Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
File: sFRCxP_pwddh58VpNg6tBCQ4-QM.mft (raw, json)
Hash identifier: PhBsUrysbV80M6pIrdZBXal8+LzPLZ5NlcNFHrR0Q9M=
Subject key identifier: DF:E0:01:97:5B:A1:DD:2D:F7:BF:61:E1:EB:A2:42:F9:4A:99:E5:96
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Certificate issuer: /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial: 0197BB5948FF4B5DFE543550C65DF1D70018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
Manifest number: 136F
Signing time: Sun 29 Jun 2025 11:01:20 +0000
Manifest this update: Sun 29 Jun 2025 11:01:20 +0000
Manifest next update: Mon 30 Jun 2025 11:01:20 +0000
Files and hashes: 1: 2eKsq5jA6VcPDqKfgIi0E91JruI.roa (hash: qGG/9s4LOddy+BisdFXc5EQ3ZhAY8xD4+uBXz/g3pwU=)
2: 8v_aiBgvpLDJT4bE3zxJWwrf4Ao.roa (hash: wcB7NvMB7REyv6Xd72Vh3AOoxDTtyyThVZ07XtgTGL0=)
3: sFRCxP_pwddh58VpNg6tBCQ4-QM.crl (hash: jU1yUmZjsM3JY7BoxsQMuqhjn1g99XMkn1X8ZC/ggag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:59:48:ff:4b:5d:fe:54:35:50:c6:5d:f1:d7:00:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
Validity
Not Before: Jun 29 11:01:20 2025 GMT
Not After : Jun 30 11:01:20 2025 GMT
Subject: CN=dfe001975ba1dd2df7bf61e1eba242f94a99e596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:97:b7:d4:f5:77:7f:fb:61:8e:e9:ef:8f:
c9:cf:bd:f2:bd:8f:40:ee:07:7d:af:5c:e0:0d:cb:
d7:7d:9c:1a:79:3a:5d:78:ac:c8:68:68:9e:ed:b7:
b8:4a:d4:c9:73:f5:38:16:1a:da:33:c5:a0:85:ab:
5a:a0:3f:2c:2e:2b:3e:04:1c:a1:30:a4:6e:82:27:
5e:77:86:91:1c:72:c0:90:c4:fb:4f:dd:a9:63:f9:
f8:bd:ec:a0:41:e7:3a:f1:72:f5:9b:f7:ed:d8:12:
0e:5b:c6:71:62:c6:aa:14:cc:81:f6:3a:9f:ef:5b:
5b:d2:bd:56:a9:a4:90:0c:de:5c:bf:75:78:44:91:
a2:e7:19:4b:36:26:10:a0:1f:18:57:21:c6:d7:51:
75:30:27:a7:ba:d5:49:44:fb:05:d1:b0:4f:53:db:
25:75:49:8f:c9:a4:b5:2a:98:f1:9d:11:69:9d:1b:
5f:6e:4f:54:3a:c0:f4:6b:b3:78:bd:99:0a:2e:91:
3f:2b:62:95:6b:fe:d3:cc:3f:ee:cf:bf:64:e0:20:
df:12:e1:5b:26:5b:8d:e6:75:17:56:a2:c7:d1:ee:
71:1a:57:96:3b:0b:51:52:02:7e:1e:1d:f3:e3:f5:
a2:ed:82:f4:a2:a9:ab:16:f6:25:92:01:70:93:7f:
b2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E0:01:97:5B:A1:DD:2D:F7:BF:61:E1:EB:A2:42:F9:4A:99:E5:96
X509v3 Authority Key Identifier:
keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:78:e7:b0:38:e9:75:61:cd:77:6e:d1:b7:52:dd:da:f3:66:
b2:0a:15:0e:fb:d1:af:de:6e:6d:ba:a9:f6:f6:5c:7c:1d:de:
f2:95:0c:5b:1d:6c:46:95:ca:8a:5a:9d:76:9d:f5:2d:28:68:
19:03:45:94:59:25:0f:7c:a3:04:9e:71:05:78:9b:2f:17:34:
a0:09:4e:85:21:3e:40:0b:bb:d6:99:ce:e6:a7:3d:a8:91:e4:
7a:5b:d1:e3:60:1f:d4:5f:a2:5e:fb:b3:93:d3:d0:f1:93:af:
f1:94:e2:f2:03:ed:c9:6d:91:89:1c:7f:5f:27:e9:5f:62:1f:
ed:dc:14:88:3e:56:7c:c3:4b:c7:28:43:bd:2a:94:61:3e:8f:
16:06:67:49:e4:88:f5:aa:a4:e6:5f:6c:43:a6:ab:25:c4:62:
1b:24:56:33:01:45:a0:ee:b5:01:42:9a:84:ae:15:08:e5:b5:
58:1e:8d:10:9a:07:10:24:99:49:ba:e4:b5:67:dc:15:87:3e:
33:d2:72:c6:b0:ae:3a:d6:67:a5:5e:1e:9d:18:e2:0c:6d:93:
6e:61:04:95:36:e3:4b:7f:d6:52:54:8f:1d:81:91:53:ab:42:
df:0d:d4:db:02:01:00:0a:51:d7:b9:ec:11:7a:a3:da:ed:23:
90:a2:69:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:56:45 2025 by rpki-client