
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
File: fG3HOVgVrwRQSPTOORDQQAj_Onw.mft (raw, json)
Hash identifier: zLWM4u9DsxlLTeiO7/j/87KjwDnG/aXZyzzpXk0KhmM=
Subject key identifier: 44:9A:29:92:13:AB:3E:E9:C9:5F:BD:1A:54:69:61:76:CB:66:14:B2
Authority key identifier: 7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
Certificate issuer: /CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Certificate serial: 0197B821142337991BE13EC9B88B864A3BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
Manifest number: 1296
Signing time: Sat 28 Jun 2025 20:01:04 +0000
Manifest this update: Sat 28 Jun 2025 20:01:04 +0000
Manifest next update: Sun 29 Jun 2025 20:01:04 +0000
Files and hashes: 1: WWnUjL9xa5N7RsAiSnLThhNhQII.roa (hash: A7PEzwDFjxl/k3orxXArS56nuTh+qfj6pNUO4Y3XuLQ=)
2: fG3HOVgVrwRQSPTOORDQQAj_Onw.crl (hash: Oxe+5gNgHyFypGKdKE4wNqQpuIexrvUV8wLJp9vfX4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:14:23:37:99:1b:e1:3e:c9:b8:8b:86:4a:3b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Validity
Not Before: Jun 28 20:01:04 2025 GMT
Not After : Jun 29 20:01:04 2025 GMT
Subject: CN=449a299213ab3ee9c95fbd1a54696176cb6614b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:f7:ac:42:9d:03:fd:5e:ce:92:d9:05:ed:
e6:a3:ec:33:f9:cd:74:67:0c:e1:cb:08:a9:06:48:
c3:72:aa:17:f1:db:e9:89:f8:e8:ea:0d:13:a3:65:
b9:03:91:bc:8d:92:73:95:95:fd:cf:a0:a5:8f:00:
82:49:ec:6b:c5:bb:2b:71:5d:ba:f1:cc:ea:ec:4e:
cd:60:1c:3e:88:cb:7f:c0:56:50:b8:ae:bb:ca:aa:
99:a7:e0:b8:8b:10:22:4c:26:4e:cc:b9:91:90:f8:
a4:4a:1b:18:7e:f4:36:41:e6:27:67:53:a9:17:47:
28:ea:7f:14:99:e2:bc:f8:13:72:a7:f2:9e:2a:e9:
e1:d8:bf:4e:12:6f:a4:c8:b0:41:f7:f2:0e:98:ca:
4e:e6:3f:3c:d4:be:92:89:af:74:3f:e7:86:c0:b4:
f2:f6:b3:48:a7:d6:7b:86:59:dd:7e:0b:0e:25:67:
17:55:fe:a2:17:81:c3:54:05:75:5c:85:59:fe:be:
1d:3a:d7:2e:56:85:23:d2:ad:d9:3e:73:f7:f9:8a:
9e:57:08:d8:09:19:2e:66:ac:34:84:4b:2c:b7:5f:
ff:93:a8:25:97:27:62:39:8a:fb:76:a5:3d:64:c7:
9b:c7:c3:93:08:1e:4c:55:ca:56:92:ac:66:d5:bc:
06:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9A:29:92:13:AB:3E:E9:C9:5F:BD:1A:54:69:61:76:CB:66:14:B2
X509v3 Authority Key Identifier:
keyid:7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:15:dd:2d:98:c8:26:5a:1b:13:5b:03:7b:dc:5d:54:e4:65:
65:9a:b7:12:fc:fb:45:bd:80:91:8d:b6:02:7f:55:6f:d6:8d:
08:ef:31:b8:48:28:39:56:a4:8e:ba:b0:dc:3f:81:41:88:9c:
4f:e5:27:89:5a:02:a7:b7:4b:7a:c8:71:3d:5d:49:85:7c:05:
37:44:93:e8:3d:6f:4c:2f:d7:b0:c1:45:f6:30:5c:5f:ec:2a:
59:68:55:ed:0e:59:5a:e3:a3:7d:f5:b6:94:ca:7b:0a:9e:49:
85:3b:86:e3:42:23:5b:2e:01:55:a3:7c:66:69:5c:d0:00:8b:
26:da:4e:30:ce:9e:84:12:86:da:b1:2a:f0:8b:14:ba:af:bf:
a1:a7:d6:4f:60:c8:b0:cf:fc:57:da:54:ef:19:b1:d0:11:57:
c9:c9:bd:f7:e7:af:0a:76:1a:51:b8:d1:80:03:a3:bb:a5:f8:
86:a9:00:e3:48:9f:46:c3:b5:db:7a:ef:86:ac:b5:a6:d1:05:
c2:a2:0d:94:38:c4:6c:42:5b:97:92:21:63:c3:2b:c0:d0:1e:
7f:f0:3e:1c:81:53:bf:5f:d8:4d:01:c6:bb:d9:b0:ca:c2:ef:
ca:42:45:3e:57:0a:82:22:1a:ed:3c:f0:62:37:57:47:f4:30:
c5:2a:a0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:30 2025 by rpki-client