Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
File: fBbp1X79rNP3vH6YSWtxn63Frkg.mft (raw, json)
Hash identifier: l4EqdWFd8xlgFqJ8kf55dDU1YtVVkBFspBTQi1RQeXg=
Subject key identifier: 2D:CF:2D:E9:1E:A5:E3:E9:AE:79:C3:F8:DF:8E:D2:C2:0D:25:3F:F0
Authority key identifier: 7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
Certificate issuer: /CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Certificate serial: 0197B7459ACB6C0434AF107A3EF9AD1F0A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
Manifest number: 0901
Signing time: Sat 28 Jun 2025 16:01:21 +0000
Manifest this update: Sat 28 Jun 2025 16:01:21 +0000
Manifest next update: Sun 29 Jun 2025 16:01:21 +0000
Files and hashes: 1: 9x0C1ycahYIp0jhnR--av7frEvs.roa (hash: TxO2zK2Lq7rKbvn4CVYDpMwFmpWv6oOsKAtfhF9aA3s=)
2: MZ1NK3H1SSDYucpTLwo3IW5W5kQ.roa (hash: SOv3KGJVuUaSms8BnGiLxniqNTKZVNDGof266hKwxIQ=)
3: fBbp1X79rNP3vH6YSWtxn63Frkg.crl (hash: 7ySmOrrZejEEAVnx95Czb369U8huXZbkwkZWoE9F1yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:9a:cb:6c:04:34:af:10:7a:3e:f9:ad:1f:0a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Validity
Not Before: Jun 28 16:01:21 2025 GMT
Not After : Jun 29 16:01:21 2025 GMT
Subject: CN=2dcf2de91ea5e3e9ae79c3f8df8ed2c20d253ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:fd:e3:40:ed:6f:3d:f8:33:c5:d7:93:57:
98:cf:db:a9:78:12:e7:65:45:ad:9a:d7:a6:c0:e7:
a5:02:46:11:57:1b:a4:bc:19:f2:28:0a:8a:b7:99:
dd:64:f2:4e:2f:17:eb:61:52:65:81:7c:61:e1:5f:
9e:8d:4a:8d:da:5a:fa:db:9d:43:95:8c:b5:97:12:
dd:f7:60:f7:e3:f5:1e:3b:f2:6d:0f:d8:79:d1:90:
8a:b5:34:af:21:8f:91:a0:10:73:c4:47:32:59:16:
22:74:9b:eb:0f:d2:9e:6c:9c:44:cf:82:74:3d:2a:
4c:f6:43:bc:80:8e:3e:9f:90:ee:97:19:0a:3b:41:
98:6b:81:44:7a:39:a8:8e:c4:fc:5d:6b:35:3b:ec:
b5:cb:6c:2e:dc:9e:fa:c8:4c:ca:94:c9:97:a2:54:
fd:10:c8:70:2f:c9:61:55:e8:bd:4e:4c:c6:1c:5f:
5c:2e:15:e4:46:31:05:01:5e:4c:09:1f:f6:87:00:
db:0b:ac:10:d7:b8:b3:26:6b:8e:a1:76:c9:01:21:
6e:ab:0e:cf:a0:ef:34:95:32:4f:71:64:28:15:e4:
d9:fb:c9:96:3c:a8:9a:ec:b6:84:0a:e5:26:e4:d2:
be:b6:a0:2f:69:5c:8e:33:5a:39:e4:ce:2b:38:c6:
fb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CF:2D:E9:1E:A5:E3:E9:AE:79:C3:F8:DF:8E:D2:C2:0D:25:3F:F0
X509v3 Authority Key Identifier:
keyid:7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f0:03:ba:0b:da:51:47:69:47:dc:3f:74:68:12:f6:f1:d5:
0a:b1:70:51:b8:35:23:07:84:07:fa:37:58:24:e8:01:a6:83:
05:6a:07:68:11:5f:e3:15:0e:ab:fe:6a:cc:25:06:65:f4:66:
5e:70:6f:54:15:7b:b2:95:d6:91:ff:61:bb:16:e6:77:cb:e1:
73:e7:93:da:d7:8a:f2:f8:fa:61:ce:d3:3d:67:4a:a0:b4:32:
e6:ac:9d:af:ca:8c:78:17:2c:d1:b9:98:38:80:20:f8:ad:1e:
bc:dd:fe:25:91:8c:a2:d4:36:48:4f:8f:1c:06:a4:bc:6a:cb:
a0:6f:7b:f0:c3:26:31:fa:1b:e4:eb:4e:2e:b7:97:66:1f:aa:
42:43:9e:f5:09:76:4b:16:1c:36:35:d0:9c:74:ef:e6:ad:fa:
61:55:69:3f:88:70:f3:1b:26:03:b3:08:12:99:3f:d3:54:88:
00:06:df:71:97:a4:64:4d:fd:cb:c2:19:1a:da:0c:f9:a9:2d:
f5:c7:f2:07:74:a6:c2:fc:10:7d:35:1f:cb:0b:c6:4b:5e:d7:
55:7c:54:e3:7a:0d:cc:c3:7c:9b:0f:b1:56:4d:11:87:fa:c2:
0d:b2:68:ab:86:6e:d7:d1:e2:21:9d:5d:b1:7c:e1:3f:04:4d:
60:36:8c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:12:12 2025 by rpki-client