Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
File: _43V_kF56L2ihTJWGRn20Hh3xj0.mft (raw, json)
Hash identifier: 9aUv5vTawPMeBJ5kuLCaz9cpvEVy5DN9b+8B7DvnlCY=
Subject key identifier: 3F:C9:60:BF:2B:3B:19:54:4F:C6:FA:41:E5:67:63:29:75:06:B1:49
Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
Certificate issuer: /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Certificate serial: 0197B632CC3903CAD840AC6EF1E761EE1C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
Manifest number: 066F
Signing time: Sat 28 Jun 2025 11:01:11 +0000
Manifest this update: Sat 28 Jun 2025 11:01:11 +0000
Manifest next update: Sun 29 Jun 2025 11:01:11 +0000
Files and hashes: 1: K6Fu_XiBHvDsYhtG_--3fuPZg48.roa (hash: RNhrx5f19YH8DzgdDWPTLam4LAtgoJZsbS8JdFM0WN8=)
2: Ye2lhVqLlVViESIa1X_75ZD_K3Y.roa (hash: GkZd+LIfPke0Hk41OCtwwY1KwALgbjtXK8ppjf/on0I=)
3: ZTj2ZwJbmSTqqGkaHNeSOzaRucE.roa (hash: 5l3ZvQv6nxBKcaHiVSLVWyVMDLkrqNymK7dZBTsMLbU=)
4: _43V_kF56L2ihTJWGRn20Hh3xj0.crl (hash: k03tUQYi2GapklvPXh1TQ5A041cHzUyffJv3oI3diSs=)
5: _Kr9E5MKxyuntA5czBSmI-XiWLk.roa (hash: yKCPcajH9aVqjBH/Z/+caEOZWjeFz70pUynCf4xQzl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:cc:39:03:ca:d8:40:ac:6e:f1:e7:61:ee:1c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Validity
Not Before: Jun 28 11:01:11 2025 GMT
Not After : Jun 29 11:01:11 2025 GMT
Subject: CN=3fc960bf2b3b19544fc6fa41e56763297506b149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:27:62:1c:b1:ac:24:03:99:73:5a:a6:f5:
a6:f6:e3:9f:78:cb:5c:eb:08:65:a0:3c:a4:ef:9f:
75:3c:6d:2d:66:5f:17:60:6a:8a:3c:43:81:ea:71:
00:b9:e4:f5:30:0e:0b:40:a8:b4:da:f9:fe:b6:c5:
b9:4f:94:e7:50:c3:91:41:62:f0:2b:c9:f1:42:46:
a7:d4:60:e3:0e:ec:0d:6c:93:51:07:60:2e:10:13:
6a:01:ad:17:33:c6:9c:64:e6:36:a9:63:02:cc:79:
a5:7d:85:4d:86:b2:c0:0a:94:6e:a0:5f:04:57:c1:
9b:23:e1:cf:50:3a:52:20:8f:27:99:29:96:44:67:
52:26:6f:70:2c:a8:38:6b:19:36:77:bd:67:c4:31:
c4:ef:db:48:11:ae:0f:62:b2:32:de:5c:8f:9d:85:
bc:ff:b3:07:f1:73:e0:5e:c3:53:b7:56:20:ea:3c:
25:fc:b7:55:9f:21:33:6f:b7:3d:16:90:20:ed:8b:
ba:ae:51:72:29:16:8d:3f:34:3b:f6:31:74:ff:4e:
53:e2:15:28:4f:96:34:56:d9:05:39:3f:3d:ba:88:
fb:ba:78:ca:14:ce:3d:6b:c0:ca:da:bd:ff:00:d1:
94:0a:28:82:03:a8:a8:f4:57:a4:77:6f:1c:6b:ab:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C9:60:BF:2B:3B:19:54:4F:C6:FA:41:E5:67:63:29:75:06:B1:49
X509v3 Authority Key Identifier:
keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7f:16:14:a4:93:e3:dc:80:c3:ec:62:6e:24:a5:46:69:85:
6a:68:65:d6:b1:bc:aa:92:a2:03:ed:bd:31:b9:20:d5:d5:7a:
89:92:e4:19:6e:d1:b7:41:30:00:a6:14:6b:53:1b:f2:ab:4c:
44:df:9e:03:33:8b:88:ef:d2:6f:36:51:02:3b:48:60:8f:d5:
49:29:2a:10:14:18:de:34:9b:bd:de:1c:09:95:94:89:65:97:
34:b8:b1:18:8a:7a:b0:5a:61:19:65:7d:13:03:c6:13:9d:0e:
9d:94:f5:17:d4:19:b3:9f:14:52:cd:99:83:f8:3a:4f:5e:e0:
3e:64:b6:90:ca:64:17:dc:11:31:53:f9:1d:7c:d5:18:da:af:
af:68:9a:9e:a9:84:70:24:bc:e3:46:e4:2f:2b:c9:6d:c7:da:
ef:ad:6a:8c:25:bc:2f:ab:35:c5:49:4f:f2:da:ae:f4:15:50:
b7:21:e0:74:fc:8f:b0:3b:4c:b8:5e:cb:01:ff:4c:31:15:1b:
08:3b:58:ab:53:51:1e:05:fb:8d:ec:74:8f:fe:56:c2:30:c3:
4b:25:ab:ed:d2:f6:12:58:6c:49:6b:54:d9:cc:35:5c:f4:0d:
61:ad:d5:65:97:42:fb:32:fc:7c:5a:6c:7f:c0:a4:cc:9f:2b:
92:46:4c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:27 2025 by rpki-client