Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
File: fG9Mjzo3f0bFUiAJZ4841hVxxso.mft (raw, json)
Hash identifier: a8YZn0c2zhb0Zx+SqTh0IsUCJ9BKntzabgKkiZtehsc=
Subject key identifier: 34:9B:E9:11:57:58:8D:AD:33:80:A7:73:A9:98:7B:51:C6:81:3B:9E
Authority key identifier: 7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA
Certificate issuer: /CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca
Certificate serial: 0197B7EA913822C1CD81D3F94AC5601C95C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
Manifest number: 0A2C
Signing time: Sat 28 Jun 2025 19:01:32 +0000
Manifest this update: Sat 28 Jun 2025 19:01:32 +0000
Manifest next update: Sun 29 Jun 2025 19:01:32 +0000
Files and hashes: 1: B7oKCLtj5wVT7Rx672od7NSTVbM.roa (hash: zBd0U1lEA6sR+ArBNpdCg/lk4ok0wNXK1hGjWgT7oxA=)
2: fG9Mjzo3f0bFUiAJZ4841hVxxso.crl (hash: EwDKVmcQVTrRn32HTqK3eg9gNVCQWxKJm9Au3Cmlkag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:91:38:22:c1:cd:81:d3:f9:4a:c5:60:1c:95:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca
Validity
Not Before: Jun 28 19:01:32 2025 GMT
Not After : Jun 29 19:01:32 2025 GMT
Subject: CN=349be91157588dad3380a773a9987b51c6813b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:fc:d0:5f:ae:d1:fe:b8:0d:66:91:fc:ef:
14:72:d4:b4:92:61:98:b5:5b:79:44:74:d6:a2:5e:
84:f1:39:59:09:f8:ee:68:7e:b8:8a:7a:1c:ea:1e:
dd:e1:b5:d6:2d:3a:b0:53:61:6a:4d:76:23:7d:d9:
85:64:9f:2b:82:78:ad:cb:41:d0:1f:5c:dc:62:7b:
08:7c:d7:14:4b:ff:cd:53:61:4b:be:fd:b1:71:45:
ef:70:c0:3a:94:e4:6c:4f:0c:c5:59:40:82:36:e6:
d0:ae:dd:97:b3:85:93:78:9e:d8:6e:69:a7:d6:84:
ec:1c:a0:86:eb:1c:c3:be:b7:bb:fd:4a:e3:aa:ae:
4f:b9:11:31:31:30:ef:df:d7:36:46:9c:0b:9b:a4:
a1:cb:83:0a:8e:41:4b:73:5d:15:64:d7:d7:03:17:
e3:a6:cf:c2:27:90:64:28:76:2c:b9:68:94:3e:12:
cb:9c:b1:6e:48:4e:b2:ed:73:92:dd:a3:e2:4b:02:
fa:5a:75:a8:2f:ae:05:bd:c4:3f:02:c4:c1:97:11:
be:80:c8:ac:96:d0:c4:ac:b6:4c:f9:41:d5:22:2e:
24:18:bd:46:50:2e:0d:78:f7:70:77:d4:75:0c:29:
af:5e:73:9b:36:b7:74:68:26:62:f6:17:af:18:62:
f1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9B:E9:11:57:58:8D:AD:33:80:A7:73:A9:98:7B:51:C6:81:3B:9E
X509v3 Authority Key Identifier:
keyid:7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2e:ae:20:b8:b4:84:bf:4f:ea:5c:ce:1b:9f:91:cf:3d:26:
49:98:cc:67:f7:2b:28:b3:a6:4d:b6:74:c8:bd:09:83:a3:d8:
02:a5:5b:35:ac:a2:82:71:b1:6a:71:a0:ef:59:db:b1:81:3d:
e6:67:f0:f0:ca:ff:9e:65:09:f4:41:a5:9a:97:69:db:5a:7c:
12:e4:2b:e5:ed:59:f6:45:7c:01:62:df:f2:dd:9f:e0:d1:fe:
8f:09:af:ee:1c:8e:73:23:60:9b:8e:ed:1f:86:48:ed:9e:1b:
f5:16:a7:a2:73:3b:d6:7f:ab:2b:81:6f:7b:0d:7b:9a:6d:76:
c4:75:3f:5c:b0:04:86:9a:25:7c:7d:2c:ee:83:dc:45:16:dc:
2e:d4:c2:58:a1:f0:b7:60:6a:56:00:09:9f:33:a1:f1:4e:b1:
24:0f:06:d6:52:98:b5:2a:ab:a9:9c:e6:1b:8a:46:09:bb:8e:
c3:0b:be:c0:67:da:0e:ea:77:e8:59:13:05:40:ef:5f:0d:95:
0a:5f:aa:cd:87:21:b8:ba:cd:2f:09:37:71:79:59:af:7e:23:
8e:ac:de:d3:10:5e:1f:d2:e6:9f:50:8e:fd:5e:88:ec:f0:b6:
5b:7d:67:db:28:76:7c:99:b0:83:9e:63:e7:fd:74:3e:f1:70:
18:f3:60:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:38 2025 by rpki-client