Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: kTHM61vXkUrhIxrGMy2T8mQwZ8eH1xlRDfYdX535fuE=
Subject key identifier: 3C:00:63:54:AD:E7:36:85:AD:39:2D:1E:CA:D3:07:D3:A8:10:49:BD
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 01974BC4382A2EB389D502235D0A1ACB0AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 08DF
Signing time: Sat 07 Jun 2025 19:00:40 +0000
Manifest this update: Sat 07 Jun 2025 19:00:40 +0000
Manifest next update: Sun 08 Jun 2025 19:00:40 +0000
Files and hashes: 1: 7gpeu0S7hXZ8riAsKwy1ohmGU98.roa (hash: yLiQ4BEaMhFQdskxNlE7aRv3rWf0cLts9Xjd3ePJwJ8=)
2: Be7hWobHeXIDcEV-DcvLVcoAOIA.roa (hash: BaLaak1kH9hW9zdiezS80huivnGVBMTLdsyXEFD6uzM=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: zNgYd0pVP+7O0fugAARQ5zmM27EV1MwhWyJqyLrm8O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:38:2a:2e:b3:89:d5:02:23:5d:0a:1a:cb:0a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Jun 7 19:00:40 2025 GMT
Not After : Jun 8 19:00:40 2025 GMT
Subject: CN=3c006354ade73685ad392d1ecad307d3a81049bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:17:e4:08:3f:6d:c3:62:e5:08:6e:3c:d9:
c0:58:73:f5:5f:8c:10:cf:b2:f3:13:dc:b1:c6:f0:
bc:d8:bd:62:f7:94:61:48:0a:19:5f:16:cb:b1:2b:
61:01:49:14:12:9e:82:78:c2:d7:41:92:eb:1f:c4:
4e:14:07:72:fe:cb:c9:1c:bf:b6:db:97:7f:f4:77:
46:2d:5d:7b:db:66:04:aa:2d:80:56:85:8c:53:0d:
62:0e:71:5b:25:5c:66:19:f0:0e:e0:d4:db:2d:79:
cb:51:0a:ee:66:1b:5a:eb:e5:91:d6:e8:72:60:9b:
01:b4:38:e7:64:bd:f0:f8:1a:b2:32:a4:6a:7e:dd:
30:1b:8c:06:7c:0b:d5:d2:83:b9:9c:bd:1b:a0:c4:
bc:28:73:d5:7b:29:a0:94:fd:93:ca:45:44:10:af:
ed:cb:eb:77:8d:ce:b1:58:52:47:09:3e:26:63:df:
82:c5:b7:b5:78:54:e7:f4:88:cb:9c:fa:92:e3:a2:
43:a0:c2:c8:9f:7a:04:a4:df:8d:77:bf:91:68:3c:
a7:f6:a1:80:39:ed:1f:85:63:d5:d9:e4:67:bf:05:
9e:b0:e4:cb:48:c0:c4:2d:e6:26:b0:92:17:fd:f5:
52:69:b4:7d:4c:f4:51:69:71:aa:46:57:14:34:66:
3c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:00:63:54:AD:E7:36:85:AD:39:2D:1E:CA:D3:07:D3:A8:10:49:BD
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0c:46:bf:fd:2f:e7:20:84:17:2b:54:3c:a3:30:0a:e7:81:
e2:7e:e5:bf:ea:78:9b:40:a8:c2:99:c2:bf:fa:73:bb:de:a4:
93:12:5b:ff:26:50:71:fe:d6:8d:20:db:10:d3:e2:52:32:2c:
62:56:aa:c0:cb:fc:f5:7b:3c:fd:ad:43:1d:02:dc:a6:29:7e:
8e:16:22:07:6e:4c:62:40:ce:80:d4:1d:0a:79:2f:10:3d:0b:
98:b1:47:e6:64:fc:93:86:fe:e6:8f:27:f2:00:5a:6e:86:ea:
06:33:1f:0f:67:c0:8d:e1:b8:5f:9e:eb:90:b4:59:9a:ca:07:
1f:fc:da:e6:c9:6c:1f:90:87:12:16:e2:2a:85:99:fe:50:06:
3f:b6:74:cf:3d:b8:cd:58:f0:5c:11:e5:32:54:1a:d5:91:46:
90:d7:a8:75:11:d3:2d:ea:1f:de:eb:24:ed:cd:92:09:30:3d:
5e:a2:fe:26:f3:9a:b0:e9:62:94:d7:b5:ff:06:21:15:dc:5c:
60:ef:06:7d:71:79:98:ab:a4:b3:39:a5:9f:7c:9e:b0:78:06:
d4:42:78:da:04:32:2a:6f:b4:aa:b7:c3:1b:da:3c:4c:e3:f7:
42:40:40:c8:a9:c3:5e:24:af:55:c4:59:94:4d:63:39:a6:93:
d8:57:9f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:36:27 2025 by rpki-client