
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
File: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft (raw, json)
Hash identifier: /XXEbmiqWhTChMb49h3bp6aKR0gGEx9MuhBHCapUtss=
Subject key identifier: 12:4F:26:B7:8F:D5:DD:DB:61:75:01:5D:5F:EB:88:7F:EB:BA:BB:36
Authority key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
Certificate issuer: /CN=1683805319d8485584dc39cf5381583fb6431d7a
Certificate serial: 0197B70EBFE5E70AA21EC9E8E0AFCB6A14C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
Manifest number: 078E
Signing time: Sat 28 Jun 2025 15:01:26 +0000
Manifest this update: Sat 28 Jun 2025 15:01:26 +0000
Manifest next update: Sun 29 Jun 2025 15:01:26 +0000
Files and hashes: 1: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl (hash: 8+jmVfvQPw5Qpo5PUYWGz8tLymIbGbZO8JTZgjicNSQ=)
2: TF7nAj58d6ltPhTUNcDwpZ4Ncic.roa (hash: bLmXSoYJumVpK9YJA9L+Jf2+aVCyzGG5sj4lmj+Mw7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:bf:e5:e7:0a:a2:1e:c9:e8:e0:af:cb:6a:14:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1683805319d8485584dc39cf5381583fb6431d7a
Validity
Not Before: Jun 28 15:01:26 2025 GMT
Not After : Jun 29 15:01:26 2025 GMT
Subject: CN=124f26b78fd5dddb6175015d5feb887febbabb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:63:2c:83:76:0e:06:52:68:67:62:ca:88:5d:
6e:ac:5b:35:fc:aa:c6:b9:52:da:02:b6:2d:95:08:
34:72:e7:61:ad:0d:46:3e:0f:ee:b2:82:88:99:55:
18:96:38:48:37:6c:8b:b1:35:65:64:76:85:e5:f7:
ae:e9:aa:29:bc:2b:11:84:18:af:ff:28:a4:d8:8f:
03:d9:52:83:6b:4c:e1:89:cd:a1:1f:27:f8:d6:97:
e9:b5:14:ca:a1:03:f9:b4:0b:16:e0:e7:ad:c6:8a:
89:d3:29:5c:43:ee:ed:4b:a0:16:a2:24:08:b0:dd:
73:4b:db:19:8f:dc:c1:e2:b1:7c:75:7d:f9:78:25:
11:19:c3:85:ad:19:e6:e1:4d:2c:09:73:3c:d9:27:
2b:20:89:7f:37:6b:a0:5f:6e:5c:c6:05:74:82:7a:
fa:3c:a4:74:fa:51:40:f9:f4:56:8e:81:d4:c0:ba:
d1:5b:01:aa:90:f8:03:7c:bf:b6:79:c8:c6:75:ac:
84:03:55:06:60:49:7a:6d:ad:26:07:a7:62:44:c5:
00:aa:82:e3:d1:0e:41:23:e2:44:2d:5c:35:32:c0:
ab:f6:17:ca:f1:7d:12:29:46:fc:d1:e6:14:ce:b1:
aa:96:41:38:42:49:58:e1:1d:a5:e0:90:14:0f:a8:
75:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4F:26:B7:8F:D5:DD:DB:61:75:01:5D:5F:EB:88:7F:EB:BA:BB:36
X509v3 Authority Key Identifier:
keyid:16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1c:f7:71:3d:de:fb:79:da:ae:4a:0f:7c:bb:fd:04:e4:df:
aa:f9:bb:11:3a:af:5f:ef:95:64:a3:54:33:03:2f:e2:ff:ef:
42:58:7a:e4:51:96:e4:5c:2a:09:ef:23:ba:1d:96:88:01:4f:
56:20:0a:f5:49:06:0b:b3:76:37:ea:cb:b7:d4:98:bb:35:d0:
76:94:7d:f0:e9:3d:d8:42:35:69:b0:6d:61:04:a2:38:5c:af:
c9:41:b4:b8:56:18:4a:1b:1e:7c:04:0d:a8:ec:d6:22:fe:36:
d7:fd:5a:de:5c:1b:f7:1e:88:c3:37:fd:b6:65:d6:97:5b:81:
09:8b:e3:a0:e1:f6:ba:43:61:1c:00:16:0d:c6:de:24:eb:20:
2c:5d:2b:ab:64:34:81:04:c4:de:54:85:38:fa:a9:67:7f:a5:
86:2b:73:5c:68:19:3a:49:0a:3a:2e:56:b8:3f:52:92:b7:0a:
d3:02:14:7a:05:bc:33:f9:9a:4f:09:04:f4:81:eb:2e:6f:99:
8b:84:d8:17:8b:b6:7b:06:9b:c8:9f:36:03:1b:27:5a:bf:d1:
00:8e:00:ff:c4:21:a9:6d:d0:d8:fc:7f:db:35:bc:4f:5a:42:
93:c6:2c:b0:ff:d8:c0:f8:03:2c:79:7b:17:da:30:4b:fa:69:
a0:87:de:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:49 2025 by rpki-client