Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
File: fxePr2QB4vNxbjF2RWnfcx31jyI.mft (raw, json)
Hash identifier: lbzlg+2oRefdY+y+hc/bSwid78O+Yb7S+UharHYvUhY=
Subject key identifier: EA:78:3B:77:83:58:0A:10:36:78:EC:33:26:7B:55:FF:A7:E7:30:28
Authority key identifier: 7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
Certificate issuer: /CN=7f178faf6401e2f3716e31764569df731df58f22
Certificate serial: 0197CA5E2E7A5A53E5B4505599D63EFC1C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
Manifest number: 1032
Signing time: Wed 02 Jul 2025 09:00:59 +0000
Manifest this update: Wed 02 Jul 2025 09:00:59 +0000
Manifest next update: Thu 03 Jul 2025 09:00:59 +0000
Files and hashes: 1: aO3R8Yo3eBCEfuvERnCJCw4GHKw.roa (hash: 0+s8Oxr+vc9N7zEky4ZV5zDnUpXVmpiBsxhTGsefbzg=)
2: fxePr2QB4vNxbjF2RWnfcx31jyI.crl (hash: 6C48Ez2S5vyBw/ivA8KnHQeeFBYdL8JY+oKSxqA4P5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:2e:7a:5a:53:e5:b4:50:55:99:d6:3e:fc:1c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f178faf6401e2f3716e31764569df731df58f22
Validity
Not Before: Jul 2 09:00:59 2025 GMT
Not After : Jul 3 09:00:59 2025 GMT
Subject: CN=ea783b7783580a103678ec33267b55ffa7e73028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:54:61:bd:44:b3:69:c7:82:5f:37:04:95:
86:ee:05:c9:57:7f:8d:5f:70:2e:f1:5d:c2:a9:01:
87:7f:c7:ea:ef:43:43:5c:72:76:f7:82:8d:c5:2f:
56:cf:8f:78:e3:fa:df:e8:42:08:78:eb:89:fb:ba:
5f:09:e8:dd:76:2c:26:ad:44:f1:9a:db:93:be:28:
55:60:45:da:54:c0:5f:e6:9d:d1:f6:28:ad:e5:37:
a2:48:cc:17:37:4e:f3:a8:5b:bc:2e:32:b0:ff:83:
01:24:bb:42:1d:81:fc:68:e4:c3:f0:1e:79:4e:a2:
11:3b:95:ac:92:59:a2:58:1b:cc:d2:65:6d:3f:97:
4d:1e:16:af:d5:68:f8:64:f4:0a:fc:fd:f7:50:01:
cd:c4:71:fe:ed:9e:44:05:bb:f1:c9:4b:8f:51:d8:
8f:ce:99:21:d0:b8:16:71:de:16:0f:d1:41:55:25:
f5:8a:bb:23:cc:43:ce:a9:10:20:c2:12:01:c7:84:
f7:2b:c9:cd:19:ad:03:1a:24:c7:d7:03:15:45:8e:
1d:6c:8b:64:bd:d1:32:9f:3c:33:d2:06:0d:06:b3:
16:71:59:f3:9c:9e:90:9f:cc:92:fe:d5:3f:53:7f:
d3:95:6f:25:92:83:93:b8:66:d7:91:03:63:75:90:
82:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:78:3B:77:83:58:0A:10:36:78:EC:33:26:7B:55:FF:A7:E7:30:28
X509v3 Authority Key Identifier:
keyid:7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d4:4c:22:b7:37:14:88:f7:df:5d:d4:f0:db:e9:dd:e2:5a:
fd:2c:66:44:54:a4:f3:60:25:60:11:42:14:23:1f:a8:78:f6:
d3:12:78:b7:6f:18:77:ed:ea:da:aa:a2:08:59:82:7c:20:85:
bc:c7:d2:6f:4f:fb:80:0a:6d:98:59:70:1a:37:64:e3:21:50:
b3:43:4c:38:3c:61:a8:ae:51:86:0a:86:ad:81:0f:a6:e4:95:
91:0e:3d:e2:18:b5:d9:58:90:41:e8:9f:e2:07:94:b4:fa:91:
c5:8c:7c:45:b6:e9:ac:b1:56:7b:57:28:db:4d:83:f3:f5:90:
b0:17:1a:03:81:da:b8:98:be:86:20:59:f9:da:7f:74:a3:46:
e2:49:7a:be:e8:32:0d:77:b8:11:a3:29:ce:de:73:39:6a:2d:
13:0b:d5:d9:0e:c9:05:f6:93:1d:24:f9:22:3f:cf:b0:59:2c:
c7:b1:7a:27:c8:a4:90:69:10:c5:a9:2d:71:aa:c8:ce:82:f7:
bd:88:38:ad:73:36:20:81:60:93:33:60:84:0e:e5:81:77:20:
86:60:81:08:ef:d6:02:02:94:2b:2e:e9:be:f1:77:bc:cd:cf:
4b:9c:a1:bb:5e:67:8b:81:31:6f:56:21:bc:46:ce:2e:3d:28:
e5:db:0a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:33:46 2025 by rpki-client