Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
File: fgRhmrDxIJtw8QWYxplEvzTb8jI.mft (raw, json)
Hash identifier: rtGY0SAj/T07nyfxHwvo1Fp6m+jg5hz+ezTqJ2Q8Icg=
Subject key identifier: 2B:BF:94:64:B3:71:6A:BF:A3:32:C6:FF:BB:DD:8F:79:37:C5:BA:13
Authority key identifier: 7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
Certificate issuer: /CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Certificate serial: 01975459641BF907B5293A770220A3EC859E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
Manifest number: 12C1
Signing time: Mon 09 Jun 2025 11:00:33 +0000
Manifest this update: Mon 09 Jun 2025 11:00:33 +0000
Manifest next update: Tue 10 Jun 2025 11:00:33 +0000
Files and hashes: 1: 787yu0Xx7LAqYI4eV6FlvWwe4sU.roa (hash: 0rdw2IxnG2UduKLMx9SDd9m8DvhrTv12ADsR6eydjg0=)
2: V7t1MzfzXgW3Q66a3IOYRULIxX8.roa (hash: 9ljAarH2vMiPbFaBcASuSrcoh5ApRcxsoYC+Da4pdfQ=)
3: fgRhmrDxIJtw8QWYxplEvzTb8jI.crl (hash: 6XQdKWeotWQZb3gM5LN7NqeKSdXKI8Bu9Rv4QAw6F5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:59:64:1b:f9:07:b5:29:3a:77:02:20:a3:ec:85:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Validity
Not Before: Jun 9 11:00:33 2025 GMT
Not After : Jun 10 11:00:33 2025 GMT
Subject: CN=2bbf9464b3716abfa332c6ffbbdd8f7937c5ba13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ba:be:f8:d7:66:11:e6:1b:39:32:b4:46:c0:
cd:ab:56:0f:25:c8:ac:2e:4e:68:23:cd:de:c1:d6:
72:e6:3a:ce:8d:f2:cc:96:63:1a:ed:8e:4c:56:db:
eb:5a:34:9b:93:1c:f7:64:6d:22:95:71:71:43:5f:
88:77:04:3d:56:48:74:75:bc:46:15:44:f6:bd:5e:
a1:54:ea:73:49:30:30:64:0e:02:2f:c9:61:09:70:
21:1c:d6:5a:c7:b3:65:2e:c7:5b:c2:e8:b4:00:34:
4a:85:5f:d2:43:fc:63:bb:00:8f:fe:08:ac:80:8a:
5d:d2:e5:20:e0:e9:2d:ad:66:b8:5e:89:e0:50:d1:
53:30:cc:4c:38:16:5d:ac:9f:bb:6e:6c:c4:50:a9:
ca:15:0e:7b:35:5a:fb:7b:92:c0:3d:92:53:5a:fd:
86:72:52:dc:e0:50:ad:c1:36:b4:49:22:8f:5b:d3:
8b:15:fc:39:37:ca:90:04:dc:d0:e4:e4:0f:94:c2:
f9:ed:26:56:04:d5:fa:35:32:56:74:75:eb:00:55:
d4:06:7c:74:3e:cc:97:17:d3:1b:7f:4d:10:fc:94:
89:c8:16:78:ea:74:94:dd:d3:d1:b8:e4:fb:09:13:
0e:7b:4c:85:41:9b:53:82:41:2f:c3:29:7e:16:e9:
d5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BF:94:64:B3:71:6A:BF:A3:32:C6:FF:BB:DD:8F:79:37:C5:BA:13
X509v3 Authority Key Identifier:
keyid:7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:3a:56:ea:ff:f5:9e:9c:6c:61:b2:a8:2b:05:8c:83:e6:d1:
9e:84:45:7f:0e:df:02:46:4d:ca:14:08:21:78:fe:d4:03:1c:
0e:f4:04:7c:31:d2:03:f3:d9:25:35:27:04:7f:b8:c0:ff:f8:
62:90:7c:69:92:bd:ed:cc:01:a8:70:43:84:1c:b9:33:a7:e4:
22:5d:99:42:c2:0e:51:a8:f6:3c:1a:29:7f:8f:7f:d4:b9:91:
32:82:db:4c:0e:d6:53:58:05:64:06:73:c1:04:69:a8:60:a1:
08:63:09:52:fd:17:46:7c:c5:b2:82:07:07:83:7a:7f:01:f8:
a3:ac:69:4b:63:36:3b:c3:c1:72:fc:f5:59:91:75:c0:f0:88:
92:07:80:d8:0a:ff:1e:fe:55:43:34:07:23:a7:06:24:8b:73:
99:3c:32:c0:fb:48:18:5d:02:9e:6f:b8:ff:dc:24:e3:a6:8d:
ce:41:32:b7:e2:fc:55:b5:fd:d4:01:28:9d:f1:18:92:9f:66:
6b:83:d9:51:e6:f4:a5:81:aa:89:23:1e:a2:1f:b9:2c:d7:cc:
c1:73:ab:f0:63:00:f6:9b:4e:03:46:73:a4:35:14:26:7c:07:
ad:ba:0d:bc:6d:2d:1c:f2:d4:82:90:12:65:4c:d7:e2:53:94:
e1:1c:d0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:20:44 2025 by rpki-client