Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
File: rFPL63FQhLMioaFJyW4JxA7W2IM.mft (raw, json)
Hash identifier: CdssdkDunuao/SIgos0BpVbcdNL9Ckg13DBdiMyz0e4=
Subject key identifier: FF:C3:4E:5A:D3:99:9C:BC:C6:78:5F:62:27:13:8B:71:A9:C9:C4:D2
Authority key identifier: AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83
Certificate issuer: /CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
Certificate serial: 0197B77CCC83273E758353A536FF67F7A40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
Manifest number: 11DC
Signing time: Sat 28 Jun 2025 17:01:38 +0000
Manifest this update: Sat 28 Jun 2025 17:01:38 +0000
Manifest next update: Sun 29 Jun 2025 17:01:38 +0000
Files and hashes: 1: Wfce3ZtHFc99tmFyN64Q-vZ2RpA.roa (hash: Y3X9Ri7kJ6o/ebs+JUXNiJ+ZA7lhHw1uv9ydtQHMGRI=)
2: rFPL63FQhLMioaFJyW4JxA7W2IM.crl (hash: 6hPk3th95F/rfaenzMogg1pEfgZ1J5IhYFajY0NV/Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:cc:83:27:3e:75:83:53:a5:36:ff:67:f7:a4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
Validity
Not Before: Jun 28 17:01:38 2025 GMT
Not After : Jun 29 17:01:38 2025 GMT
Subject: CN=ffc34e5ad3999cbcc6785f6227138b71a9c9c4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:35:9c:33:95:18:43:6e:f7:ce:a3:5d:41:ad:
ff:3c:30:f8:5a:0b:47:7f:21:6c:ba:f7:44:76:be:
d7:6e:50:39:06:e4:c4:e5:fb:58:bf:de:53:2a:89:
d4:1e:6d:e3:17:6d:85:ac:89:5c:38:87:28:50:96:
08:1a:3a:d2:74:a7:89:5a:a9:b0:67:53:65:e1:75:
6a:cc:e6:6c:76:81:e8:fa:e7:3a:7d:13:89:38:12:
16:8b:a1:d3:99:26:e6:69:28:44:e4:58:95:e6:a5:
72:ca:92:4e:57:99:8c:da:83:50:f5:84:37:76:b2:
19:b2:6a:72:3e:94:af:7f:a2:87:15:f1:bd:26:4b:
c7:97:de:94:91:d8:c9:16:42:78:6c:df:3d:f0:2a:
fc:32:9f:d7:2e:fe:c0:85:47:1d:d6:3b:99:cb:e3:
8c:83:40:bc:78:63:da:ae:7c:c0:72:c1:67:0e:0b:
f9:39:91:a9:ef:03:18:b2:88:1c:fb:39:a2:1b:07:
52:f1:c1:fe:26:d6:7d:c2:7a:1e:8b:7e:95:f5:5e:
ab:a7:c6:a9:6c:c6:4f:9d:1e:84:c5:0e:21:3a:3c:
0c:3b:80:4e:c0:1d:98:e9:76:57:9a:d0:fc:f9:81:
3d:f0:8a:d1:29:98:4d:ee:89:34:8c:ab:00:b6:11:
5e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C3:4E:5A:D3:99:9C:BC:C6:78:5F:62:27:13:8B:71:A9:C9:C4:D2
X509v3 Authority Key Identifier:
keyid:AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:46:e1:d9:5b:bd:d3:92:4b:79:cc:31:d7:61:60:5c:fd:ae:
32:57:f2:35:18:c4:dd:3b:5e:d2:20:22:ee:bf:e4:4e:be:6c:
d0:20:91:1c:20:b5:70:83:e7:52:45:62:db:9f:d2:cf:f3:93:
68:e0:a2:0d:5c:2f:8b:c6:60:b4:77:c7:5a:50:99:40:94:3c:
8d:f8:85:7b:d6:8f:11:9f:dc:fd:b3:fe:46:7d:43:f4:83:7c:
d9:30:64:45:64:54:14:a0:f2:4a:21:92:0f:1a:16:cb:15:b1:
04:5e:d2:d0:31:ef:6b:dd:3f:29:21:81:86:01:00:34:2b:62:
3d:71:3b:bb:4a:a7:61:f3:57:ad:53:ca:e6:48:96:42:28:13:
1e:14:20:47:02:97:c0:d4:fd:f8:bd:95:03:f3:ea:57:c6:22:
61:9b:10:5a:ed:f6:0b:1e:fb:a8:89:20:00:e9:a6:32:10:a4:
ec:38:cc:3e:b7:a7:e1:cd:19:de:0f:88:3b:93:d1:21:35:0d:
56:23:29:78:43:f1:7f:68:5c:40:15:0c:d8:27:9b:38:78:a3:
a2:43:1b:83:88:b3:76:fc:1d:9c:a6:cf:8f:a7:e9:c7:d4:00:
a9:93:7a:8c:08:27:f8:fd:b5:94:db:55:01:49:c4:f3:1f:df:
23:b1:44:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:31:23 2025 by rpki-client