Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
File: f01ZHCOtLGlHfX96HUzo687pWWw.mft (raw, json)
Hash identifier: JrpYT2io7GK22hN23vYDk6Mq7H6FiJoGNH52dhhGss8=
Subject key identifier: 24:8E:68:06:AD:0E:2D:39:8B:52:B8:71:87:0B:3F:93:B2:F2:94:52
Authority key identifier: 7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C
Certificate issuer: /CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
Certificate serial: 0197C7943B7663BEDF04F4FC2CD6686C330E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
Manifest number: 0417
Signing time: Tue 01 Jul 2025 20:01:09 +0000
Manifest this update: Tue 01 Jul 2025 20:01:09 +0000
Manifest next update: Wed 02 Jul 2025 20:01:09 +0000
Files and hashes: 1: FBjUV3haJWMHiHYLmmKX3BoInLo.roa (hash: oKEaDRSFjba7izBu4ZUdfN2GUSpLeb9v8sA33inleqs=)
2: f01ZHCOtLGlHfX96HUzo687pWWw.crl (hash: lXyUPIVbShAcZPkDXwYBUltZgQPxRX4RdbHm6+7fN0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:94:3b:76:63:be:df:04:f4:fc:2c:d6:68:6c:33:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
Validity
Not Before: Jul 1 20:01:09 2025 GMT
Not After : Jul 2 20:01:09 2025 GMT
Subject: CN=248e6806ad0e2d398b52b871870b3f93b2f29452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:35:a1:9d:d1:6b:06:a1:73:c1:29:2f:3c:
70:37:43:5a:e4:4e:71:10:27:c7:e5:18:0e:15:5a:
21:86:2f:d3:7c:78:bc:b9:67:d7:aa:c6:34:02:1b:
af:26:ad:b7:e3:17:b1:d5:4b:c5:ec:31:56:1e:ca:
04:b7:81:9b:f3:dc:f5:ed:bc:b8:ad:d4:bf:27:1a:
41:3f:34:b7:00:05:db:fd:b3:ff:e8:ad:1d:f7:dd:
a2:8f:f3:b1:85:5a:d5:4e:f0:69:ef:6e:cf:f4:91:
64:2d:2d:89:73:e7:c0:49:19:34:c0:6a:4d:1f:a6:
5a:03:15:d6:84:0c:87:be:ca:66:41:8b:26:2d:e8:
60:52:b5:24:ad:f8:a0:99:ed:fd:8d:e6:6e:29:ff:
c1:78:f8:e1:0e:ef:6e:c1:b6:16:15:82:51:ec:9e:
68:df:d4:05:d6:a7:68:f9:4c:62:32:d2:3f:49:a4:
e5:a9:8a:d4:d0:e5:a7:cf:f6:62:d4:2b:6a:8f:93:
08:f7:68:6e:be:53:a8:6d:37:69:d5:08:e5:71:5b:
27:b1:07:f4:6f:73:78:e5:2d:74:14:1d:5c:3f:b3:
a6:aa:64:1d:43:13:40:46:a1:6b:b6:2a:0d:fb:f4:
cb:9a:14:cd:b4:a3:c3:2d:35:b3:f8:ae:c9:10:35:
ca:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8E:68:06:AD:0E:2D:39:8B:52:B8:71:87:0B:3F:93:B2:F2:94:52
X509v3 Authority Key Identifier:
keyid:7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d8:f2:ce:ba:55:72:06:77:ee:61:b5:bc:d2:10:b2:ba:af:
c7:a2:57:9a:20:ca:b8:6c:e6:9b:91:ea:de:6c:12:43:fb:d8:
63:5f:d5:0e:7c:a7:db:f9:bc:11:c1:ed:86:2f:b8:ad:f3:b6:
6d:11:54:d0:0a:b3:bf:2a:5b:de:79:26:69:0c:30:1e:97:f1:
2c:4c:a8:24:c4:c0:0a:e1:30:d9:60:17:31:9a:de:33:92:03:
c0:b3:0f:3b:b3:c0:c1:ed:84:99:df:8f:0b:62:7e:54:61:6e:
23:75:7f:53:8a:b2:bf:9d:46:9d:d7:95:5d:7e:d0:58:68:de:
4d:9c:34:04:6b:1c:e3:4b:7e:55:9f:db:32:e1:81:de:ef:4c:
43:a6:9c:d8:fd:ce:af:df:ef:b1:0d:83:68:b3:fc:e7:5b:c2:
ad:d8:4e:68:4e:1f:dc:8d:77:a9:98:52:cc:a6:a7:75:65:bf:
f4:5a:20:d0:27:5b:7b:af:2c:a8:66:3e:90:3c:f9:54:fd:89:
06:87:a4:6e:54:f4:16:b0:a8:ba:6c:79:48:4a:b8:76:e2:53:
49:65:df:5b:01:43:8e:49:a6:8e:0a:98:4e:b8:da:8d:fa:dc:
9f:81:21:0e:ed:d5:1c:81:a8:83:83:67:23:e8:26:fe:f5:ef:
78:56:64:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:51:48 2025 by rpki-client