Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
File: fIbxOptyHNGGn7uXTuU9kAIuqiw.mft (raw, json)
Hash identifier: 8jqrcQrquRZgd8WradKh7ShCtsOoe3yOFlPgoC5DvbI=
Subject key identifier: E9:21:0E:E2:AA:A3:FA:49:E5:E5:6C:28:A5:1E:D2:8A:BA:9D:72:17
Authority key identifier: 7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
Certificate issuer: /CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Certificate serial: 0197CE043E4D6E4EC6E41194282E7DD5E5C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
Manifest number: 064D
Signing time: Thu 03 Jul 2025 02:01:13 +0000
Manifest this update: Thu 03 Jul 2025 02:01:13 +0000
Manifest next update: Fri 04 Jul 2025 02:01:13 +0000
Files and hashes: 1: 9HC-dVjnSoiBjTI-wFW5Aqlq_oY.roa (hash: mG2Ma2dDqG+dXSsvT9OJk25xVpUl5+N3IsrwQpPJXsQ=)
2: DsE5_TUYYo0BXf2JDy40SB8tAVY.roa (hash: MUCKDFIZgUo4hnT7lKbmN/TrcbbCDZIEWfPYHOszsj4=)
3: fIbxOptyHNGGn7uXTuU9kAIuqiw.crl (hash: JoOYW/PxI5EPDcaaQ+mT3I0S3iQnbLUg9CPIYxO9JTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:04:3e:4d:6e:4e:c6:e4:11:94:28:2e:7d:d5:e5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Validity
Not Before: Jul 3 02:01:13 2025 GMT
Not After : Jul 4 02:01:13 2025 GMT
Subject: CN=e9210ee2aaa3fa49e5e56c28a51ed28aba9d7217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:65:01:77:b2:b7:8b:ff:8f:96:6f:93:c2:d7:
dc:12:24:37:85:c3:dc:13:ae:59:12:28:74:1d:ca:
22:95:b5:3c:f9:92:d8:b6:1d:fd:2d:ef:aa:d3:c8:
14:98:d4:8d:21:b5:77:53:36:ff:3b:55:7c:f5:60:
0c:f2:bb:f8:04:a0:42:36:e2:c1:ce:69:ff:3b:8d:
b8:64:01:fa:0d:ae:34:57:06:53:8a:42:b7:46:c5:
e7:58:b1:c7:3a:54:80:2a:f0:bf:65:d3:bd:17:2a:
a5:38:49:90:55:9e:96:2a:1d:ac:c6:3f:04:b8:5f:
d2:76:0f:26:60:3b:64:05:58:9e:96:33:ca:64:83:
cc:db:b2:f7:44:39:94:ef:33:25:92:90:44:d1:7b:
cb:82:0c:79:f1:88:01:c8:38:00:49:d0:f0:74:db:
7c:26:c5:d1:39:8a:fd:3c:ca:f4:b2:76:78:9a:a4:
4a:1f:59:e4:db:34:40:52:8a:82:79:99:2f:1c:49:
15:41:f3:8d:54:2b:e8:a4:fe:97:8f:cb:e8:e2:89:
01:1b:66:14:bb:b4:83:ff:51:1c:99:df:9d:9a:71:
05:ee:c6:d1:e5:2a:3b:d3:92:92:1c:af:80:34:08:
ed:f2:25:db:03:b6:6a:06:06:3a:c1:40:b4:f9:84:
2e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:21:0E:E2:AA:A3:FA:49:E5:E5:6C:28:A5:1E:D2:8A:BA:9D:72:17
X509v3 Authority Key Identifier:
keyid:7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fa:48:73:b4:54:c1:29:5a:73:44:83:13:56:87:68:ee:f1:
ec:53:c9:93:1f:d7:29:c4:56:19:1c:6d:87:17:3f:5b:11:f8:
f2:0e:fd:d6:d3:6a:1b:48:dd:a3:47:50:32:62:56:9d:42:61:
30:12:cf:8c:28:b0:76:d6:88:f3:eb:5d:f1:b1:87:04:93:a5:
f6:9d:cb:8c:33:82:ce:66:9c:09:e8:75:7b:ae:09:5f:08:9a:
23:3f:b1:c5:73:c4:ba:d9:ac:e6:08:33:4c:ef:fe:73:92:6d:
86:ed:43:d9:8f:fb:1b:ad:66:c6:9d:89:a7:52:61:0d:f8:dc:
ce:e8:5f:9d:9d:9c:ca:a3:81:c9:fb:a3:04:75:63:93:17:16:
73:ee:a2:d4:10:7c:7a:91:9b:21:22:4c:27:7d:33:de:9e:c6:
85:36:e6:ed:c1:30:f8:07:fb:68:9b:1f:e5:2b:fc:0c:8f:27:
56:30:a3:24:86:76:6c:2e:a1:55:63:94:b1:bc:61:04:9c:55:
f6:45:b4:c0:50:37:10:4d:79:7a:61:fb:55:c6:6e:fc:3f:c6:
6c:ee:7a:f6:1f:e4:9d:23:4f:11:a1:72:22:1a:2b:d5:f2:7d:
b1:ee:22:c8:2b:b7:61:ca:ef:15:e5:24:87:3f:fd:2b:20:2a:
f8:34:73:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:05:29 2025 by rpki-client