Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
File: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft (raw, json)
Hash identifier: PD7GjpUWNflxoXQskbVE9p7Ls6lyPnKdY/fXjWDRobQ=
Subject key identifier: A7:4D:39:EF:44:29:25:6C:55:90:59:BA:DC:3C:F6:90:E7:15:59:16
Authority key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
Certificate issuer: /CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Certificate serial: 0197B6D7B2431B1090E9F9DD0D0673BD5D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
Manifest number: 0E8E
Signing time: Sat 28 Jun 2025 14:01:18 +0000
Manifest this update: Sat 28 Jun 2025 14:01:18 +0000
Manifest next update: Sun 29 Jun 2025 14:01:18 +0000
Files and hashes: 1: 1skXawq2SahvYTA2mnEOEbVR1u8.roa (hash: nHycrkajnYAr9VibtJNGtsv2Ftb47ENenxgpTd+DfzI=)
2: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl (hash: HWUPu+/DeeJtWGE9ioLv0RfMit2BEVgy9Z3sFt03dow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b2:43:1b:10:90:e9:f9:dd:0d:06:73:bd:5d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Validity
Not Before: Jun 28 14:01:18 2025 GMT
Not After : Jun 29 14:01:18 2025 GMT
Subject: CN=a74d39ef4429256c559059badc3cf690e7155916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bc:1c:31:90:55:89:1d:de:f7:d1:a9:f0:dc:
52:98:1f:f2:79:c8:46:9e:56:a4:c7:83:5f:ee:a0:
19:fa:b2:e8:4c:3b:dd:3b:d5:7f:74:1e:27:ef:cd:
b1:8c:7f:98:97:37:c4:5b:63:3b:0f:d4:c6:da:33:
0a:d2:55:26:c3:82:43:58:f9:7a:48:67:20:ab:c0:
10:b9:f4:2d:25:b5:54:40:57:44:bf:72:55:4e:2a:
fe:32:1c:7f:8c:b0:7f:c2:5e:a8:31:20:d8:99:20:
f8:c2:a5:8b:de:e4:fe:7c:f6:14:6f:36:60:b4:28:
57:8c:b1:a9:a7:07:39:f3:e1:a2:f9:e0:c1:6e:d2:
8c:0c:b0:28:3f:10:c5:6b:e8:c4:f1:0f:9a:74:9b:
95:94:fb:50:9d:cb:be:31:54:fb:0a:b8:09:a7:11:
e8:5c:07:98:0f:b6:d0:d3:09:a6:3a:7b:f3:28:42:
db:ca:49:e1:ab:f7:b1:7d:5f:50:1a:71:41:7e:8d:
d0:50:18:12:46:6f:fb:86:06:d9:0e:83:9a:12:5d:
dc:a8:01:ba:e3:68:44:63:69:4f:12:fd:31:ad:7a:
b2:45:51:b7:ec:cb:77:91:38:2e:b6:31:48:09:7c:
d9:d7:7c:a4:95:c5:15:b8:c8:ca:3a:a0:93:44:85:
a7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4D:39:EF:44:29:25:6C:55:90:59:BA:DC:3C:F6:90:E7:15:59:16
X509v3 Authority Key Identifier:
keyid:7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0a:6d:4a:b7:07:c0:31:3c:85:32:28:70:de:bf:eb:ac:ad:
33:a4:08:f2:6b:89:41:52:eb:df:5c:a8:4c:3a:ce:5d:10:e8:
93:08:47:01:37:b6:bc:fa:36:d5:ec:98:6e:74:59:fc:d5:dd:
9b:6d:71:ef:5d:1a:c0:a2:a1:29:fe:f1:99:f4:8e:4d:59:e2:
cb:a2:c6:d4:81:bd:b9:c4:24:af:78:5f:38:2b:4c:cd:82:68:
8f:37:ba:b4:24:82:53:5e:13:22:ca:ad:33:95:db:5d:fb:0b:
ac:92:cf:a3:e9:f5:de:c6:67:a7:5d:b8:40:13:3e:c4:c2:5d:
19:c4:f0:60:38:f5:39:18:c3:ea:08:61:59:5c:75:2b:08:f2:
3a:1b:32:e8:be:46:38:bf:43:4a:54:73:1d:c9:10:31:c8:e5:
4d:77:28:1d:c2:88:10:78:1c:6f:33:8d:10:5e:38:2f:6d:00:
7a:e7:54:0d:72:34:52:36:3b:79:9c:99:31:ab:34:ee:e8:ed:
a1:3f:43:af:a9:54:73:c6:19:48:f0:2c:dc:61:91:d2:94:f1:
bb:2d:0a:21:3e:0b:02:7f:07:58:0b:98:60:20:54:b4:e7:3e:
90:83:6a:05:ca:69:d2:95:59:3c:e7:fc:44:5b:38:ae:6b:80:
7d:f7:07:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:44 2025 by rpki-client