Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File: fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier: vU0Btz8ebOynebR49WCl6oKJFkjjFMlHA91zwIr9z4M=
Subject key identifier: 3D:52:AB:4F:46:FC:98:CE:BC:41:71:00:6F:91:DA:A1:6A:28:75:F1
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial: 0197C9F1F268CCC708220C5358F50C94F270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number: 0AF4
Signing time: Wed 02 Jul 2025 07:02:45 +0000
Manifest this update: Wed 02 Jul 2025 07:02:45 +0000
Manifest next update: Thu 03 Jul 2025 07:02:45 +0000
Files and hashes: 1: XDbrvNT86ISN_spCbo4xvAzpVp4.roa (hash: VdcMI142dXyMiD8Y0gV4McGw1NiqJuUGtwcS5l0geTI=)
2: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: MJ+ls+I8UpkpCYqX0cs0qT0PxL5Lkg+Sa3oGfoTmdRE=)
3: ziT1KvRp4nclVM5reU3sOFNH1x4.roa (hash: Q4C5iLbiXkuuyYxp+dYvmqYFnNUxA4NFMnWPDomm2KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:f2:68:cc:c7:08:22:0c:53:58:f5:0c:94:f2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Validity
Not Before: Jul 2 07:02:45 2025 GMT
Not After : Jul 3 07:02:45 2025 GMT
Subject: CN=3d52ab4f46fc98cebc4171006f91daa16a2875f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:ee:4e:17:f4:ea:66:a7:86:ef:f3:0e:22:
c8:1a:ab:d3:b5:43:b7:c8:c1:24:c6:30:4c:de:b3:
e7:bc:0a:3e:a3:bd:a5:ee:9d:93:de:63:29:e9:67:
be:6a:d6:27:9b:36:32:d8:f0:fe:89:4e:51:b9:23:
ff:81:26:18:3d:dd:6c:79:0d:cd:23:05:f5:37:62:
aa:99:9b:c5:d2:cf:e1:e1:cb:45:8f:e4:ad:c9:15:
85:dd:8e:e7:f5:97:aa:b1:a2:fd:fa:35:cd:5f:6f:
9f:eb:45:10:3e:7b:f6:c8:3a:e0:6a:de:28:17:5b:
1a:0c:e0:20:45:b6:42:84:1e:0d:c4:dc:c9:2e:76:
75:04:31:ee:17:8d:11:12:aa:d6:89:5a:20:ed:8a:
66:96:38:c3:65:f2:6f:a6:63:b9:9a:0c:e4:6b:f6:
46:7b:2f:c0:46:b1:e6:71:01:d2:5b:4e:14:29:e2:
05:0b:7c:1e:e6:e2:3c:34:83:03:7b:af:b4:c5:e9:
e3:f2:9e:2c:76:4b:cd:e2:fb:c6:ec:81:e1:bd:02:
1c:a4:79:8b:c5:d7:38:75:ee:83:00:af:3c:df:3d:
4d:43:44:9c:43:61:07:83:a1:b6:81:f5:b6:5a:8d:
74:58:87:e2:87:eb:ef:a4:f4:bc:bb:97:5e:55:fe:
32:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:52:AB:4F:46:FC:98:CE:BC:41:71:00:6F:91:DA:A1:6A:28:75:F1
X509v3 Authority Key Identifier:
keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8c:e0:d9:0f:52:cb:2a:12:6c:89:8a:46:b5:c1:95:54:f8:
e0:ba:c8:b1:be:e9:45:d0:c6:60:6a:e3:43:d4:e7:7a:0a:4b:
5e:24:74:27:09:85:6e:bf:58:57:49:b8:48:4a:16:d3:89:45:
52:05:13:a4:73:1b:1c:72:61:6f:dc:8d:9b:1a:40:87:c0:bd:
d9:54:59:56:7d:a0:c5:5b:c3:61:be:d4:b0:bf:5c:c4:62:49:
86:a0:b9:7e:e0:8e:6d:16:a1:ae:a1:5e:c7:31:7b:5d:11:bd:
fd:e3:ef:6a:bc:01:73:ee:67:0d:5d:82:98:75:bc:33:39:32:
a9:44:2a:82:c7:9f:09:ba:81:1f:c8:22:c9:db:a4:a7:74:f9:
f8:14:34:e2:1e:27:0e:9e:0d:90:42:51:41:09:5f:f4:4c:e0:
e9:a3:85:dc:8e:88:42:b4:0e:1e:6c:6f:e3:2e:aa:6a:25:7b:
ad:d5:dc:f7:7b:85:6a:ce:b2:0a:b1:f6:93:69:ec:da:f4:d4:
3c:be:c2:94:d0:31:9d:32:a4:34:52:44:0d:8c:e9:23:71:63:
07:b5:25:a2:56:7d:8f:9a:d6:d4:0b:ea:77:8e:d2:30:99:7a:
b1:91:1b:ee:d8:cb:07:7b:17:5e:fa:14:0b:97:24:59:6d:0b:
cf:b2:d4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:55:44 2025 by rpki-client