Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
File: Fm9ncLp34DLn59HXMtl1AkHhGfk.mft (raw, json)
Hash identifier: uCFXW9fau91xk/37WciNiqrGhVhZL3eJayLdGzPUtMY=
Subject key identifier: 80:11:C0:65:9D:26:36:76:11:84:A8:07:F7:22:94:65:92:71:16:12
Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
Certificate issuer: /CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Certificate serial: 0197B6A0E22BFD02CA5C0873F9C14E8D3D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
Manifest number: 03E7
Signing time: Sat 28 Jun 2025 13:01:26 +0000
Manifest this update: Sat 28 Jun 2025 13:01:26 +0000
Manifest next update: Sun 29 Jun 2025 13:01:26 +0000
Files and hashes: 1: Fm9ncLp34DLn59HXMtl1AkHhGfk.crl (hash: SzJEkrMUHN3HLA/piSL0cjCHW1wT4p/u3RtIDbZ498k=)
2: pzlWJjQzQzoCKZbR26xCajPlSDU.roa (hash: 61Hu+9N0msg0OltqRJ2+tDJ9j89XxxQKSANBLiUSU78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e2:2b:fd:02:ca:5c:08:73:f9:c1:4e:8d:3d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Validity
Not Before: Jun 28 13:01:26 2025 GMT
Not After : Jun 29 13:01:26 2025 GMT
Subject: CN=8011c0659d2636761184a807f722946592711612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:25:7a:96:92:7a:3b:e0:3d:37:b6:37:e1:
0f:cb:52:09:f9:e7:1c:93:49:07:29:96:1d:e6:22:
ea:f7:4d:e1:de:21:57:16:34:3a:44:8a:97:c4:8d:
d2:07:d3:73:00:7c:1e:68:91:b3:71:19:7c:62:c4:
32:fa:d8:bb:6f:9f:8d:d4:97:ea:da:fd:91:34:05:
c9:9b:fe:88:d1:36:21:fc:8a:19:8d:d7:0d:08:3f:
40:7b:8c:56:e3:21:d5:2c:41:30:ca:46:2d:a3:e4:
36:62:e8:ad:68:63:04:c1:e0:65:01:cb:0a:2d:bf:
5c:e8:0f:05:d5:bf:b6:ff:a2:76:13:b2:b0:cb:9a:
03:04:f4:c4:39:6f:de:4f:3b:36:36:4b:70:a0:74:
fd:ec:c3:b1:39:66:5a:55:70:ad:52:87:9e:f8:dc:
e0:2e:ce:8c:03:93:f4:70:6a:f4:be:92:f7:03:5e:
14:30:6c:d8:e6:a2:c1:1a:8a:6c:4c:79:8d:71:af:
6f:4a:fb:8e:87:d2:7a:c6:10:36:e5:61:bb:01:fa:
54:bc:09:1d:d3:59:13:6f:7d:c8:8b:32:8c:3b:af:
2d:5d:69:e3:d1:bd:a4:07:d0:22:aa:2d:37:be:eb:
45:92:f1:df:8a:97:bc:28:fa:d1:0d:44:cb:11:68:
a4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:11:C0:65:9D:26:36:76:11:84:A8:07:F7:22:94:65:92:71:16:12
X509v3 Authority Key Identifier:
keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e4:2c:33:81:e4:22:7b:19:e3:17:bd:0c:4b:f4:fe:7c:14:
e4:b2:7f:bd:a8:99:32:96:a2:5e:ae:26:d3:c7:06:5f:c3:32:
f7:e7:e3:1d:f8:b6:a4:27:71:6d:fd:64:8a:da:74:0c:c0:1f:
24:0f:48:e7:7f:1b:f0:89:7d:10:4e:17:ff:21:9c:11:6a:35:
29:17:5e:eb:e6:5f:33:df:13:73:15:11:a6:72:62:87:79:c7:
7c:30:20:0c:94:33:88:00:a8:51:d8:ab:de:13:d3:ff:50:e4:
8b:70:dd:68:7b:e3:9a:b3:ec:19:24:5b:9e:ee:63:2e:32:25:
5b:7a:e6:ba:0e:bb:d8:89:cf:cb:28:55:34:7e:49:77:41:db:
5b:c9:32:6e:4d:cc:e4:10:dd:6e:9e:14:f4:df:91:79:d4:1d:
8b:4d:38:04:2b:d9:52:d9:92:a1:a6:44:14:af:4a:ca:e7:96:
fb:58:81:43:1c:60:08:57:e4:61:69:1e:1d:bb:55:f1:81:b0:
2b:d1:7e:7d:a7:b4:c6:53:13:f8:93:2f:8c:4c:66:38:7c:36:
d6:d6:9a:c7:d1:3a:c5:2f:e8:e8:ed:25:59:ca:52:03:e6:e6:
27:05:d3:3f:98:74:2b:80:29:88:7c:b3:a0:59:cc:20:7f:97:
6b:eb:dd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:18 2025 by rpki-client