Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
File: fQL6LFuiiSBF581Qpa39VNbbuMI.mft (raw, json)
Hash identifier: nKYL2swKfUS4/xHyc2vhUw+N4EXcH0gcqyj7JYJmH5E=
Subject key identifier: E8:41:E3:B8:56:C7:D6:7F:F3:AB:8A:4D:1D:EC:F8:9E:73:1E:7D:6B
Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
Certificate issuer: /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Certificate serial: 0197B77C0863EAFC08049633CA20923AB801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
Manifest number: 1493
Signing time: Sat 28 Jun 2025 17:00:48 +0000
Manifest this update: Sat 28 Jun 2025 17:00:48 +0000
Manifest next update: Sun 29 Jun 2025 17:00:48 +0000
Files and hashes: 1: D0FtQbvZQzXxktB27DUgaEKlwyA.roa (hash: TJTUE8/n7jdIuoCoqw/ggE/DDwa5ne0vVYVe1eoGnag=)
2: RNOXkvXJ_ycI8OmwcuHSmaLAtH4.roa (hash: LUqOAenIf0vYCqR2aBBDyfZ5SWi7hY4GyrNgtlhdeZw=)
3: fQL6LFuiiSBF581Qpa39VNbbuMI.crl (hash: lZ24PNJhSXiO293xjrFAbIat78peiXU7hJVk/iWcly4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:08:63:ea:fc:08:04:96:33:ca:20:92:3a:b8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Validity
Not Before: Jun 28 17:00:48 2025 GMT
Not After : Jun 29 17:00:48 2025 GMT
Subject: CN=e841e3b856c7d67ff3ab8a4d1decf89e731e7d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2f:3b:a5:9c:81:4e:a7:c9:20:84:82:2a:ec:
51:64:cb:67:ef:6a:5b:95:bb:30:6f:45:9d:c2:3c:
c0:8d:31:7e:5c:50:1f:1e:c2:82:c6:a8:82:01:d5:
33:7c:3f:ab:5d:b0:83:6b:0c:2f:5d:1e:1e:e2:51:
a8:d4:b8:75:48:bb:fd:e7:5d:c8:51:6c:e1:5e:57:
93:8a:00:5d:a0:49:5e:69:5f:ae:ac:74:de:47:a6:
97:ad:d9:d4:34:89:85:6b:56:d1:f3:97:56:e7:85:
60:b8:59:bb:3c:f5:d8:9e:cd:43:96:c8:d1:90:02:
c6:2d:eb:b3:82:a1:e6:13:2f:f1:31:b0:25:c8:39:
0d:d5:2a:7b:1a:97:df:9a:9d:a2:cc:62:4d:b6:f7:
d8:94:6f:1a:98:63:36:e8:a9:39:30:fc:e2:30:8c:
6a:cb:c8:6b:5f:53:6d:a2:70:6e:6e:72:fe:1f:16:
1c:62:82:28:b5:87:4d:e4:37:e6:78:37:88:56:01:
c3:60:c3:67:76:04:d8:d0:0b:fe:9a:be:c5:9d:4e:
19:c4:a1:ce:62:c3:af:9f:01:e9:9b:6c:3b:56:10:
bb:a5:0a:10:f5:dd:3d:93:9c:bd:64:0f:c2:ba:7c:
03:be:cd:42:16:79:78:c7:cb:24:bc:39:4c:da:2b:
ec:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:41:E3:B8:56:C7:D6:7F:F3:AB:8A:4D:1D:EC:F8:9E:73:1E:7D:6B
X509v3 Authority Key Identifier:
keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:be:46:57:8e:dd:dc:b5:aa:75:fb:9e:cf:b3:5d:f7:94:f5:
dc:35:62:18:fb:ed:bc:3f:5c:ca:70:fc:d0:d2:71:5f:a1:f3:
00:09:45:27:d6:c6:9f:50:57:34:c5:40:66:d8:f7:47:15:72:
3a:f8:7f:74:a0:0e:49:ee:a7:47:94:2f:06:18:83:11:14:f6:
06:8c:06:fa:cb:87:71:79:f2:5b:fe:77:7f:dd:67:50:e6:97:
96:d5:18:cc:e9:f5:ad:43:3e:ff:91:8e:1e:f6:14:4f:9e:bc:
ac:de:d9:0e:88:72:d2:2d:d1:29:18:81:ec:f1:9f:76:cf:10:
ad:01:e6:9d:1a:7d:29:d4:96:52:5d:a2:59:ba:b4:8d:7a:ca:
52:83:ad:4c:94:ed:94:45:3e:e1:08:ef:ea:85:5f:0f:f5:95:
96:c4:e9:6d:7b:20:0c:c7:bd:5c:b7:6a:ce:15:44:8f:29:c0:
73:5f:21:86:c7:e4:ac:23:65:ba:93:9c:31:4e:fa:cc:dc:0a:
08:3f:d7:27:75:43:91:ee:8a:eb:3b:11:c5:5b:58:10:a9:7d:
ef:a3:e2:a9:9b:31:f6:9c:31:0b:12:ba:0a:ec:0e:a1:ba:0b:
2b:4f:89:c1:d6:d7:df:c0:b2:a6:2b:4c:c2:dc:6a:41:7d:1d:
af:f8:3f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:17 2025 by rpki-client