Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
File: fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft (raw, json)
Hash identifier: qDeBah3bmdybQ6q0KrLsDbXBXOhhT8/4Z37hNtp+4ds=
Subject key identifier: A6:9B:F5:18:6B:12:28:DF:A4:55:5C:51:AE:09:09:0F:FF:49:1A:16
Authority key identifier: 7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
Certificate issuer: /CN=7e02a961b0375d72191bd970815d6b15f427d073
Certificate serial: 019748F9FE033ABB9E25A2A568EA51AEE3EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 06:00:32 +0000
Manifest this update: Sat 07 Jun 2025 06:00:32 +0000
Manifest next update: Sun 08 Jun 2025 06:00:32 +0000
Files and hashes: 1: O_lyoeGqf219CPNaRILiVGtpSnw.roa (hash: MBjGGTF1i33MT6liDQumorJo2rjHXFkdaYBR/A83Hr4=)
2: fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl (hash: wVTJh1mstI+AvoHPPa5NVrpMZlardPRXn+Xxym11Avc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:fe:03:3a:bb:9e:25:a2:a5:68:ea:51:ae:e3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02a961b0375d72191bd970815d6b15f427d073
Validity
Not Before: Jun 7 06:00:32 2025 GMT
Not After : Jun 8 06:00:32 2025 GMT
Subject: CN=a69bf5186b1228dfa4555c51ae09090fff491a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:61:2e:4c:64:c0:55:5d:e2:0c:d6:5e:02:
0c:79:d3:e7:97:b1:19:75:2e:9e:2b:e0:50:78:20:
fe:88:40:0e:9d:84:95:2b:29:e4:2d:d4:09:7c:e4:
11:65:72:19:15:49:8e:a1:e0:f8:e4:24:5a:12:41:
e7:73:b6:10:a8:cd:95:f0:39:18:67:b1:88:f8:9c:
01:fb:d6:05:9f:5c:79:e6:87:38:98:9d:7f:ea:04:
71:ba:0d:52:8b:90:59:5b:b7:e5:f1:da:af:15:42:
ec:e7:8c:c1:7d:9d:59:73:da:07:76:be:20:04:86:
09:6b:4d:9b:e9:46:ea:5b:20:13:8e:d0:3f:0d:49:
d4:68:05:21:50:d5:f0:c0:ab:44:7b:51:ce:48:2a:
10:d1:e9:b9:6b:bb:69:dc:b9:73:ba:5f:e8:63:ec:
75:30:85:fa:8e:94:09:dc:72:a4:9d:c8:cb:f8:4b:
47:f1:41:92:87:4f:71:2b:40:eb:01:29:7a:aa:01:
39:3c:85:26:f6:1a:0e:c3:81:77:5a:fa:73:c9:9c:
b8:38:d2:6f:dc:31:17:37:b7:b7:c0:a0:c4:69:88:
5e:d2:ac:07:f6:ca:39:5f:04:15:2f:93:3a:7d:83:
e5:e7:81:62:a4:20:2c:73:cb:c8:9c:67:ed:bc:20:
92:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9B:F5:18:6B:12:28:DF:A4:55:5C:51:AE:09:09:0F:FF:49:1A:16
X509v3 Authority Key Identifier:
keyid:7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2c:34:85:af:ac:8f:9a:0d:7c:c5:1b:01:b1:41:05:af:44:
73:dc:95:a4:c0:ae:de:1e:73:bc:00:d7:87:90:90:ad:41:c9:
a1:0e:d0:03:0b:6e:40:30:78:2f:9c:09:33:97:0d:c8:b8:55:
9f:eb:b2:52:60:09:fc:4d:fa:09:ba:59:8e:b4:3e:89:39:72:
28:bf:21:84:c0:7c:50:97:71:85:71:e8:ae:d8:cf:55:bc:8f:
4e:27:f2:fb:2e:bc:4a:75:bf:5a:70:43:31:d5:46:02:97:27:
11:ff:db:ef:27:7f:93:ab:1c:b5:69:f5:c6:77:2e:a2:a6:07:
82:e8:16:8e:21:de:b7:d8:c5:40:b3:4f:9d:39:86:e5:2e:d8:
25:96:56:71:38:de:7c:1d:d2:0f:a3:8e:5a:5b:b7:31:7b:0c:
75:24:af:dc:bf:91:16:70:71:8c:8e:b1:5a:08:d9:33:0d:02:
eb:8f:17:5a:d6:8b:3a:b3:96:cf:fd:44:3c:a0:77:24:b4:73:
71:d2:e3:b9:f0:c5:16:80:68:ce:1f:d3:d2:60:cf:6a:7a:fd:
c6:a5:28:28:a9:1f:7e:f3:5a:20:2b:4e:e0:c4:d4:0b:4e:d7:
57:2c:c6:e4:bb:21:06:a6:12:5e:bc:e5:37:bb:22:32:96:83:
ef:f3:20:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:27:22 2025 by rpki-client