Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
File: F263G9VVdvRXY7retnbtWZkNOWo.mft (raw, json)
Hash identifier: R4lUV7PN8RgSZnN4cVkujR+eI/Tlk4xNwUXwOw3qcII=
Subject key identifier: C7:1E:FA:28:A3:7D:AE:5B:8A:F7:52:5A:6A:91:A6:53:22:AB:A3:1C
Authority key identifier: 17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A
Certificate issuer: /CN=176eb71bd55576f45763badeb676ed59990d396a
Certificate serial: 01974A43E8962D7B8DC944EB8DD9F45E43E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
Manifest number: 0C8D
Signing time: Sat 07 Jun 2025 12:00:53 +0000
Manifest this update: Sat 07 Jun 2025 12:00:53 +0000
Manifest next update: Sun 08 Jun 2025 12:00:53 +0000
Files and hashes: 1: F263G9VVdvRXY7retnbtWZkNOWo.crl (hash: YFngHwYVpvWS2oSQoV/dPjDYLJuyjQAr6s5BE9+d07U=)
2: kQBDlI9AJTPDOANcbfub1qPVjs0.roa (hash: ws3dJ8ac8FYqQSPBpJu2ZxPrhp444gx9gUkFmi10lLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:e8:96:2d:7b:8d:c9:44:eb:8d:d9:f4:5e:43:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=176eb71bd55576f45763badeb676ed59990d396a
Validity
Not Before: Jun 7 12:00:53 2025 GMT
Not After : Jun 8 12:00:53 2025 GMT
Subject: CN=c71efa28a37dae5b8af7525a6a91a65322aba31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:06:88:5c:11:aa:ac:77:05:0d:a9:94:cb:a5:
d4:61:25:34:42:eb:6f:fd:12:b1:65:33:ce:f9:72:
b3:b9:1b:c0:bc:7e:ea:1b:d5:f2:f2:db:b7:5f:db:
01:3c:cf:53:cf:29:cb:a3:37:00:57:71:bb:11:5c:
32:65:d0:8f:61:d0:28:79:50:90:8b:53:5c:f2:c3:
55:cd:84:db:58:b0:6c:68:52:52:85:b9:b5:4b:cc:
16:60:ad:d3:04:60:a8:42:7e:7c:79:6d:82:0a:55:
bc:2a:31:bc:53:2a:41:ba:52:81:78:ac:09:d3:97:
1d:db:9d:69:ef:83:df:81:f4:e7:88:c5:f7:de:37:
0c:4e:23:7a:ee:e8:55:65:db:9a:49:fe:54:ce:27:
18:c0:ae:a2:10:d6:bd:47:a3:e0:54:e8:4d:7b:89:
44:21:2a:c8:4e:1b:77:7d:11:fd:8b:d1:85:6e:66:
36:79:97:7d:2b:2c:25:58:f6:c5:c5:67:c4:0b:4a:
0d:2c:c6:3d:5d:5c:80:a5:1a:72:20:a3:99:2d:e8:
6e:f9:dc:8a:e9:b3:66:fd:0a:66:3a:2c:b2:9a:ff:
63:62:83:fe:6f:94:34:5c:a4:bf:15:fa:fd:e3:2c:
17:b5:f9:42:27:4b:22:a5:fc:6c:c7:08:0b:de:5d:
54:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1E:FA:28:A3:7D:AE:5B:8A:F7:52:5A:6A:91:A6:53:22:AB:A3:1C
X509v3 Authority Key Identifier:
keyid:17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f3:76:7c:94:64:b3:e3:c2:18:b1:77:30:05:f6:ee:c6:3f:
c4:66:75:69:79:88:42:67:eb:5f:d4:a9:21:d0:89:6a:e5:58:
ad:6b:f5:80:d2:01:85:db:2d:02:69:2e:1f:1e:f8:a0:38:ee:
f5:dc:09:08:88:59:c2:d0:16:b0:55:fc:59:2d:9f:e8:44:34:
4e:5b:e1:d6:93:f0:4a:9c:e4:a1:a2:4b:d0:d2:4b:5f:f9:e7:
f9:0c:d9:33:bc:cf:20:26:97:fe:55:ad:ab:d5:24:de:8a:ad:
ec:f2:49:08:a4:30:94:88:ff:ad:34:6c:e0:69:39:eb:73:d3:
29:ed:2b:ac:5b:15:4a:c0:0e:27:75:b6:a3:6f:06:65:fd:1d:
25:a7:4d:f5:9f:5c:07:02:e8:31:44:cc:87:f3:bf:47:75:01:
00:16:a1:11:f2:3a:a3:0d:36:31:73:f1:19:dc:28:93:cb:f8:
4a:8f:af:b6:14:45:a7:e2:8d:5c:dc:12:29:60:b8:78:53:76:
82:1b:12:7e:ad:8f:69:63:34:1b:97:eb:15:1d:06:9e:f9:48:
9c:06:52:18:1d:8d:ea:1d:2b:48:e6:aa:bf:5b:9d:1b:7d:28:
51:ee:68:a1:f3:71:5e:07:db:92:98:54:ae:bc:d2:27:f9:3f:
07:db:85:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:13:44 2025 by rpki-client