Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
File: fpBL1x1v50pnFo_ZE-gocidVtJQ.mft (raw, json)
Hash identifier: oz/bsrJlQ5ZK+sGA2JTBNfROdr7DIeVbiBBSE8H5TK4=
Subject key identifier: 7C:F2:DD:98:51:D0:45:86:20:CC:EE:7B:88:5D:B3:6A:0E:CA:78:34
Authority key identifier: 7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94
Certificate issuer: /CN=7e904bd71d6fe74a67168fd913e828722755b494
Certificate serial: 0197B9D8A6BA421AADED22B985F8C79AFCF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
Manifest number: 067E
Signing time: Sun 29 Jun 2025 04:01:12 +0000
Manifest this update: Sun 29 Jun 2025 04:01:12 +0000
Manifest next update: Mon 30 Jun 2025 04:01:12 +0000
Files and hashes: 1: _hcAKZ9Rlwo19weMs6Swq188ePE.roa (hash: Y66JbaTRqDcxPjnoFMPZ0bWBf5qCwdTDkeUZq42NBUE=)
2: fpBL1x1v50pnFo_ZE-gocidVtJQ.crl (hash: nUjS9wcUVk0PXeRyGJBp/ZAH7xKgeggd0X3T2etd9uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:a6:ba:42:1a:ad:ed:22:b9:85:f8:c7:9a:fc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e904bd71d6fe74a67168fd913e828722755b494
Validity
Not Before: Jun 29 04:01:12 2025 GMT
Not After : Jun 30 04:01:12 2025 GMT
Subject: CN=7cf2dd9851d0458620ccee7b885db36a0eca7834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:aa:0a:1e:e0:a3:a0:01:0d:87:78:61:89:89:
5d:9c:7e:f3:f2:6f:f5:1c:8f:ee:0c:5b:63:16:09:
54:90:7f:50:43:29:85:1a:67:60:2d:ed:52:a1:3f:
b0:a9:32:7b:d2:89:c9:31:b6:1c:74:fc:22:e4:af:
42:10:22:b9:ab:6f:8c:ad:21:8b:a7:cb:d4:40:b4:
e2:3c:62:a5:10:df:31:0e:8d:04:a3:59:7d:93:9f:
8d:71:c8:3e:80:80:2e:de:60:60:87:5f:a9:0a:95:
17:fa:36:a7:5e:7c:9b:3e:90:45:3c:fb:f4:a4:57:
b0:c5:2c:17:ac:1f:8a:82:1f:97:89:18:23:81:41:
60:9b:da:52:7a:a5:98:b6:f5:e8:09:04:d2:62:2e:
53:70:42:75:75:b9:fc:15:28:38:93:0c:68:5f:7d:
cd:ec:b9:1f:c3:f1:98:6d:c7:cf:8c:a9:15:ad:5a:
b0:df:85:ff:17:d9:ab:a4:a1:2b:ba:30:05:cd:3e:
d8:36:af:2a:09:8c:e8:11:0c:42:e0:01:09:f8:7c:
a9:56:41:e8:1f:75:38:8f:c1:cc:22:9e:57:9e:d9:
6b:cd:cf:65:41:f5:6f:6c:9b:44:63:1a:3d:de:ad:
64:98:1d:53:17:59:4b:d0:e7:d4:70:f7:0e:30:b3:
d8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F2:DD:98:51:D0:45:86:20:CC:EE:7B:88:5D:B3:6A:0E:CA:78:34
X509v3 Authority Key Identifier:
keyid:7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c8:ba:99:a7:13:f4:19:9c:4d:67:88:a2:39:37:1e:c8:ce:
c5:5f:9e:b9:65:a6:df:28:02:9b:49:07:10:81:65:70:8f:22:
ba:78:8b:61:94:6e:59:14:78:62:d4:aa:d4:e8:30:66:6c:b7:
d1:27:d8:53:63:6e:e8:3e:53:e5:b7:ed:57:f8:9d:95:28:86:
a9:db:dc:4a:ed:5e:e8:04:3c:92:82:77:a5:ef:82:fa:e0:8f:
89:44:d4:84:6a:ca:00:fa:61:79:85:76:5d:c4:2e:c8:b2:d6:
1d:a1:f0:48:a4:41:76:7e:67:7f:8c:08:aa:b1:f3:2c:84:ed:
94:fd:2d:dc:ed:55:09:f0:d9:36:79:34:b5:85:54:03:4a:6d:
59:c4:d3:52:5b:94:5c:63:64:22:72:1c:d7:38:97:04:a0:d9:
1a:69:5d:0b:47:5d:0b:98:ab:47:bd:e2:91:19:7c:ba:cf:d5:
11:00:88:58:42:d1:b5:2e:75:35:c2:f1:3c:ef:74:31:0d:f6:
55:23:52:b2:a9:8a:29:17:2e:04:36:7c:88:dd:69:78:62:13:
aa:ab:c5:09:e5:4c:30:cc:82:3c:f5:c3:7d:cb:53:ed:22:c5:
5e:97:ab:d2:3b:16:fa:9e:93:bc:76:c9:25:a8:3e:27:62:f8:
02:77:97:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:07:43 2025 by rpki-client