Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
File: _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft (raw, json)
Hash identifier: 3zEnh932bCyRSkRBmLK0G+vzm2b8MgNPONWD+LX1Ciw=
Subject key identifier: 99:60:E3:A4:EE:58:1E:33:45:72:18:4A:40:51:9B:B5:02:09:56:7A
Authority key identifier: FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
Certificate issuer: /CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Certificate serial: 0197B632E3BF79B65A1E2FA2D14B1FA159A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
Manifest number: 02D3
Signing time: Sat 28 Jun 2025 11:01:17 +0000
Manifest this update: Sat 28 Jun 2025 11:01:17 +0000
Manifest next update: Sun 29 Jun 2025 11:01:17 +0000
Files and hashes: 1: _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl (hash: GSX75CTbvmw1pc0HnSP8iPL1lcfFM2Qi9fO8YQWfhuo=)
2: pa5HePIwYLGZT4FlyIIuIImBBQ4.roa (hash: bgmy9hrxpCSfMFbbUzRFuhNbtBsDHQmEsmp/I6aYk+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:e3:bf:79:b6:5a:1e:2f:a2:d1:4b:1f:a1:59:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Validity
Not Before: Jun 28 11:01:17 2025 GMT
Not After : Jun 29 11:01:17 2025 GMT
Subject: CN=9960e3a4ee581e334572184a40519bb50209567a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:6b:79:cd:79:de:58:30:d3:5b:16:89:d7:
f8:fe:e2:44:81:5b:c3:09:9f:f3:a6:ef:7a:db:7f:
c7:ac:f4:79:70:98:44:32:7c:bf:9f:2e:a3:d4:aa:
fa:46:2e:1e:8a:a3:88:2e:b1:f9:82:e4:b4:c0:33:
c9:e6:f6:53:12:77:01:21:91:ee:51:ce:91:8b:8b:
ca:03:c0:fd:8c:49:92:3e:3f:e8:cb:55:e7:ed:3a:
37:f0:13:1c:2b:16:85:d7:e4:02:ea:31:d7:35:24:
90:43:81:c2:e8:da:b3:24:ae:9a:a2:9a:45:a2:75:
b5:15:9e:73:68:e3:f1:60:fa:90:e5:2b:04:62:f6:
73:a9:58:75:4d:39:be:fe:39:30:ae:36:fc:4e:e3:
53:64:1d:a0:10:50:f0:ee:9c:b8:16:f2:9a:0d:26:
47:84:4f:93:e0:fe:a5:27:0e:58:a7:f8:d4:53:ea:
43:47:01:bd:ae:23:0c:0d:23:69:04:2e:2f:a3:14:
ab:5a:ae:8f:4b:2f:e3:1f:39:42:88:28:ac:9d:70:
bf:d9:69:b1:a2:71:47:dd:8c:b9:39:46:43:4e:69:
84:43:cf:b4:6d:c0:62:f3:f1:0c:d4:0e:69:6e:c0:
73:58:5b:df:24:ce:33:b6:80:0b:12:84:02:ca:8d:
c3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:60:E3:A4:EE:58:1E:33:45:72:18:4A:40:51:9B:B5:02:09:56:7A
X509v3 Authority Key Identifier:
keyid:FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5a:03:f4:1a:d8:ba:c5:08:b5:da:7d:34:d2:fb:68:d9:b5:
5f:86:17:80:6e:97:0c:55:a2:11:a1:c3:2d:7c:18:ce:ed:93:
73:66:8c:5b:bd:88:bc:e8:19:62:86:25:01:7a:ed:f3:49:b6:
58:4d:79:ba:ea:f5:ac:94:83:c4:4f:d1:d7:8e:ab:2a:22:fe:
9f:56:9b:4d:0b:49:21:38:b7:ab:15:46:b0:68:e9:50:04:05:
ae:bb:82:3d:ae:f4:d8:4e:05:5d:f2:6c:da:3c:a2:72:9a:b5:
4e:b5:4e:bf:47:73:63:ea:aa:ba:89:a8:46:9d:3b:4d:fd:15:
8a:07:0c:0d:d0:86:c2:da:ff:69:0b:ed:a6:af:fc:1a:00:6f:
d1:6e:74:e3:4c:ef:4e:44:63:17:6a:7e:94:6b:11:77:96:b3:
df:fd:8a:17:90:11:d2:84:9f:a9:7c:fc:3d:81:75:20:46:5e:
52:e0:b7:01:3e:57:65:b9:96:83:01:2c:6a:f8:ce:57:89:5e:
86:6b:cd:1e:6c:b0:94:87:77:5a:eb:ab:db:83:49:c6:73:71:
1b:39:56:bc:d6:c3:65:30:9b:dc:34:b3:e4:96:ad:2a:fb:09:
4e:05:80:c8:2c:f2:2f:3e:0c:4f:0b:3e:37:f7:52:a3:d3:16:
81:a7:73:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:08:39 2025 by rpki-client