Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
File: Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft (raw, json)
Hash identifier: imlSQN+74FdqTRFpx6bxq1VUcsIvg1Yj9vMdKPhkQDo=
Subject key identifier: 1B:F6:6B:B9:27:56:C0:CD:EE:34:21:0E:D9:5C:AB:59:F8:B5:C1:A1
Authority key identifier: 16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
Certificate issuer: /CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Certificate serial: 019750EAB09AC357B91444EC494E587FC697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
Manifest number: 127F
Signing time: Sun 08 Jun 2025 19:00:47 +0000
Manifest this update: Sun 08 Jun 2025 19:00:47 +0000
Manifest next update: Mon 09 Jun 2025 19:00:47 +0000
Files and hashes: 1: AcPmWwo94r8m4Vj4-gToYDvTsGU.roa (hash: +evKtbSFjpYA6xBirW2To9jZahtd3cCQYx8e8YIZ/g8=)
2: Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl (hash: JcjTkm5aZvJDJt6RIBVkn7kkWs2OBqcmhKXOtOM+e7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:b0:9a:c3:57:b9:14:44:ec:49:4e:58:7f:c6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Validity
Not Before: Jun 8 19:00:47 2025 GMT
Not After : Jun 9 19:00:47 2025 GMT
Subject: CN=1bf66bb92756c0cdee34210ed95cab59f8b5c1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:45:b6:d9:45:f0:3f:64:eb:a7:3a:4b:ad:fd:
38:c4:86:74:c9:0c:82:8d:b9:b8:fe:b0:9b:9f:99:
6e:22:4c:76:ec:88:22:04:3b:ec:88:3e:e5:4f:f4:
2c:91:1b:8f:89:19:07:25:1b:cc:71:2c:cf:4f:e5:
ad:0b:9b:35:2f:67:99:00:3e:0f:f7:22:33:76:bd:
03:0f:11:0d:95:0e:bd:7a:c9:e0:74:8e:0d:4a:19:
44:06:8d:d9:49:48:80:19:31:05:86:fc:5a:f6:04:
9f:8e:75:37:80:dc:c4:c4:9d:8c:28:22:50:d7:90:
73:d2:8e:67:5a:da:34:22:5b:59:e2:09:60:61:c4:
d1:6d:25:1a:26:99:54:cf:7b:0f:aa:49:e7:41:6b:
ac:d0:52:26:6c:87:85:bf:7c:9b:37:e9:df:89:3f:
2b:83:8d:cd:d3:16:3e:b7:5f:0a:25:4e:cf:a7:b6:
01:cd:80:e2:94:14:ba:74:e2:cc:33:f3:1c:8a:c8:
8c:09:88:b9:1f:21:f1:10:83:e1:58:3c:6f:73:02:
30:75:a6:11:f7:a8:10:30:23:b1:ac:8c:c5:7d:10:
d5:91:d8:a5:2d:88:5a:52:17:78:4f:77:11:b5:6c:
b1:bb:7f:d6:80:df:7a:3e:85:cc:4d:6b:31:62:ad:
90:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F6:6B:B9:27:56:C0:CD:EE:34:21:0E:D9:5C:AB:59:F8:B5:C1:A1
X509v3 Authority Key Identifier:
keyid:16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:de:8f:90:01:16:da:a2:7b:92:bc:65:ba:8b:e2:e3:76:07:
4b:58:79:c6:a1:68:b4:53:da:d0:34:0a:2e:84:db:8a:92:ca:
8a:e3:c1:85:ff:06:54:aa:e3:4b:ff:df:97:ce:f9:de:e6:e3:
72:13:7d:99:5e:83:88:04:68:99:f5:fe:bb:4c:df:96:01:c6:
1e:bf:2c:0d:62:aa:23:29:0c:be:09:16:d0:fc:aa:96:2b:ea:
f1:e9:4e:d0:62:4f:c7:74:75:a9:d4:e5:46:93:e8:26:7c:e7:
89:c6:7e:df:41:6f:0a:d3:58:60:05:30:8e:1a:c6:4a:ef:5a:
0b:23:d3:da:78:a0:1f:b4:1f:5f:dd:37:d4:87:35:65:87:22:
76:24:e8:ba:4b:de:ab:aa:3c:f0:bb:f7:c2:9f:7f:3a:40:4d:
d7:bf:e4:0b:dc:97:9c:e6:de:05:bb:c8:48:c8:f8:17:2f:bd:
58:19:c6:b5:f1:d2:b2:ac:cb:6f:cb:a4:af:76:b3:a4:88:d7:
46:9c:4e:94:c7:58:2d:f2:4d:dd:0c:d6:ce:20:97:ae:5e:72:
72:4b:2a:bc:14:3b:43:5c:47:df:b8:b8:d0:45:86:91:83:cd:
3d:f0:3c:7d:c6:a7:3e:a5:a1:1d:fe:86:4b:b5:c6:ea:cd:ec:
4f:35:0e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:38:30 2025 by rpki-client