Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File: fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier: w3GCZx58eNBD/S1182FUvWJt2kjRYKuejhoVU56wxQA=
Subject key identifier: 35:52:CF:BF:BC:17:B8:E6:19:B4:7C:A6:4E:7C:FD:07:D7:52:E6:60
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer: /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial: 0197C537DEC3DD4B83E8D08B4AB90B560C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number: 014D
Signing time: Tue 01 Jul 2025 09:01:02 +0000
Manifest this update: Tue 01 Jul 2025 09:01:02 +0000
Manifest next update: Wed 02 Jul 2025 09:01:02 +0000
Files and hashes: 1: BJ7sjp5ibHEtMZwGH8QOSgEVeks.roa (hash: vdUAgWFb0/ninRNnqapYY+qZwNPE4UbocwPx101zVCg=)
2: JyAstjJnRnfKpE7boFngTUQKsSI.roa (hash: QeCPc7sTPqsvq1vdnmx1h5/hFMLBuSHfMUEgszAKgAc=)
3: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: WAIG8GkfliUTa/A+DeDQ+yHMaxfgqQTcc3cbZNvu05c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:37:de:c3:dd:4b:83:e8:d0:8b:4a:b9:0b:56:0c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Validity
Not Before: Jul 1 09:01:02 2025 GMT
Not After : Jul 2 09:01:02 2025 GMT
Subject: CN=3552cfbfbc17b8e619b47ca64e7cfd07d752e660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:05:db:9e:64:d7:75:df:cf:9c:66:c8:f5:95:
5e:79:3c:bc:6b:a2:46:4b:ef:78:9e:88:86:76:63:
08:09:95:1f:92:41:7c:7d:3d:67:2b:7c:a1:f3:11:
71:dc:03:e4:91:a3:d3:18:cd:d7:56:b5:19:41:1b:
45:bd:6b:f6:35:aa:1a:b5:18:ff:8f:37:d2:cb:fc:
cd:fb:58:35:9a:2b:eb:6c:c1:f4:f5:25:8b:70:b8:
f7:7d:ca:82:4e:2e:62:d7:4b:2b:19:7d:7e:83:5f:
2d:a2:9e:41:da:75:14:b0:eb:45:c4:60:af:02:56:
a9:79:8a:60:d3:b3:f9:a8:a5:77:ed:85:ae:3b:06:
ee:1e:4c:42:98:ed:4e:f7:47:ba:b4:0e:17:8e:e5:
5d:60:c8:a3:d8:8b:c2:80:d0:f6:c4:5f:ad:67:a1:
4c:5c:ac:b2:2e:19:8c:d8:c8:03:a6:eb:4d:13:0e:
64:da:4b:bc:46:4e:8a:90:7f:43:8b:45:05:50:bd:
59:5b:8e:13:c8:06:a9:13:33:25:e7:9d:62:09:11:
9a:10:73:f5:25:2b:be:9c:e2:e9:86:d8:a5:0e:41:
4e:01:e0:51:cb:dc:62:20:04:75:ac:c5:6d:91:b4:
1b:20:4b:05:14:0a:64:37:fe:f1:c3:28:52:b5:65:
5f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:52:CF:BF:BC:17:B8:E6:19:B4:7C:A6:4E:7C:FD:07:D7:52:E6:60
X509v3 Authority Key Identifier:
keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4b:13:f1:6b:9e:61:ba:a3:ac:84:a9:2f:6b:72:1e:73:20:
97:ef:34:91:d0:1e:7a:4b:ad:b4:1b:ea:9a:3c:fa:aa:68:52:
00:00:82:a8:88:0c:be:bc:a7:25:19:0c:bb:73:93:68:66:0d:
d2:d5:46:4b:e3:a2:5c:61:6b:ae:8a:b2:4d:02:9c:ea:c3:77:
64:90:05:0b:cd:28:7e:2a:18:4f:8f:d8:6f:1c:e6:ee:08:67:
50:08:91:c3:fc:3c:ed:80:f9:99:47:a8:82:0c:4a:c4:ca:87:
9e:57:33:3c:d3:ea:60:1e:47:de:91:44:0f:a3:6e:be:44:72:
9e:91:19:6b:c2:59:b4:12:e0:15:c1:0c:e0:c9:0e:53:6e:b6:
e9:32:f1:4f:5a:89:44:ce:c0:ac:e2:ea:de:13:e1:a3:28:da:
33:62:0e:21:b5:b6:fd:58:7a:15:06:e4:1f:1e:c6:fc:66:dd:
32:1a:96:aa:38:ea:b1:87:c0:32:b1:19:33:d6:6c:e0:bd:1e:
3a:8d:d6:31:5e:11:d7:4d:c2:a1:bb:03:08:6e:fc:59:ee:1a:
05:b3:03:d8:07:1a:06:6b:7e:e1:de:20:01:f2:02:42:a9:43:
7a:08:9c:78:bb:cb:f9:b5:69:45:0d:27:cf:b3:4a:cc:4b:ee:
eb:55:7c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:24:55 2025 by rpki-client