Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
File: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft (raw, json)
Hash identifier: D2BsDMBcmYBBb6EO7bebXtAO8UyC67m388NC3epSX8k=
Subject key identifier: 5F:51:FC:68:F5:47:B2:C8:22:71:5C:93:0D:D3:E6:28:AC:1C:63:40
Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
Certificate issuer: /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Certificate serial: 019748C31CADA79DDA6921CADA837E5E65CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
Manifest number: 0FA3
Signing time: Sat 07 Jun 2025 05:00:35 +0000
Manifest this update: Sat 07 Jun 2025 05:00:35 +0000
Manifest next update: Sun 08 Jun 2025 05:00:35 +0000
Files and hashes: 1: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl (hash: QVMciFpMyoi7Oqvn4rUEx1K8HrfoLLqUf1fx2IFcTJA=)
2: KrFqFiDpj3KTLxxAsjJyiKgAjFA.roa (hash: 1PmMv3UcI9fAXjZSi6jxq86mVNekWxeQeV4OVG0h5eY=)
3: QEP4j9JVsbgw6u0dNGwjp_dEBOM.roa (hash: cfwWMXWNZBAAjCKALqzpLbct9a8WBHygXbGOplIqMXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:1c:ad:a7:9d:da:69:21:ca:da:83:7e:5e:65:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Validity
Not Before: Jun 7 05:00:35 2025 GMT
Not After : Jun 8 05:00:35 2025 GMT
Subject: CN=5f51fc68f547b2c822715c930dd3e628ac1c6340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cf:a4:2a:d3:7d:5a:92:8d:39:01:e9:ef:e7:
e4:98:f1:23:0b:27:1d:cf:ef:7c:8d:1d:7c:94:7a:
06:f4:21:e0:31:33:7b:b4:29:ae:c4:4e:72:64:71:
f6:4d:06:0b:1c:c5:e3:64:72:4a:a6:4a:18:20:e0:
70:b3:4f:aa:84:51:03:ed:9a:35:ba:bb:ea:62:40:
28:c7:f5:24:cf:8b:b3:78:40:ce:3a:4f:79:bd:56:
4a:1a:4b:16:a5:0c:14:60:3f:df:69:c6:5b:e1:f1:
d7:e7:6b:fb:e3:1d:ae:88:07:e5:83:0f:8a:28:df:
72:77:c5:2f:f5:b1:8c:e9:1a:14:39:92:de:30:37:
ce:ff:aa:48:1a:cf:d3:8d:1c:64:ab:0e:00:98:16:
0a:49:80:3a:36:c7:82:56:79:95:74:7c:90:12:ad:
c1:28:ab:24:88:65:67:ad:af:0f:bc:a2:dd:52:99:
dd:17:ba:7d:99:b6:2e:56:b6:5e:cb:40:9c:0b:e7:
22:f7:2e:3d:c0:85:81:a9:99:c4:09:17:73:b5:f5:
c8:f7:0d:04:3c:16:ef:10:fb:aa:7a:8f:5d:6c:e1:
ae:2f:aa:f1:45:38:a6:97:0f:b9:22:0f:e9:92:6c:
c8:8a:d2:f1:53:6e:28:ae:03:43:5e:f9:47:7a:06:
e2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:51:FC:68:F5:47:B2:C8:22:71:5C:93:0D:D3:E6:28:AC:1C:63:40
X509v3 Authority Key Identifier:
keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7f:5e:2b:0b:ab:dd:69:a9:e4:30:6a:36:c4:d8:b3:82:0d:
bc:5b:73:34:ed:9d:e9:98:65:54:d8:de:d2:b9:2e:b5:03:a2:
2c:8b:5a:8f:72:47:dd:2f:35:6c:31:d7:48:96:62:01:65:01:
d8:05:16:e1:60:a7:b8:71:f6:23:12:e0:1b:39:68:86:0c:ed:
4b:20:a4:ca:00:4c:f8:de:cb:c4:c7:08:01:c1:c7:53:c6:2e:
8c:ed:b3:9f:ab:6f:8e:2c:2c:4d:c2:f2:d3:b2:4f:e1:8a:01:
fb:b0:31:37:9d:bf:85:2f:a5:da:f3:c8:8f:c5:31:38:08:7e:
f8:2b:91:fc:2c:4f:69:fc:20:fb:f2:ae:9f:33:10:1f:f6:33:
3c:97:15:91:8b:80:21:80:a9:47:ef:8d:2b:ac:d5:7b:f7:7e:
a4:62:64:50:3e:46:69:10:b8:ee:bf:fe:8b:b3:74:de:96:19:
f6:74:18:1e:f1:71:36:26:57:33:6b:46:f9:07:27:1e:7d:14:
6a:c4:1e:66:c2:b5:84:89:78:3b:ed:36:ca:b1:7b:f6:c7:2a:
5c:2b:4d:62:07:71:5b:28:64:65:a9:a6:36:88:ec:9f:2e:05:
4d:99:6f:31:ad:9c:b1:03:b1:17:ce:96:b5:3d:40:7b:ca:7d:
15:c5:54:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:24 2025 by rpki-client