Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.mft
File: srV8B2efEIcOxTs576fQiwhXqRE.mft (raw, json)
Hash identifier: IGqSsIozvFuCOkvSoWYG1562LiR9OIzHlwSCfB4wFm8=
Subject key identifier: FC:A4:5E:D2:D1:A3:64:40:31:67:13:DE:2E:74:74:54:AF:50:DE:C0
Authority key identifier: B2:B5:7C:07:67:9F:10:87:0E:C5:3B:39:EF:A7:D0:8B:08:57:A9:11
Certificate issuer: /CN=b2b57c07679f10870ec53b39efa7d08b0857a911
Certificate serial: 0197B9D8DDCB9C7AEE855BEE47640ABC4A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srV8B2efEIcOxTs576fQiwhXqRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.mft
Manifest number: 09EC
Signing time: Sun 29 Jun 2025 04:01:26 +0000
Manifest this update: Sun 29 Jun 2025 04:01:26 +0000
Manifest next update: Mon 30 Jun 2025 04:01:26 +0000
Files and hashes: 1: ap6bPmgHUfAh5wuoqG1kdVuYoGU.roa (hash: FRWb8W/VjUKZi4bCa79dR9xehManyu8Gtrb5uK1Umc8=)
2: srV8B2efEIcOxTs576fQiwhXqRE.crl (hash: 2CEF0EQmCYKetK0zE7WDRkoJu2IsTzvl1n2sACqrAEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/srV8B2efEIcOxTs576fQiwhXqRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:dd:cb:9c:7a:ee:85:5b:ee:47:64:0a:bc:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2b57c07679f10870ec53b39efa7d08b0857a911
Validity
Not Before: Jun 29 04:01:26 2025 GMT
Not After : Jun 30 04:01:26 2025 GMT
Subject: CN=fca45ed2d1a36440316713de2e747454af50dec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:ce:05:b5:9b:2a:1d:10:e5:e1:28:61:ff:53:
ec:e2:c4:e8:c8:1a:b5:6f:d8:e5:70:0d:95:5f:05:
af:8d:8d:cd:16:74:78:e7:f6:65:6e:bd:ef:37:f0:
fe:69:5e:16:85:e6:5f:b2:2c:d1:0d:de:14:72:16:
04:f4:5e:65:d2:2d:30:ad:c3:5a:cf:42:da:8f:85:
13:c9:f1:f9:91:6f:71:ff:75:bc:ff:7f:38:fe:94:
47:27:3a:3b:fb:e3:b1:64:08:95:f2:d5:3b:d8:39:
fe:85:e7:4f:55:b8:f2:91:df:68:73:bb:3a:b9:9a:
c7:b6:65:ea:63:ed:ea:ff:91:5c:56:db:fc:76:fe:
77:aa:24:73:46:c7:d9:e9:0f:b5:46:29:55:69:41:
ad:9b:f5:49:c4:04:fd:83:e3:83:8a:75:17:e4:f9:
91:7f:0e:ed:08:4c:3d:5d:5d:74:ae:5e:4f:08:7d:
88:24:07:1f:e3:4a:d8:90:68:01:0e:8d:3a:b2:3c:
fb:58:30:53:dc:88:e2:4a:97:34:b3:de:fe:31:3c:
e2:4b:40:7c:a7:06:64:28:b7:b7:9d:54:9f:fd:66:
4f:a4:84:79:bb:d2:26:3d:38:e5:03:4e:58:36:03:
98:b7:bf:32:f4:2f:dc:bc:bc:6f:02:c9:fe:a4:31:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A4:5E:D2:D1:A3:64:40:31:67:13:DE:2E:74:74:54:AF:50:DE:C0
X509v3 Authority Key Identifier:
keyid:B2:B5:7C:07:67:9F:10:87:0E:C5:3B:39:EF:A7:D0:8B:08:57:A9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srV8B2efEIcOxTs576fQiwhXqRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1c:db:b2:a4:95:ef:90:ec:14:07:a3:1e:3b:20:3f:b2:85:
8b:8e:c3:5c:b9:bb:16:36:03:55:ef:0a:df:46:dd:0a:36:4c:
5f:9a:b3:5a:a6:b8:94:f6:38:75:ab:71:ba:f4:54:ca:2b:e5:
a8:25:38:85:06:aa:80:ea:15:70:da:f2:4d:73:6d:1a:ae:08:
3a:11:b3:1a:c5:a3:62:08:73:ad:32:4f:75:58:86:0f:30:64:
99:d1:cd:ed:3e:b4:68:0d:6e:6b:20:68:3c:88:cf:7c:cf:99:
b8:c3:3b:7c:f9:2e:6c:f3:b6:83:50:02:c1:3e:9c:cf:b3:b6:
35:1f:5d:b0:b5:7b:a7:70:08:bb:3a:ec:8d:11:cd:03:03:38:
3b:1b:89:9b:d1:38:86:ea:1a:62:95:b4:a4:91:95:25:c9:2a:
f4:60:65:69:e2:1a:89:d6:9f:96:81:51:81:76:ee:56:b5:1b:
55:f9:ee:90:87:7f:5c:54:fe:9d:c7:f6:8c:63:8d:64:29:e1:
df:44:35:9c:e5:47:8b:ad:5b:38:03:a6:b8:20:ef:e2:e1:8f:
2f:64:2f:38:1c:96:9f:47:33:a5:a9:69:b2:88:5b:94:7e:4b:
89:c5:b7:32:10:e4:e7:b4:a9:d1:71:64:15:e2:ca:c4:18:ec:
de:f6:d5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:33:14 2025 by rpki-client