Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
File: fciRFoK8XKcc7OHv46wTW_21ndY.mft (raw, json)
Hash identifier: gBsjn/WrYsEgtzn56wpUXKbzOfYIS5llzwKezutAmPU=
Subject key identifier: 02:36:24:4A:9E:DF:70:D9:F3:4C:11:28:40:14:1F:4E:29:21:BA:8F
Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
Certificate issuer: /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Certificate serial: 0197C2A4EA8774440C6481111DBC5610771E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
Manifest number: 10BF
Signing time: Mon 30 Jun 2025 21:01:17 +0000
Manifest this update: Mon 30 Jun 2025 21:01:17 +0000
Manifest next update: Tue 01 Jul 2025 21:01:17 +0000
Files and hashes: 1: 1C7VKc2u55exTPgbJjVVBkVOjI0.roa (hash: KRmVo74m9sWKSF23ay7PgVm1woGp8Zi9hAMJIltDmzQ=)
2: 89VDXzZ_2U543z47EHsX9vI7wvM.roa (hash: n04qxgmbLydbIkFMhKcNu86o1ZcGuCf69Uot3/FJo18=)
3: NFCSs01oWicTZXFure0N-PnCCWU.roa (hash: IkEQYNHCh8tUXj0EFqiGDLC3qEKoo3Zp0TKOGNH6Vmc=)
4: StBmHSx-w-_okioInyoONk2sjLg.roa (hash: knizJ5Gckrod+kfPvKDkALhiu4VWJTPtSPrk3JWpWfY=)
5: fciRFoK8XKcc7OHv46wTW_21ndY.crl (hash: gfjHM3dQ1B5zbzzjO/0BNy/Rdaz4BECStT1Wmttb7XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:a4:ea:87:74:44:0c:64:81:11:1d:bc:56:10:77:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Validity
Not Before: Jun 30 21:01:17 2025 GMT
Not After : Jul 1 21:01:17 2025 GMT
Subject: CN=0236244a9edf70d9f34c112840141f4e2921ba8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:83:6c:ad:19:07:29:a6:68:98:fc:f8:ae:a1:
c9:61:b4:63:86:3c:88:c6:a8:b9:79:5a:dd:68:ac:
82:76:5b:fe:25:e8:f2:ea:ee:1b:47:f8:0b:9f:24:
fb:c0:e1:df:ce:9f:e2:84:c4:bd:12:e4:a9:20:29:
f7:79:c7:ea:41:88:e2:63:04:d7:57:d1:03:29:fd:
ca:30:2b:6d:e2:a5:81:1a:90:d0:27:aa:9b:f3:70:
85:b5:85:a8:58:84:96:4e:a1:4f:c4:f9:66:87:9d:
d3:82:1e:f3:72:4f:00:38:22:ac:00:64:b1:ad:af:
2f:02:32:5a:7e:9d:dd:e1:99:2c:c2:11:1f:74:a2:
db:3b:93:65:42:02:7d:84:b2:b9:97:46:15:a8:0c:
f1:69:6a:38:cb:64:2d:02:30:0e:a5:7a:43:80:6a:
c5:dd:ab:b0:62:87:4a:49:a2:98:7a:a2:1b:87:b9:
f8:9b:12:74:0a:c4:94:54:47:dd:be:59:40:10:18:
b0:80:3d:0e:a6:54:f1:af:7d:3a:35:ff:2e:df:82:
bf:8f:3d:90:4a:33:f5:99:fd:65:b9:36:59:7b:9c:
d5:8f:ab:a0:59:6f:38:8b:d1:95:2e:f7:06:e7:fb:
c1:c8:c0:40:91:ea:d5:e7:de:21:1b:29:fe:f6:78:
82:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:36:24:4A:9E:DF:70:D9:F3:4C:11:28:40:14:1F:4E:29:21:BA:8F
X509v3 Authority Key Identifier:
keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fd:10:be:ca:ee:f5:0f:be:5c:ce:9b:e6:a8:85:14:5e:66:
ea:96:38:31:37:2a:2f:cd:68:c0:4b:d2:e0:e9:4e:c5:6d:0b:
73:5d:6e:c9:72:f5:da:96:9f:18:e7:53:8b:5b:f9:47:2f:5c:
b0:a3:d1:a6:14:23:14:9e:e6:f9:78:d3:7e:5c:c1:3c:d9:ff:
c3:83:a0:5b:05:52:0c:05:61:62:fb:39:0e:21:6c:80:4d:d2:
a6:be:84:cf:73:83:1e:fb:2d:27:d6:e7:32:d0:9b:d9:12:c9:
f0:42:f9:62:8b:18:6e:71:c5:9b:a1:21:2a:7e:12:7b:1a:00:
40:0a:f1:35:03:16:23:9e:d7:3e:77:25:9c:eb:12:cd:31:a2:
b4:85:6e:6f:84:dc:03:74:a8:f5:69:68:6c:cd:dd:47:c8:43:
49:b7:90:74:9b:fa:2c:75:6d:3d:22:10:e9:8e:59:57:2d:c8:
1d:b3:28:fd:de:aa:e0:7b:9d:60:ed:66:ef:a3:6e:5a:f4:35:
d1:4b:cc:c2:64:3d:0d:da:5b:02:8d:b6:39:3e:06:ca:70:6c:
9d:2a:2b:62:32:82:fa:72:ee:46:2c:23:46:62:0f:50:0c:e6:
a8:d9:09:10:7c:3b:c2:63:c4:91:5f:1e:a3:ff:9d:a7:91:5f:
b7:90:43:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:49:06 2025 by rpki-client