Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
File: fWeULOCqD9J6DNy3MTTe_cxhROE.mft (raw, json)
Hash identifier: UGOjLEiuQ3iTXDkBYqTd44p1BoV7jnrcXzC5v4IKc/8=
Subject key identifier: 27:4F:C5:AB:C4:8F:9E:B9:57:06:FE:7B:00:A9:99:3D:9D:FF:85:04
Authority key identifier: 7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1
Certificate issuer: /CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
Certificate serial: 0197C0ED7278978334811BA6FE8AD326D389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
Manifest number: 05AD
Signing time: Mon 30 Jun 2025 13:01:16 +0000
Manifest this update: Mon 30 Jun 2025 13:01:16 +0000
Manifest next update: Tue 01 Jul 2025 13:01:16 +0000
Files and hashes: 1: fWeULOCqD9J6DNy3MTTe_cxhROE.crl (hash: ejxFZKAHJUBS7VakkW+ku6cHn93uIKbd5SlU52eoI4Y=)
2: zA58kveqXgli4S_Gmvm71Z6gYvA.roa (hash: U7XAD6S0aMw4lkO5A8lwquVG5gdGFXidXMd3PA0M/Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:ed:72:78:97:83:34:81:1b:a6:fe:8a:d3:26:d3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
Validity
Not Before: Jun 30 13:01:16 2025 GMT
Not After : Jul 1 13:01:16 2025 GMT
Subject: CN=274fc5abc48f9eb95706fe7b00a9993d9dff8504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c1:b4:73:cd:d0:96:3e:73:0f:cc:01:c8:f4:
de:9a:54:68:3d:bc:04:08:a3:d4:32:33:5f:40:ef:
e5:91:f7:91:72:fe:58:1a:7a:8d:d0:76:a0:11:83:
bf:dd:5c:67:65:18:05:a9:67:8c:ec:80:dc:35:1c:
00:50:69:7b:72:11:ca:02:c3:68:59:db:04:16:68:
e6:2c:b1:88:1b:34:0f:c6:d3:d6:c7:71:79:bc:3d:
70:41:7d:b1:be:25:76:10:ec:b3:52:8f:98:3a:11:
55:db:7a:4a:9f:2b:03:f4:53:a3:36:34:e3:df:98:
0f:73:d5:4d:42:61:1c:92:91:4b:2a:07:9c:76:3b:
0a:97:fd:b0:59:9f:02:c9:0a:c5:3b:5b:c2:85:e6:
c4:d7:7b:80:5e:c5:33:be:75:82:0a:41:0e:b6:5c:
7a:a0:66:25:ea:31:81:60:93:fe:5c:48:2b:ec:9b:
24:33:96:46:b6:a9:03:24:c6:cc:f6:0d:65:ee:a5:
34:d4:24:21:00:43:f5:f2:4b:78:bd:22:69:44:a2:
29:23:ab:f3:b8:be:00:12:9d:34:5f:90:62:c1:cf:
02:62:58:d9:05:cc:e0:eb:74:ee:fd:7e:a8:08:d4:
98:0a:b7:c1:fb:72:77:86:aa:4c:a2:75:5f:d1:22:
22:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4F:C5:AB:C4:8F:9E:B9:57:06:FE:7B:00:A9:99:3D:9D:FF:85:04
X509v3 Authority Key Identifier:
keyid:7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:57:cc:86:7e:cc:b2:5c:b9:57:e3:4e:e9:6e:5b:bf:cb:03:
62:28:ca:98:08:eb:8f:18:07:8f:ec:54:63:24:0a:8c:d1:11:
25:e2:df:72:89:40:e6:6c:d5:d4:75:28:b2:aa:2d:d6:d6:e4:
75:ba:dd:21:17:78:b1:6f:bd:26:88:ef:d9:fd:c5:3d:b8:fa:
f9:28:0d:bc:bd:0a:20:72:04:3b:ec:bb:97:a1:fd:33:16:a7:
b3:9c:c5:69:f0:a3:de:3a:6a:68:10:86:f7:7c:8b:e3:92:49:
6b:b3:5d:8b:34:71:d4:6d:f6:33:c3:b4:dc:ef:11:44:bb:11:
68:27:bf:7b:9c:9a:c4:62:cc:69:c6:eb:5c:05:b3:96:7e:59:
da:14:fa:d9:03:11:d2:c4:0f:fd:6b:19:a0:ad:b9:91:55:99:
06:c4:e8:18:50:57:a0:51:f0:e8:06:cd:a5:dc:52:95:c7:39:
e8:ee:fd:be:f2:1e:11:3b:65:b7:89:1d:6b:aa:77:96:cb:2a:
7c:2d:9a:0f:ab:e1:98:71:f5:69:26:b0:b4:44:ae:1d:ea:f0:
6e:14:75:c5:32:e3:2b:66:0d:ae:de:bb:bb:23:9b:60:2a:ad:
be:9a:df:c5:ba:08:80:0f:6c:31:5c:ee:da:81:10:08:74:24:
14:8e:d8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:38:25 2025 by rpki-client