Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
File: fD5YWlm1I7uG1mCnFo4cHroJTaA.mft (raw, json)
Hash identifier: s9q4+yYydZ/mlAEl6vwT7yd+cY4ZDC9PpQUymCZgayc=
Subject key identifier: 11:D2:27:64:E9:21:92:EB:AF:66:42:4D:0A:1D:E7:47:F0:0B:DD:FF
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 0197B6D745518D34006746E40130C7D7F39B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
Manifest number: 0CBB
Signing time: Sat 28 Jun 2025 14:00:50 +0000
Manifest this update: Sat 28 Jun 2025 14:00:50 +0000
Manifest next update: Sun 29 Jun 2025 14:00:50 +0000
Files and hashes: 1: fD5YWlm1I7uG1mCnFo4cHroJTaA.crl (hash: 9B/cMRkPU6hGP9RZjRIpb6jTca1Cq1J2StGMOccs6Mc=)
2: h5NF_Tx5Gv6vWtfnwGyh3VRdnTk.roa (hash: BKuppRUn6Xq2lQXG35ViYm1avyM64S8t8uEWZ7eoEGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:45:51:8d:34:00:67:46:e4:01:30:c7:d7:f3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Jun 28 14:00:50 2025 GMT
Not After : Jun 29 14:00:50 2025 GMT
Subject: CN=11d22764e92192ebaf66424d0a1de747f00bddff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:e8:46:4b:72:67:f6:70:25:c3:ff:0a:9f:
a5:34:f7:0b:a1:50:ba:c7:a4:20:f3:6b:88:36:75:
57:0a:af:c2:f1:e3:5a:aa:08:f7:04:82:66:91:b6:
be:37:69:52:3c:56:7f:9d:7c:0e:df:84:34:17:26:
af:9c:ea:0b:2d:be:aa:35:ec:1d:00:48:92:6a:04:
d7:4c:93:be:fc:6c:66:7a:bd:5f:69:ad:bb:30:5e:
0d:6a:0f:18:be:61:e7:0b:4c:63:e5:1a:65:d2:c6:
b6:43:2c:c2:ba:1b:80:39:53:7c:1b:fc:59:ce:4f:
8b:26:71:17:23:26:73:04:60:2f:5f:02:79:3f:ec:
4f:09:b0:12:f6:d6:e7:b6:2f:a9:6f:83:43:ab:01:
34:03:aa:df:da:e4:9b:20:2a:07:4a:8b:02:26:91:
e2:21:41:f0:01:d5:07:e5:a5:9f:4c:e4:af:e7:74:
44:3d:d6:e9:81:fd:40:e4:e6:57:b9:a5:6c:d1:5e:
ea:ff:ce:8b:7b:cc:d9:ad:c2:2c:fa:e4:09:55:4c:
bb:76:37:d9:12:3d:53:0f:cb:2a:ed:b7:b9:fb:30:
96:f4:cd:cf:43:06:c5:b9:be:20:c5:fc:47:63:b8:
f3:79:cd:7e:82:1c:16:f3:c8:86:ef:e7:f9:50:28:
a4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D2:27:64:E9:21:92:EB:AF:66:42:4D:0A:1D:E7:47:F0:0B:DD:FF
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5a:73:f2:77:ec:df:58:79:17:8f:93:7d:ce:83:42:b6:43:
7c:06:f6:07:9c:55:38:2f:09:55:1c:e1:5e:d0:ac:cf:a2:f4:
6d:a3:8a:71:cf:8c:93:a2:39:65:f5:e3:e9:28:40:a4:dc:e1:
7b:18:97:c0:ac:2a:5d:10:46:9f:aa:ed:77:4a:72:e7:39:95:
f5:38:35:e4:da:8e:36:7e:f4:1c:df:23:b7:76:b0:7c:08:14:
7c:45:3e:de:54:2e:ff:be:4b:20:8e:f7:51:45:14:0f:6c:9a:
2f:de:0c:93:54:f5:cc:b8:d9:52:8d:3b:27:63:c4:41:d1:c3:
15:ed:69:08:bb:2f:7c:6f:bc:bb:89:80:ac:e7:b1:46:6f:14:
64:2e:11:fc:89:fe:b9:6e:57:90:79:fb:11:cf:49:b6:4c:53:
f6:40:a3:9a:d3:94:80:58:4d:d4:ce:e4:75:36:12:d7:33:1a:
d5:6d:50:07:96:64:a3:ee:ff:52:32:60:46:30:6c:68:34:87:
26:e8:f0:e3:56:a1:c7:a9:71:bc:08:d2:14:f6:08:ba:b4:bb:
cd:c5:c9:29:4d:8d:8c:3d:12:55:bd:ea:24:20:48:8d:a8:78:
da:ce:04:d7:62:85:a2:98:b2:e2:4f:53:41:91:df:99:f9:e5:
70:22:a6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:29:44 2025 by rpki-client