CN=2c53ea42b6f70141915bb601991206e473b1ae9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:e3:68:1e:21:3d:eb:55:b4:8b:30:dd:63:
0b:a0:69:85:40:e0:32:64:a4:ab:76:b4:42:cd:f6:
b5:4b:53:1d:bc:35:6f:20:43:6b:1b:93:c0:f1:37:
18:2c:04:c5:8c:0f:63:0a:f8:9c:82:b7:93:73:c2:
42:2b:8a:d9:e3:22:09:27:3a:66:80:19:1d:33:a1:
bc:cd:d3:69:f3:ba:25:da:b5:8d:d9:39:90:5e:74:
d3:45:cc:f7:81:e9:21:12:9e:a2:45:7f:44:0e:8d:
7c:7f:7f:e1:3f:8f:56:cf:3d:44:36:6c:36:78:f8:
9b:90:1c:67:26:8e:b1:fa:23:d0:5e:e6:13:1a:af:
e0:1a:6e:46:be:04:ac:de:4e:d2:ee:7a:08:e4:d2:
4c:2e:d9:5d:e2:2f:1a:f2:60:39:b6:b0:5c:45:12:
c3:e9:13:d6:f6:b8:d8:a1:b8:58:9e:e3:19:a0:b1:
bb:88:b6:b8:9a:0f:53:77:2d:8b:c7:01:e3:bc:28:
7d:95:04:b8:12:fa:41:37:95:8d:29:14:07:ff:1f:
54:fc:ca:0f:94:03:c4:4d:80:42:35:39:64:16:02:
b1:9d:25:2c:7f:7d:d5:ac:d2:1e:6c:50:60:6c:bd:
fb:6a:ee:02:d6:03:7b:f3:8f:ea:b9:0e:75:31:04:
63:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:53:EA:42:B6:F7:01:41:91:5B:B6:01:99:12:06:E4:73:B1:AE:9A
X509v3 Authority Key Identifier:
keyid:17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:32:dd:08:ac:36:00:48:76:ad:a5:9c:5c:f5:24:48:70:04:
33:2c:f7:52:4b:d2:96:6b:e0:54:fc:6e:59:da:df:29:af:61:
88:c5:c3:01:e3:20:5f:27:d8:cf:e7:e6:ba:4e:b9:99:46:b4:
9c:3b:66:83:1d:ef:09:87:06:6e:13:42:6e:a2:94:74:18:91:
15:6b:ae:a1:a9:b8:27:74:15:1a:81:db:80:c2:b2:28:a2:70:
71:05:04:82:bd:00:87:9f:35:90:92:1e:b7:13:6b:53:4c:c4:
c5:12:9f:96:b1:47:73:7b:ba:c0:1d:ae:92:1a:6f:0e:c0:08:
be:fe:89:ba:ed:ca:22:ce:8e:22:44:6c:6d:8d:e0:7a:a9:8b:
48:62:f9:cd:5e:67:55:53:11:71:a6:5f:59:a5:90:14:70:8c:
3a:55:0f:4b:eb:d8:61:a9:8b:3c:d4:11:83:2f:85:32:e5:c9:
ee:51:7d:e4:4d:23:d3:a4:60:2c:51:f0:65:cd:c9:23:14:be:
36:9c:59:1a:e6:d1:a9:c0:2a:9d:cb:1f:52:36:fd:eb:87:51:
a3:a1:16:e4:e2:bb:e1:08:46:ed:60:07:0c:af:1e:23:06:e8:
da:83:37:f3:e6:0d:24:ee:27:28:b1:af:b7:c4:16:ca:b9:db:
71:7b:1e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 11:08:54 2025 by rpki-client