Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
File: fSoBIksdqGSAz-y8tsUt-YEpaOg.mft (raw, json)
Hash identifier: bwjcMlDSCxV9x2DrQclKR5mizcp/RZj2H4cHCWG5d/w=
Subject key identifier: 30:10:7E:4B:63:13:99:BA:9A:3F:CE:A0:75:B7:EA:74:E4:3E:8B:BF
Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
Certificate issuer: /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Certificate serial: 0197BA7D38414D0A2637EDAFFAFC4516C755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
Manifest number: 0F60
Signing time: Sun 29 Jun 2025 07:00:57 +0000
Manifest this update: Sun 29 Jun 2025 07:00:57 +0000
Manifest next update: Mon 30 Jun 2025 07:00:57 +0000
Files and hashes: 1: 3L4Ds4lPDiLLOvZ8T2NW6fHNbRs.roa (hash: NwLfkOcBti2VO8eJgA/iflwdsDMiN5aPUXSbDozw53I=)
2: Gg8qXyeg-gil2NOkr3thvUZqwIE.roa (hash: pEcvppDB8KUs5+dwI7YABXPT/TWvmUqee92Iz6LzfZk=)
3: fSoBIksdqGSAz-y8tsUt-YEpaOg.crl (hash: JdsOoygf89rZEcSUKsQr79njC6eTSS8Mj4tamKHo6Ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:38:41:4d:0a:26:37:ed:af:fa:fc:45:16:c7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Validity
Not Before: Jun 29 07:00:57 2025 GMT
Not After : Jun 30 07:00:57 2025 GMT
Subject: CN=30107e4b631399ba9a3fcea075b7ea74e43e8bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e0:66:93:a1:62:2a:cc:12:8f:2e:e7:0e:c0:
8e:70:61:56:24:4c:a3:7e:91:34:5c:ea:51:a7:33:
ab:37:1c:80:dd:d8:64:7b:bd:1a:02:af:5e:da:1b:
cc:4e:49:45:03:b7:12:5e:34:63:8d:f1:36:45:ba:
e6:d1:64:8e:39:1a:76:77:67:6c:27:84:ca:1d:14:
12:3b:9f:1f:6c:68:29:04:50:4e:f9:b1:ba:1b:9c:
df:b3:1a:80:1e:1d:e5:da:98:d7:de:3b:50:0f:9b:
8a:2c:02:5a:2d:8a:67:41:bd:ae:aa:f4:f7:da:b4:
d5:1f:3d:21:a0:15:4c:3d:7b:5b:c2:c0:d0:c2:84:
d8:83:4d:be:76:bb:a3:55:ad:05:82:14:09:5e:b0:
12:5c:43:5f:5f:bf:81:04:e8:91:68:49:3e:09:8f:
ca:01:d9:a7:6e:27:92:f9:84:c2:b7:44:b9:0a:60:
86:0d:13:ae:5a:af:24:79:de:6d:39:4f:24:d2:ae:
60:5b:7b:42:9e:55:da:75:dc:4d:26:e6:cf:ed:9e:
92:7b:54:c2:42:7f:a9:49:5e:43:e1:61:7f:22:3d:
21:0b:a1:6c:a4:80:21:4b:d0:b2:d6:0c:aa:a3:e1:
11:d0:0c:35:8d:16:27:22:d1:81:cc:96:da:bd:7b:
4f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:10:7E:4B:63:13:99:BA:9A:3F:CE:A0:75:B7:EA:74:E4:3E:8B:BF
X509v3 Authority Key Identifier:
keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:99:bb:75:be:c8:40:1b:a2:27:c6:26:63:25:2e:3c:4f:86:
28:70:69:8a:b6:71:ea:b5:6e:62:c4:20:cc:52:33:90:1a:c2:
3b:52:65:34:df:21:ee:3a:7c:41:76:20:aa:87:04:06:6a:9f:
87:fa:a3:b2:d9:f8:03:fe:26:1c:63:85:ef:89:5b:24:ef:6f:
27:97:44:0c:58:6e:da:55:59:b0:57:97:1b:76:96:ae:7f:a9:
49:88:da:88:4e:b0:da:bf:ca:f3:4e:f5:ec:1a:4b:6d:1e:be:
59:f3:fb:4a:db:56:6e:74:ac:c9:c9:8d:56:3c:e6:eb:23:bc:
c2:b9:bf:a5:de:22:41:99:30:17:66:2b:d1:5d:d8:18:4c:d1:
f4:e0:83:fb:34:10:a6:bd:1a:4e:da:16:06:d6:54:06:46:55:
d3:2d:33:28:96:22:1c:80:21:96:dc:a8:1b:4c:33:77:ac:c5:
16:08:7b:73:3b:06:a5:12:63:2a:2f:7e:93:a2:27:62:d7:4a:
1f:d9:14:f2:dd:89:33:a4:59:07:f1:ea:06:61:25:12:12:1a:
c3:65:59:7a:a1:5b:7e:1f:62:a1:b5:9b:23:2c:54:be:2d:07:
50:e2:4f:61:48:11:17:9d:87:22:d5:4b:7f:5c:d2:78:8c:b9:
4e:5a:ec:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:26:41 2025 by rpki-client