Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
File: fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft (raw, json)
Hash identifier: t+vYSgzkNdYWj2RC57znynhL/r0GA7AZrd/zyvx+YJs=
Subject key identifier: 2B:E8:C1:20:92:F5:2B:89:16:CB:31:AE:47:5C:CF:FD:16:DD:60:5B
Authority key identifier: 7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
Certificate issuer: /CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Certificate serial: 0197C23810BF9A11E493E66A9A4BDA6C3147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
Manifest number: 0DD5
Signing time: Mon 30 Jun 2025 19:02:23 +0000
Manifest this update: Mon 30 Jun 2025 19:02:23 +0000
Manifest next update: Tue 01 Jul 2025 19:02:23 +0000
Files and hashes: 1: fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl (hash: jd16FqBa75vEqlx22Dx/F3t1tJC9dg194Run+SMvvuM=)
2: oC-GTHXGtoWIH_akxEXPO1Ui9dA.roa (hash: lh9QUHwP4a4QOFQ3TSIIf/mF/GalRL/fqqfPZQYfIfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:38:10:bf:9a:11:e4:93:e6:6a:9a:4b:da:6c:31:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Validity
Not Before: Jun 30 19:02:23 2025 GMT
Not After : Jul 1 19:02:23 2025 GMT
Subject: CN=2be8c12092f52b8916cb31ae475ccffd16dd605b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:59:d3:3a:10:08:ec:0f:7f:7f:f0:57:df:7c:
27:f4:32:5a:f1:3d:b5:6b:de:41:62:fd:f3:95:df:
d7:62:d2:d9:c7:46:8a:f1:01:d5:e6:2e:86:de:e0:
d9:aa:ad:75:d2:29:52:38:47:68:69:71:9e:21:55:
03:9b:a3:83:55:19:d4:0e:9c:dc:df:6b:d8:e8:b1:
9e:da:f6:cc:74:6d:37:f4:49:10:ef:f9:83:dc:9c:
9d:90:6e:23:fe:7e:8d:f1:6c:a8:70:3c:23:15:e6:
80:9f:54:a6:7c:ca:cc:5d:9d:6a:95:61:da:7d:97:
a2:e3:d1:f7:45:9c:a9:04:27:b2:a7:2f:8a:13:9b:
b6:00:d8:c4:e5:e6:37:f9:04:a8:d6:cc:4a:7b:23:
ef:a9:5f:29:9b:7c:ff:b7:22:42:e7:b0:8b:e9:3c:
8f:5b:11:20:e6:b8:74:20:69:73:c7:69:8b:ae:68:
49:27:71:5f:2c:7a:cd:f8:55:7b:db:df:02:15:59:
7b:d5:a3:4a:eb:25:57:da:29:4d:51:39:d9:ad:db:
4c:2d:91:8d:35:f9:98:df:fe:e3:84:f5:7c:e3:ff:
a8:9a:e7:5f:ae:62:0e:a7:c4:63:75:7a:ff:8a:56:
df:fa:23:dc:82:b6:cf:1f:3d:7a:93:68:25:d7:8a:
06:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E8:C1:20:92:F5:2B:89:16:CB:31:AE:47:5C:CF:FD:16:DD:60:5B
X509v3 Authority Key Identifier:
keyid:7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c7:07:8e:33:75:32:f6:fa:09:ad:97:55:f6:6c:56:04:b2:
94:fa:8a:1d:69:2c:6e:02:3e:94:d6:a0:a8:39:59:44:1d:bd:
09:c4:de:04:b3:35:2e:78:32:2d:07:5f:d4:d6:c9:47:bf:c2:
bf:26:a5:4e:80:77:47:99:cf:fa:10:04:71:c4:01:e6:6c:20:
8d:20:d8:80:2a:e9:f5:35:4c:62:1b:10:b3:7b:22:19:0d:30:
31:46:77:3c:2c:23:c9:64:f3:75:58:7b:03:a4:e7:f7:fa:a2:
07:69:fb:6e:6b:b0:20:72:74:c4:fc:8f:13:0d:2a:8c:d0:d3:
68:19:20:e8:57:1b:9a:a7:60:88:75:17:0d:50:0e:56:8a:84:
16:2f:64:c7:57:cd:73:6b:55:ec:5e:a8:a8:37:c3:52:1d:b9:
5e:b4:42:c8:cb:3d:ee:a0:1a:c9:b9:ac:a5:18:f3:26:2a:22:
ca:ce:15:14:e2:29:ff:93:a8:26:f7:6e:4e:cb:86:99:1c:c2:
3b:df:c9:1c:36:c1:17:43:47:12:07:8d:6f:1c:41:1f:07:7d:
d3:81:c9:7b:d0:c9:27:1e:31:6a:82:52:19:24:e8:c2:b3:56:
6a:bf:c7:d4:24:fb:6b:8a:67:e6:62:ef:ab:32:d6:01:56:2e:
93:8b:f6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:35:19 2025 by rpki-client