Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
File: fF39tuHZPAkoI96WvdfIi7w2odE.mft (raw, json)
Hash identifier: 4SCHwt3rKhQDXJT9ZFOV6WuXcQkrffiRAQRqWwTfc2g=
Subject key identifier: 1C:44:27:7D:61:8E:86:AC:13:96:25:79:CF:EA:A6:14:12:5C:3F:BB
Authority key identifier: 7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
Certificate issuer: /CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Certificate serial: 01974DB2C19231F8C6173D83D197B2C2CC0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
Manifest number: 1045
Signing time: Sun 08 Jun 2025 04:00:49 +0000
Manifest this update: Sun 08 Jun 2025 04:00:49 +0000
Manifest next update: Mon 09 Jun 2025 04:00:49 +0000
Files and hashes: 1: RZuMdxzgtqeut8ZsWIjCvxcq_HU.roa (hash: k8PO+wAyawu0IdR6r++/H7W0FSIFO01M/1RM3odCP4I=)
2: fF39tuHZPAkoI96WvdfIi7w2odE.crl (hash: kAUWsv5I0kTNQCbzMyYjOOdAOUr6RAVjVgmvBWEuIwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:c1:92:31:f8:c6:17:3d:83:d1:97:b2:c2:cc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Validity
Not Before: Jun 8 04:00:49 2025 GMT
Not After : Jun 9 04:00:49 2025 GMT
Subject: CN=1c44277d618e86ac13962579cfeaa614125c3fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:8e:04:d9:fb:83:82:8d:6d:81:45:8f:18:
5d:0a:2e:22:c5:d4:1b:5d:90:36:41:4b:db:5d:b4:
fa:a4:44:93:18:7e:f2:8c:52:aa:c4:86:93:2b:aa:
e9:9d:d0:6e:6f:cf:99:c8:1f:44:be:a4:af:e6:63:
b9:07:61:77:f5:93:73:37:68:4b:72:15:9a:eb:9f:
62:f6:6f:be:1a:db:52:f3:e5:82:59:17:f3:d3:cd:
29:13:19:3d:c1:3c:bb:6d:d3:c3:b6:7a:45:9e:06:
ee:f9:cc:26:a2:45:39:bd:13:a0:92:03:60:25:a0:
35:e4:0d:d0:c3:9b:ed:39:7b:dd:7c:02:f1:36:5f:
95:17:7b:c9:f9:43:f8:51:d0:39:08:fd:a9:63:de:
47:a5:e3:79:f6:3a:b4:4c:67:35:c5:0c:9c:32:60:
bb:00:a5:ed:9f:fd:da:2c:8f:32:1d:d4:d5:c2:f2:
45:4f:98:3b:6c:5f:c7:bb:11:69:81:45:f9:8c:ae:
fe:85:c5:93:aa:e6:37:83:2e:2d:73:7c:7e:c1:7c:
84:e9:d3:6c:9a:93:e6:c3:bd:3f:11:1a:73:12:9b:
ef:19:82:8a:5d:86:5b:e8:5d:f2:a1:b0:9b:5f:86:
49:10:a8:57:df:b8:45:f4:7f:1a:71:27:11:e9:3b:
f1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:44:27:7D:61:8E:86:AC:13:96:25:79:CF:EA:A6:14:12:5C:3F:BB
X509v3 Authority Key Identifier:
keyid:7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b5:c5:b4:75:45:9d:7f:58:19:cd:0b:08:d3:87:87:f6:d0:
35:1c:b5:6c:6b:29:f2:55:5f:cc:33:09:ad:92:1c:80:b0:41:
5e:34:a3:3d:8d:85:45:65:45:b8:a6:4c:db:64:e6:8f:0d:f4:
b6:e4:94:5a:3c:6d:75:3c:8e:a5:ce:8d:97:09:9e:90:7c:df:
10:f2:f4:ae:30:ff:e8:2a:6b:7e:7b:16:ca:3a:e2:60:58:e2:
57:5c:8d:0e:87:dd:8d:75:06:c1:69:ef:1a:13:af:e8:ec:e3:
2a:89:53:a1:89:b3:ed:3f:19:df:32:0b:9f:f6:89:e7:c1:65:
7a:79:db:e3:12:87:c2:d8:ad:60:7c:cd:1f:85:88:81:19:f6:
e6:6d:a5:ad:fa:c7:96:4a:86:8c:21:94:8c:a4:8c:c9:ab:22:
40:d7:7d:f5:30:e6:45:aa:43:9b:11:12:03:3c:fc:c5:88:a7:
41:c2:b4:a1:6d:28:17:cf:a9:1f:cf:78:bb:9e:81:c0:fb:2d:
44:c5:48:85:4c:56:5d:c4:2d:01:cd:96:8d:c2:f5:fd:d6:3b:
2b:e9:4d:9d:6d:14:e5:2e:6a:8d:5b:39:25:2c:8d:47:43:da:
ac:1e:f5:19:96:19:a2:49:e2:98:bf:7f:d6:c0:5f:63:d7:ac:
f3:d9:c0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:38:08 2025 by rpki-client