Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
File: fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft (raw, json)
Hash identifier: kDBpQd/EuDOHVtFEkEdncDZPSDRnkzpxf6Ar3GSr2j4=
Subject key identifier: FC:56:07:82:93:14:3F:BB:F1:8A:1D:02:01:1D:E4:17:43:46:E8:8D
Authority key identifier: 7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
Certificate issuer: /CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Certificate serial: 01975D93A2F9D57E2FB4A14C36CA4EEF598B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
Manifest number: 107C
Signing time: Wed 11 Jun 2025 06:00:45 +0000
Manifest this update: Wed 11 Jun 2025 06:00:45 +0000
Manifest next update: Thu 12 Jun 2025 06:00:45 +0000
Files and hashes: 1: fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl (hash: AN/PQy3BNqdCiZknTYpFpdEtTZhG5hd/Mb+Qt9Y3uq0=)
2: j5qbmBs0_BfbwDwd52YtHtTdhQg.roa (hash: LA1lDjQr1OL9kDtbpIDDn8ilyEOxmrMJjPxRdvdaCKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:93:a2:f9:d5:7e:2f:b4:a1:4c:36:ca:4e:ef:59:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Validity
Not Before: Jun 11 06:00:45 2025 GMT
Not After : Jun 12 06:00:45 2025 GMT
Subject: CN=fc56078293143fbbf18a1d02011de4174346e88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:ba:97:99:4b:ad:4e:06:c5:db:86:6f:37:
d4:9d:fa:f2:1d:04:f3:84:55:d9:e1:13:75:ce:9e:
9f:94:e7:6e:91:0b:64:05:de:f2:7d:8e:91:0e:f8:
e5:32:a3:dd:64:b7:82:86:68:de:85:08:e7:6e:54:
1b:a6:ce:11:6e:41:34:a5:de:84:c4:bb:89:d7:ae:
15:0f:47:4a:88:89:84:ec:1b:cf:14:44:d1:26:43:
02:c9:be:22:6c:4d:3d:b2:97:84:67:3c:8f:e6:7b:
e6:96:64:52:16:4a:b5:ef:75:3d:8e:96:1d:96:9b:
16:e2:b1:2c:7a:8b:cf:50:7a:b2:be:60:b0:15:c1:
64:d1:89:97:06:6c:21:ff:92:da:09:85:37:d8:e3:
da:04:a1:aa:b6:e8:cf:63:96:99:3f:81:84:c4:9f:
87:7e:b9:a8:13:8e:86:41:87:4e:e5:94:19:84:b4:
d2:da:9d:fe:ee:05:fd:0f:8d:4e:98:f1:73:36:c8:
c5:5f:81:19:56:d0:1c:63:df:b9:01:9c:c9:b2:15:
0c:9f:48:0a:3c:be:81:9c:13:95:73:7c:fb:26:54:
02:27:32:79:10:dc:b1:a4:19:b4:a8:0a:f9:4f:59:
ae:2d:be:e2:ac:96:b2:f4:e9:e7:41:9f:b7:10:cf:
27:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:56:07:82:93:14:3F:BB:F1:8A:1D:02:01:1D:E4:17:43:46:E8:8D
X509v3 Authority Key Identifier:
keyid:7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:63:6f:37:71:ee:8c:9a:ce:c8:2c:ec:bb:df:e9:dd:e6:39:
6b:86:66:f4:5f:36:76:ec:02:64:92:1a:f1:15:a1:41:46:86:
61:a2:b3:8c:7b:4e:51:66:b2:9e:24:7a:2a:b5:9e:5e:e3:5f:
9f:20:7e:51:2c:80:12:a1:68:c6:9d:2c:2a:4f:64:0d:b0:45:
be:09:de:8e:3c:07:4a:84:d3:57:af:a8:68:40:88:5d:cd:be:
a0:1e:98:d2:e5:d0:79:e0:50:8e:0b:3b:91:73:22:de:d5:6d:
04:fa:ef:9c:83:4b:e1:d6:d9:dc:5b:f2:7a:32:e0:a3:43:3e:
ed:d6:1a:7d:59:51:93:ca:a4:22:09:38:c5:48:b3:31:e2:04:
3c:63:c0:98:94:a9:1c:b6:76:4c:39:8b:00:f0:3a:cc:05:5a:
ea:01:df:81:31:e4:66:7f:56:cf:b2:77:55:d6:94:df:fc:1f:
4d:c7:9a:f9:b1:df:89:a5:e6:55:74:37:5d:3a:e8:2e:ea:e5:
c7:f4:09:b6:51:29:a6:78:d2:75:b7:24:c0:98:ed:9d:a8:a1:
b3:a3:cc:2f:dd:7f:23:6c:37:44:53:28:af:61:28:4f:4c:6c:
45:b2:b5:97:fb:7b:65:2d:14:63:28:cc:a3:31:5c:08:32:00:
ed:76:b5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:24:14 2025 by rpki-client