Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json)
Hash identifier: 27KtWLTV3Nw8qiu76XCU/fRRIAHn5hdGY/POcZk59Ok=
Subject key identifier: 14:46:43:E5:F9:7A:70:80:E0:00:2C:F8:89:B0:DE:80:13:7F:EA:D4
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 0197B7EACA5F738446D17CC2E631E92E975B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
Manifest number: 0FDD
Signing time: Sat 28 Jun 2025 19:01:47 +0000
Manifest this update: Sat 28 Jun 2025 19:01:47 +0000
Manifest next update: Sun 29 Jun 2025 19:01:47 +0000
Files and hashes: 1: f-4yu6sDyBHuoUp0ijzfgQJpE8U.roa (hash: I5XhYKmiwTTC0KZ/h+71MELDdEucvcsXapf63tq8JL0=)
2: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: Te7c7bog6AUWskr9WcyiBTzszV177m23vTmWY8fzvzA=)
3: xNMYEYWeSRysGA1egNd5UYXQ2iE.roa (hash: mNuWxiNJNgSqM1Q6Fj113QLftCPa1zUr2fYNqR8cc3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:ca:5f:73:84:46:d1:7c:c2:e6:31:e9:2e:97:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Jun 28 19:01:47 2025 GMT
Not After : Jun 29 19:01:47 2025 GMT
Subject: CN=144643e5f97a7080e0002cf889b0de80137fead4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0b:2c:60:53:4c:9a:9f:0f:de:1f:34:fe:fd:
71:7f:2e:e1:17:9e:e8:26:a0:b7:bf:99:9a:de:b8:
11:cd:49:58:53:7e:02:94:0f:df:62:d8:34:5c:1e:
47:73:19:dc:af:51:20:85:14:84:67:69:c3:12:07:
34:b4:d5:a6:50:cb:70:45:8d:3b:3d:5c:24:0f:6e:
b2:06:7a:3e:ac:b0:48:3a:ed:e1:72:dd:d6:39:da:
cd:8b:f8:4d:d6:69:1c:dd:63:84:cb:c5:5b:2f:e3:
50:ad:3d:68:70:5f:e9:c4:55:f2:e7:02:e7:a5:84:
1c:0d:58:d4:49:e0:b4:5d:55:8d:93:02:a0:70:69:
04:ea:23:5c:85:06:13:3b:ec:39:9e:06:cc:81:7c:
22:d9:28:b0:9f:e6:d7:44:c9:3e:70:6a:25:5f:09:
7e:94:9d:7b:36:a1:df:06:df:26:a6:e2:ea:54:2d:
ea:51:52:69:93:92:a5:52:5b:e3:7e:6e:86:18:3b:
4c:32:6c:e3:c2:63:21:b0:e2:73:eb:65:53:ac:e4:
f6:02:ed:76:0e:29:8c:e2:46:04:79:33:6a:79:31:
2e:1d:27:03:d8:c5:cd:f1:1a:05:5a:93:03:f1:dd:
8d:97:44:4e:69:83:0e:2d:9c:43:aa:2d:7f:31:60:
37:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:46:43:E5:F9:7A:70:80:E0:00:2C:F8:89:B0:DE:80:13:7F:EA:D4
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c1:80:89:c6:d0:0d:77:b4:5f:30:cd:5f:16:3d:08:59:93:
41:7d:e4:2d:51:93:01:53:9b:e3:34:04:3f:a2:fc:20:eb:cf:
c3:57:89:73:8e:7e:6a:71:90:5f:40:ef:6f:2c:47:b5:5f:3f:
72:63:ba:f3:d4:37:a7:d3:d0:e5:ff:ac:97:82:8b:fe:a0:a2:
f7:4e:9d:42:33:b6:be:0c:20:7b:99:e7:9d:98:d9:6f:b5:7d:
a8:cd:2d:c3:1b:91:d5:b3:a3:02:b9:bf:36:67:a3:5a:e5:dd:
2f:a8:f0:5f:14:9a:82:03:da:9a:52:05:36:d5:f4:39:bd:8e:
fd:3b:be:55:2a:4f:15:41:4c:34:2f:35:b6:63:c8:61:9a:e4:
f7:f0:5f:21:b5:9f:58:6e:6c:27:d4:c8:12:cd:2f:74:f7:e6:
bd:ab:7b:38:e6:c5:98:79:eb:6d:2d:ef:fd:3d:83:00:08:9f:
79:35:ed:81:08:c4:e8:be:d0:b6:4b:65:0a:39:e5:b1:ff:78:
4d:40:ea:a5:97:8a:57:a2:9f:92:b3:eb:28:0d:0d:3e:6d:0f:
dc:2f:32:10:97:47:4b:f7:d6:90:e0:37:80:49:e2:a2:99:ee:
01:4a:a8:6e:84:6c:ba:63:81:b9:1b:e9:ac:bc:01:80:e8:b6:
cf:19:7d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:14 2025 by rpki-client