Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
File: fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft (raw, json)
Hash identifier: V2bSTvMCioD1gm8db5UUfs0y4V5+6H2PPI2xS5HRpsc=
Subject key identifier: 7C:E1:09:8A:84:AC:B4:E5:63:EC:8F:8F:15:D3:B7:E0:27:A8:A4:3A
Authority key identifier: 7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76
Certificate issuer: /CN=7c1bbb08037a876230406fa67379f980b5ab3276
Certificate serial: 0197C0B6A4E2352B22E328BEB03173CA5F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
Manifest number: 0E84
Signing time: Mon 30 Jun 2025 12:01:24 +0000
Manifest this update: Mon 30 Jun 2025 12:01:24 +0000
Manifest next update: Tue 01 Jul 2025 12:01:24 +0000
Files and hashes: 1: fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl (hash: hB4awxkT6iaAGks3aZJKliu8zT+aaCaga/sjvnrT/oo=)
2: mZO8S467jgcFzt406x0GmuRgZrg.roa (hash: LBo6nvo9ZS8C5pN/ZxvETZsZeRn1wNqdsDaMcfQFY7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:a4:e2:35:2b:22:e3:28:be:b0:31:73:ca:5f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c1bbb08037a876230406fa67379f980b5ab3276
Validity
Not Before: Jun 30 12:01:24 2025 GMT
Not After : Jul 1 12:01:24 2025 GMT
Subject: CN=7ce1098a84acb4e563ec8f8f15d3b7e027a8a43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:77:4c:d2:5d:71:e1:2a:95:d0:fb:77:34:
fb:ca:ea:99:ca:63:6e:bb:05:0b:d0:43:4d:50:0f:
f8:91:cb:ed:5f:da:5b:92:d0:70:cf:b2:80:7d:64:
12:6d:99:ff:57:f5:ee:12:d2:5b:c9:4d:fa:03:64:
23:65:a8:88:e6:22:08:d7:7c:a0:54:10:02:70:b8:
bb:59:b4:f8:73:64:aa:2c:4b:28:a6:99:2d:db:37:
b2:fb:14:0f:a6:a9:cf:7b:75:66:43:1e:ca:10:35:
5b:83:dc:45:80:15:47:35:51:17:ec:85:e6:a9:02:
0c:41:ca:62:c3:a0:71:ad:61:7b:12:5b:69:76:46:
0f:1c:e3:86:03:c2:8c:c6:c5:c2:f6:15:7d:51:73:
6a:b9:16:c4:c5:44:b0:4a:4e:bd:1b:b2:2d:bc:7a:
74:d3:a3:93:81:ed:20:06:3a:04:77:a1:cf:46:ea:
18:33:8f:20:da:9f:eb:c0:1b:90:46:53:a1:c6:a1:
f8:31:c8:0e:1a:d4:32:10:9e:f9:51:c7:84:ad:8d:
01:5f:c5:a6:fd:25:e4:91:b5:0f:22:ef:00:1d:07:
6b:14:c8:d9:77:54:46:ed:9e:02:e5:e1:47:78:52:
eb:b8:c1:5e:01:4c:93:d3:f4:16:66:06:65:a3:f9:
3f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E1:09:8A:84:AC:B4:E5:63:EC:8F:8F:15:D3:B7:E0:27:A8:A4:3A
X509v3 Authority Key Identifier:
keyid:7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7b:27:a8:3a:fe:b2:90:e4:14:1d:bb:98:59:88:8c:9b:6e:
c7:85:86:a9:0a:04:82:53:0e:37:b8:24:54:69:38:8f:6e:97:
67:72:03:d1:1f:69:a8:11:20:7f:1a:56:29:96:7b:94:90:42:
6b:4c:c3:2d:33:eb:95:b8:68:68:db:92:f9:8c:a1:d3:c8:21:
95:4c:2f:ab:ae:45:f7:c2:3d:e3:35:3c:a5:97:03:f3:72:60:
df:ae:74:fe:36:ac:63:89:ad:b6:0a:e3:70:a8:f4:50:6c:a0:
5b:cc:1b:4b:34:7c:0b:97:c7:3a:43:ce:fe:c5:4a:19:01:cb:
44:18:a8:da:3b:4d:fb:27:b2:53:55:53:08:8e:5c:8b:ab:de:
39:f9:8c:d1:ea:d8:2e:5e:ea:fc:56:be:15:fe:61:83:4f:d3:
3a:8a:98:5b:a6:48:a0:65:e4:90:9f:df:90:99:03:1c:2b:81:
50:c5:c5:e4:d4:06:38:a9:0c:2d:d9:84:a5:4b:9a:b5:a8:f6:
b2:44:3b:ab:c1:d3:81:5a:ed:af:10:06:15:05:fc:50:66:6a:
14:19:24:c3:e7:73:24:ec:4e:4b:22:ea:c7:97:d9:8b:9e:b4:
d7:74:56:f7:d7:58:bc:9a:54:a8:dc:1e:d6:02:f0:21:d1:df:
c9:61:29:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:01:10 2025 by rpki-client