Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
File: rfDfdxFHQeE6F9chPmlWv5YntVg.mft (raw, json)
Hash identifier: seVRAcf1dL7URtKLtahIxjKfmvrrXy/9ojgiLRSH1z0=
Subject key identifier: A8:FB:B2:15:D8:63:40:24:10:C5:76:AF:34:5E:88:0B:ED:E6:C8:21
Authority key identifier: AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58
Certificate issuer: /CN=adf0df77114741e13a17d7213e6956bf9627b558
Certificate serial: 01974967B18A8D988C36C5C310CD4F131ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
Manifest number: 1430
Signing time: Sat 07 Jun 2025 08:00:21 +0000
Manifest this update: Sat 07 Jun 2025 08:00:21 +0000
Manifest next update: Sun 08 Jun 2025 08:00:21 +0000
Files and hashes: 1: 53yfdczv1so3h7m6p_kJKapwYb0.roa (hash: 8fm3UETmOMmwp3oE4jpSkcDNkIYvAEXotF2eKRsyjLw=)
2: rfDfdxFHQeE6F9chPmlWv5YntVg.crl (hash: ktfS6gbWakyLcNsajtV9v6jqLrQ13624OHZLid1LOFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:b1:8a:8d:98:8c:36:c5:c3:10:cd:4f:13:1a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf0df77114741e13a17d7213e6956bf9627b558
Validity
Not Before: Jun 7 08:00:21 2025 GMT
Not After : Jun 8 08:00:21 2025 GMT
Subject: CN=a8fbb215d863402410c576af345e880bede6c821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:fb:9f:04:e0:a6:07:80:15:7f:42:69:c7:
61:ca:a4:e2:f9:ec:48:0c:c5:84:2e:ae:87:06:ad:
f0:41:e8:07:83:86:c3:27:bb:19:b3:5e:f6:97:fe:
05:e7:f9:53:97:1b:fb:09:41:c5:83:f7:9d:ef:24:
17:b3:65:35:58:a9:1d:e7:ed:d1:1e:d3:0c:78:95:
94:89:7d:90:52:73:de:cf:50:46:4c:de:26:e0:07:
59:3c:28:e1:51:9e:22:6d:6e:62:a4:39:41:e2:d3:
da:fd:4e:f5:fc:db:ac:26:92:93:f7:9c:8e:5f:d6:
d9:53:c4:9e:6d:41:47:0f:e0:a3:f0:eb:af:0a:34:
9c:a0:bf:47:16:e5:a7:c3:e7:9a:db:92:9a:ab:ca:
70:1c:a0:29:ed:75:39:39:f6:f0:36:eb:97:35:2f:
11:04:68:f8:96:e8:23:cd:cb:dc:d4:d0:b9:e3:5e:
dc:cb:88:7a:33:62:4d:87:33:19:9c:a1:08:35:da:
d2:39:58:4c:13:10:dc:ac:19:68:16:e4:3c:82:c8:
24:cb:83:c0:04:f4:78:df:52:a9:b5:9e:cd:9d:2b:
8b:d0:6e:de:cd:80:fb:01:7a:26:12:6e:14:c8:78:
2e:40:ae:69:96:fb:e9:7b:dd:ef:29:64:d9:8d:fc:
a1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FB:B2:15:D8:63:40:24:10:C5:76:AF:34:5E:88:0B:ED:E6:C8:21
X509v3 Authority Key Identifier:
keyid:AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4f:98:c7:89:b2:1b:3e:12:c4:b2:21:0e:9b:94:21:e5:6d:
83:31:61:cc:56:b2:99:4e:40:05:af:56:e6:1a:c9:a4:78:31:
07:00:01:fc:fd:bd:27:ad:99:f8:1c:a2:03:ef:2b:b3:a5:9a:
a7:72:59:b0:f2:c7:6d:5a:e2:f5:d9:d1:49:c8:fb:5b:c6:94:
88:83:a1:96:8d:bf:d3:ce:b4:65:c9:8f:2c:ac:86:47:c9:c8:
ce:fb:11:c6:38:8c:e9:22:cb:7a:3b:11:14:d0:74:39:48:32:
5c:1b:57:f2:08:73:65:10:69:46:41:b9:9a:a2:5a:2b:bc:fd:
19:54:28:03:10:ce:47:4c:d5:09:42:aa:b5:6c:41:fd:8e:7c:
9e:9f:76:75:33:1d:c3:f7:94:0a:c8:b7:d4:49:f5:ea:14:28:
0e:9d:28:61:77:58:1d:d9:57:a9:fc:b0:14:18:90:c7:6b:77:
27:7e:b1:9d:cc:1e:9c:40:a5:e8:9d:a3:11:21:b4:f8:d6:0b:
0a:11:6a:c6:65:8f:2d:93:4d:e9:c5:8b:0c:ef:2e:2e:6e:fb:
ab:84:2f:6d:c4:80:82:91:c0:bc:fd:60:ac:07:3e:c2:d0:81:
34:0b:80:36:66:db:c1:e2:52:ab:78:90:54:89:f2:4c:c7:03:
2a:8e:5e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:52:15 2025 by rpki-client