Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
File: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft (raw, json)
Hash identifier: VlxBOsm7UvP6iODWA8PSlkKTvVLXuJfl3zAJd1o7Ih8=
Subject key identifier: 81:94:91:BE:24:5D:84:FD:83:3C:FB:A2:86:09:B5:31:79:1F:FC:51
Authority key identifier: 16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
Certificate issuer: /CN=166fed8bb6449b1cec6b665e930718b858a2b694
Certificate serial: 0197B74569949930FC72CC834DA8FDA13C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
Manifest number: 0BF2
Signing time: Sat 28 Jun 2025 16:01:08 +0000
Manifest this update: Sat 28 Jun 2025 16:01:08 +0000
Manifest next update: Sun 29 Jun 2025 16:01:08 +0000
Files and hashes: 1: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl (hash: fkXdiJmxChS8jNKYFKrCXhCGzVZMF0eJ1myaO8234C8=)
2: krakPppfz7flLx069ZARtir4dzE.roa (hash: rc01bvPv/5+vfBCkfObVuaLV/O1M46ZYkYO5PLG/3iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:69:94:99:30:fc:72:cc:83:4d:a8:fd:a1:3c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166fed8bb6449b1cec6b665e930718b858a2b694
Validity
Not Before: Jun 28 16:01:08 2025 GMT
Not After : Jun 29 16:01:08 2025 GMT
Subject: CN=819491be245d84fd833cfba28609b531791ffc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ed:e4:d6:78:a5:2a:a3:72:86:db:d9:cb:5c:
6e:9e:87:40:d4:53:25:e1:20:99:6a:ab:a3:07:93:
41:b5:dd:a4:d1:df:20:62:d9:35:98:42:44:78:94:
37:1a:fd:a5:49:56:11:d5:35:b1:0d:af:99:ec:fc:
4e:13:c7:6a:3e:48:1e:77:0c:f3:17:d2:a2:6c:35:
58:cb:65:45:a7:1b:6d:0d:4e:38:5e:64:96:1d:a8:
0d:a9:18:13:5d:57:35:12:55:d8:29:5c:6d:d4:45:
e9:c6:a6:92:f4:55:ce:ca:be:61:d1:ae:e7:11:79:
0f:04:c3:f3:5d:82:5f:10:ae:0d:5d:14:2f:0f:81:
fd:4f:f3:8d:52:c8:be:9a:52:a8:70:1f:34:5b:85:
b9:17:54:79:66:c3:2e:f9:52:c0:9b:15:d4:ac:9d:
71:bd:d3:f8:41:61:e6:87:ed:fd:48:a4:f1:db:56:
6d:b3:cc:01:60:39:7b:09:77:02:b6:5b:79:1e:b5:
b5:5f:a5:30:ca:39:f1:5d:03:62:7b:fd:cc:67:a9:
68:f6:12:9e:0e:c5:fb:18:78:08:d3:9e:ab:a8:b4:
13:0d:10:bc:ba:70:da:de:fe:ce:a4:6b:55:e6:b4:
0b:c8:c0:1d:b5:68:b5:98:4b:86:a5:c8:ac:1b:52:
c7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:94:91:BE:24:5D:84:FD:83:3C:FB:A2:86:09:B5:31:79:1F:FC:51
X509v3 Authority Key Identifier:
keyid:16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8c:9e:dd:78:46:42:a5:d5:c2:e9:c3:40:e3:f5:cf:63:e5:
41:cb:8f:67:30:33:66:cf:ce:d0:62:be:83:f9:7b:e7:4c:45:
69:24:00:12:c2:fb:46:0e:58:24:80:d7:72:8c:87:16:3f:12:
7b:c5:80:92:8a:a6:bf:28:3c:91:c5:33:cc:d6:04:52:28:ec:
ec:d5:35:ae:50:b2:a5:c5:94:e2:40:f8:bd:e9:dc:b8:a7:32:
d0:72:e8:b7:e1:94:6a:95:b9:eb:b7:85:66:a2:a5:41:d2:af:
c5:68:78:e1:83:59:24:23:9f:81:e3:2f:bb:d9:60:32:41:73:
aa:74:59:f6:e9:c7:4c:7f:c6:42:45:b9:49:71:01:ac:48:03:
46:07:57:5f:36:7b:c8:0e:5c:46:2c:05:f2:bf:5f:23:28:20:
a7:51:7c:35:07:cf:8e:9f:43:94:79:bb:b7:76:54:f5:cb:f6:
36:65:24:c5:d1:38:6f:d0:de:7d:c7:cd:98:eb:2a:00:1d:a1:
d3:4f:08:11:8e:73:76:7d:f8:05:8f:91:78:b0:54:1c:6c:5c:
86:cc:32:41:61:d3:a0:2f:ec:48:50:3e:d2:1b:30:d9:ef:fe:
08:25:52:67:ff:4b:fe:da:10:4b:79:65:8e:c6:aa:f6:22:36:
a5:8d:8a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:27 2025 by rpki-client