Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
File: fKBMxn75bZAi89C_xR6ttKS2PuY.mft (raw, json)
Hash identifier: GqL5FgqddFtiQSAHfRKkG9Nyek/Zxmz3B8SRcJs/+rc=
Subject key identifier: 8C:DF:AA:A8:DE:6D:D2:2D:A2:23:EE:3A:5B:76:9C:C0:F9:A9:CA:2D
Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Certificate serial: 01974B562D464386BFC0A1F58F7C0192EC73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 17:00:28 +0000
Manifest this update: Sat 07 Jun 2025 17:00:28 +0000
Manifest next update: Sun 08 Jun 2025 17:00:28 +0000
Files and hashes: 1: 4ekqJ0ShOsudm3NjqB8EzsLIznQ.roa (hash: bsmaITtT/q9ZrtwjMFlkhST+mxUMFa59Ikk72Us4Vtc=)
2: IVNXij-StlwFeQNzqAVOIR_s5UY.roa (hash: SitPl6cMloLrlgSBvA7o7zdkDMuevHChw+flrI14V8E=)
3: fKBMxn75bZAi89C_xR6ttKS2PuY.crl (hash: aUdXcG6+ANuYU24vBdEWhC0XjQF6GRs0E+hlMQ7PLnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:2d:46:43:86:bf:c0:a1:f5:8f:7c:01:92:ec:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Validity
Not Before: Jun 7 17:00:28 2025 GMT
Not After : Jun 8 17:00:28 2025 GMT
Subject: CN=8cdfaaa8de6dd22da223ee3a5b769cc0f9a9ca2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:9a:b4:63:aa:f3:8b:71:15:28:c3:43:70:
90:c9:2a:e6:77:b0:79:3f:54:ba:40:f7:bb:6e:52:
70:05:3c:47:63:03:ba:99:85:bd:f8:79:c8:c5:34:
3f:ea:eb:39:1f:03:de:9b:ab:35:da:90:b7:6e:2f:
72:92:b7:6b:6b:e4:26:7a:ed:1e:3b:6b:1e:71:cb:
65:34:a8:6a:a8:db:31:81:34:29:63:5a:d4:19:86:
7f:86:7c:f7:17:5b:d9:49:14:fe:f8:c9:a9:06:c2:
6a:ab:56:9a:fd:9a:da:41:1d:96:61:bc:b7:f1:39:
ab:36:a6:34:23:f6:c6:2e:6b:38:96:b7:35:86:2e:
f0:1c:ee:4d:a0:34:e7:10:78:a0:2c:fd:9f:c2:61:
fb:6a:c7:3a:e5:ae:4d:19:c7:aa:c1:c3:2a:5a:88:
78:4d:18:e0:31:de:7f:e2:20:a2:a8:80:f7:6e:51:
a0:bd:08:4f:a7:fa:57:1a:63:42:28:49:a0:c3:59:
aa:1a:08:21:49:7f:c9:98:92:fa:4e:a7:3a:03:ed:
56:c1:7e:b6:7d:33:ae:ef:ea:ec:3b:28:79:e2:56:
16:3d:a7:53:c7:cf:15:22:76:68:48:f7:76:23:20:
d5:19:a3:94:ab:7d:a5:dc:a6:6d:0a:30:41:e8:68:
fa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DF:AA:A8:DE:6D:D2:2D:A2:23:EE:3A:5B:76:9C:C0:F9:A9:CA:2D
X509v3 Authority Key Identifier:
keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:37:76:2c:c6:aa:4f:5b:05:38:70:3a:a8:bd:3f:fc:46:5c:
e4:ae:6e:53:d0:74:e4:34:04:be:27:9f:67:d4:88:4a:b8:fe:
5f:bd:5a:5f:43:6e:34:3d:3c:0f:e3:2e:d0:90:44:78:67:ce:
46:b6:a6:c8:0f:3c:a4:79:13:9f:01:87:01:74:62:df:cf:ed:
3e:49:b4:07:2c:07:e0:72:b3:2f:b6:44:0c:0b:de:dd:8a:54:
12:a9:38:45:f4:ae:67:6c:51:1a:44:d3:ab:61:16:dd:99:55:
10:32:06:90:7b:0c:61:7e:69:f0:02:49:64:13:1d:c8:e7:5a:
36:af:ab:e6:ac:5d:2b:28:19:f0:50:63:aa:e1:18:c6:08:aa:
82:f4:22:0a:2f:cc:25:0d:09:b6:8e:fe:d1:a1:86:ce:07:be:
22:02:79:03:91:29:1d:c0:f2:42:f4:a0:d8:ee:f2:b7:d2:d9:
c6:dd:74:e0:68:59:6a:95:04:a8:e6:da:b3:b5:5a:68:22:3e:
ef:c2:03:a6:04:5c:51:43:3a:ca:72:7b:be:13:75:4b:b4:f6:
c8:8b:a5:ac:cc:40:f1:0d:59:38:58:1c:66:f1:c2:9f:32:c5:
04:1e:74:6b:df:0c:51:31:07:d5:f8:ac:05:35:30:26:db:5e:
1f:ec:71:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:35:59 2025 by rpki-client