Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
File: fFkLczxW4U66xp97RNS8lU6TcOM.mft (raw, json)
Hash identifier: amY+1q6NZE7AcF/k2oNkGNSVzvaxlo8XRlFjGyWdp34=
Subject key identifier: D8:FD:C6:5D:ED:B2:97:C2:04:3A:4E:79:9D:50:D4:46:CC:F6:6B:D5
Authority key identifier: 7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3
Certificate issuer: /CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
Certificate serial: 0197469ED1B675345E2B36816D5C7AE87E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
Manifest number: 1250
Signing time: Fri 06 Jun 2025 19:01:42 +0000
Manifest this update: Fri 06 Jun 2025 19:01:42 +0000
Manifest next update: Sat 07 Jun 2025 19:01:42 +0000
Files and hashes: 1: 9ZU6x_6PrSPT_uW6sJ6cuQkOSmo.roa (hash: bC7IXHx63H7lpbQ+lP0qMuIBLR6TNwS7YJHQvmLzCRc=)
2: fFkLczxW4U66xp97RNS8lU6TcOM.crl (hash: yt/yAJyY+c13xodzJZk94jsJOU1m7XZzQYaoTDxtZLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:d1:b6:75:34:5e:2b:36:81:6d:5c:7a:e8:7e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
Validity
Not Before: Jun 6 19:01:42 2025 GMT
Not After : Jun 7 19:01:42 2025 GMT
Subject: CN=d8fdc65dedb297c2043a4e799d50d446ccf66bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dc:92:20:05:39:7d:96:1f:45:92:0c:99:32:
66:85:5e:e7:a3:e4:77:fe:2d:70:97:d4:51:2a:e2:
3f:f8:1e:94:80:66:c2:6d:7c:34:7a:b1:ac:83:aa:
72:ce:48:24:d4:c5:cb:df:1a:c3:d0:68:9e:14:f9:
67:15:29:22:d6:5b:87:28:25:6a:a9:b9:9c:9a:24:
43:17:c1:66:02:9a:c2:bb:77:6c:94:ad:fc:3c:bb:
19:21:53:a3:fe:84:8b:37:af:82:49:80:d5:06:34:
5b:34:7f:e4:ca:35:a8:8f:40:e2:59:a0:1d:38:65:
e9:3b:b6:46:a4:07:79:85:eb:c9:f6:05:6e:cc:c3:
ba:d1:4e:fb:5a:3c:e1:60:4a:85:ef:be:cd:57:c6:
18:bf:c0:1f:b6:5d:63:42:ec:9a:2b:ed:97:f5:8a:
aa:b5:07:41:48:d3:71:27:64:99:ea:1f:ba:f7:75:
de:dc:68:33:fd:ea:43:a6:8e:43:54:be:d9:38:fb:
65:22:b9:b3:bc:2b:81:fe:44:b5:10:3c:73:c1:b8:
98:75:76:b1:24:59:bc:b3:9f:09:7e:56:19:68:13:
d7:1a:0a:82:5f:c3:7c:89:9d:75:ce:df:52:fe:d8:
a4:db:13:61:a5:66:4f:3c:06:86:21:e5:c9:2f:84:
9f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FD:C6:5D:ED:B2:97:C2:04:3A:4E:79:9D:50:D4:46:CC:F6:6B:D5
X509v3 Authority Key Identifier:
keyid:7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:87:90:ef:8c:37:89:56:5d:4a:ea:9b:60:03:58:4a:a7:07:
30:58:14:0b:04:c0:86:b8:41:d9:f1:15:f3:48:88:66:1e:16:
99:93:ce:a3:25:3d:97:4e:70:fe:32:e2:32:f3:36:a7:94:ef:
85:c8:de:b2:3a:af:46:59:cc:b9:4a:75:d5:41:3c:c7:e5:71:
69:76:b3:4b:3e:ca:84:1e:54:cd:06:48:29:8c:1c:b6:69:07:
44:00:32:45:0f:56:ee:b3:62:ca:51:60:0a:be:12:ac:f3:f2:
6c:e2:ef:4c:e6:03:95:d0:35:73:59:9e:94:61:96:27:27:bf:
66:eb:9f:10:da:e4:d8:26:94:d6:10:46:73:6e:dd:22:d0:1e:
a3:6b:e4:18:d7:f4:8b:cc:2c:e5:62:f8:b9:f7:68:90:ad:dd:
a3:97:25:10:d7:9a:41:6a:f0:e7:58:80:f9:b3:a2:4a:ae:d5:
b1:bb:7f:b3:8b:b7:af:7a:49:fd:a3:4e:96:82:d3:14:82:75:
8a:22:23:fa:a7:0d:8f:98:d4:82:2d:66:66:3f:45:73:32:6b:
17:30:b0:5d:5b:4c:8c:f8:69:bc:47:03:ef:65:e2:25:c5:81:
23:ac:14:d7:60:4f:73:49:ab:ff:12:39:7c:57:43:5a:48:59:
5c:3c:76:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:26 2025 by rpki-client