
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
File: _fVLGHmhRTl_rA01jvq9L1_QrKE.mft (raw, json)
Hash identifier: nIFCZB6G+wYZBG+zei0fft9OG4/4iMLAb1lyDg/fNp8=
Subject key identifier: 23:07:1F:7D:9F:08:01:59:78:E6:7D:7B:74:1E:AF:C6:6C:AE:72:AE
Authority key identifier: FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
Certificate issuer: /CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Certificate serial: 019745C29BBDFEA3CA8542BBBB48AC5633CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
Manifest number: 3A
Signing time: Fri 06 Jun 2025 15:01:11 +0000
Manifest this update: Fri 06 Jun 2025 15:01:11 +0000
Manifest next update: Sat 07 Jun 2025 15:01:11 +0000
Files and hashes: 1: 3gBbUpzoZ_NS48pVPCMN6ErX32g.roa (hash: LdH7+fCou1DXhFQSVmkaHCyede3+anbIJwlMXR+OI+M=)
2: _fVLGHmhRTl_rA01jvq9L1_QrKE.crl (hash: DoBVPUT+YgvHUR+RLPY8pCOGCpGueCX1EBxtl0Mwbas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:9b:bd:fe:a3:ca:85:42:bb:bb:48:ac:56:33:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Validity
Not Before: Jun 6 15:01:11 2025 GMT
Not After : Jun 7 15:01:11 2025 GMT
Subject: CN=23071f7d9f08015978e67d7b741eafc66cae72ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:26:43:56:40:5f:ec:1f:68:11:fc:0f:f5:a6:
b3:0b:19:d7:68:01:fb:28:5b:9e:55:ab:72:1c:c6:
80:8d:05:c1:cc:a1:dd:32:b6:d7:80:40:7d:71:09:
f9:ad:d0:ab:43:7c:82:d5:37:70:e0:16:15:37:a9:
0d:a4:1b:76:8b:9e:d0:5e:49:47:68:c6:ad:24:76:
19:21:be:3c:ca:75:06:b1:5b:77:f9:02:30:09:40:
46:8e:3a:54:5e:0b:53:aa:e1:e4:1e:35:9e:d3:2a:
1b:17:5e:33:3c:00:32:ff:81:d3:a1:88:d3:58:ef:
88:59:b5:b6:04:9b:5e:e6:18:31:0b:b9:8c:d7:11:
69:a4:c2:9e:ea:f2:4b:6d:f2:65:53:aa:0e:87:e7:
0a:80:82:44:9a:15:dd:3a:56:fe:d3:7f:02:15:89:
10:d4:b7:2d:f3:07:cc:2c:3c:ba:da:dc:ac:82:40:
cc:79:d6:18:04:4c:b2:b8:18:34:b4:eb:46:51:43:
e1:55:e1:67:e0:a9:8a:5f:3b:34:5d:9a:3a:15:8c:
97:89:88:4d:a8:c1:72:d0:20:d8:9a:b9:90:e1:7d:
f1:c4:99:12:0a:e2:49:c5:7f:fe:d1:bb:a2:ea:98:
37:2f:a2:f6:9e:80:5e:e3:ad:70:ec:ce:b1:4e:ff:
47:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:07:1F:7D:9F:08:01:59:78:E6:7D:7B:74:1E:AF:C6:6C:AE:72:AE
X509v3 Authority Key Identifier:
keyid:FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:de:45:23:0e:21:03:25:49:b9:40:69:1c:f3:73:9c:b0:84:
aa:e6:52:11:70:30:c0:2a:bc:36:50:64:ba:98:ef:e8:dc:d4:
d5:f7:14:05:45:8e:47:65:e8:c3:2a:d4:51:75:9b:87:18:9e:
a1:4e:9a:d6:27:4f:99:f9:ac:d1:f6:db:53:cc:7e:f0:28:2c:
b4:9b:a9:50:27:3c:33:14:34:ce:b0:56:72:43:ba:ad:3d:50:
5c:25:c3:90:02:48:07:a4:e8:04:ba:da:b7:7e:0f:9e:bb:f0:
61:75:49:bf:8a:2f:9c:22:63:f2:05:74:24:59:e2:2f:ea:b2:
d4:e3:ec:4b:09:6f:d6:d2:3e:ca:9b:09:9c:22:97:a3:ad:ea:
95:f7:07:63:d8:a3:c5:85:f4:5a:03:63:0e:b3:87:f0:7a:3c:
3d:0f:1c:40:09:86:5e:ae:56:bf:cb:2b:2a:15:27:c4:8e:ee:
91:0f:89:a3:bb:41:f4:18:d9:47:a0:35:88:97:61:3d:1d:4d:
a3:28:cd:1b:21:fb:ad:2d:74:1f:50:2c:a0:f1:7f:33:cb:88:
ba:6e:4a:ae:3f:c8:4b:c3:ee:87:86:81:02:a9:dc:18:ba:11:
b0:d4:c6:cb:40:b8:7b:27:61:05:f8:14:9b:9b:6c:41:33:a7:
10:31:f1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:43 2025 by rpki-client