Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
File: _cNlqvvg5FoE3RXpwjESHp6uqPI.mft (raw, json)
Hash identifier: Thy9UTs33UjcZVCECE8GVvqXKAVqkUsHo8nzjyUYmuU=
Subject key identifier: EC:11:BF:6E:49:31:1A:91:11:E8:74:18:6A:80:CA:D6:CB:E1:F0:17
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial: 0197B70EB6F223EA6736B8F8C3103067CC5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
Manifest number: 08FD
Signing time: Sat 28 Jun 2025 15:01:24 +0000
Manifest this update: Sat 28 Jun 2025 15:01:24 +0000
Manifest next update: Sun 29 Jun 2025 15:01:24 +0000
Files and hashes: 1: WkM1k4qAimxGoAXfYc3XtjG5aS4.roa (hash: JEjZGh4dEBWAy5uvNyzYoFAxp8bWgzv1444j2h2JEVg=)
2: _cNlqvvg5FoE3RXpwjESHp6uqPI.crl (hash: eoaHisAYc8DDc/nsTyMHztGojP9/D1mhtwgSsY8Vmc4=)
3: jqc-CSQwW-qQ7TAEXOV-0DlhyHo.roa (hash: 2Wow4x7KtU4iQlp8s7jxmW893ftKcMCmze/PFHE6hj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b6:f2:23:ea:67:36:b8:f8:c3:10:30:67:cc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Validity
Not Before: Jun 28 15:01:24 2025 GMT
Not After : Jun 29 15:01:24 2025 GMT
Subject: CN=ec11bf6e49311a9111e874186a80cad6cbe1f017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1b:06:89:dc:2e:5e:3e:84:09:59:ef:6e:21:
d8:cb:db:15:5d:b1:f4:cc:85:41:95:b9:fa:6e:7f:
0c:14:4f:a6:97:78:50:fc:7d:6e:0c:d0:1a:8b:58:
7a:53:12:6d:fb:fb:80:8b:f6:24:0f:f3:e0:f2:e2:
81:b3:63:33:48:a7:a5:61:c6:52:4a:d2:dd:65:15:
1a:0b:6a:13:d9:53:5b:91:5b:db:62:15:17:7e:32:
4f:dc:9b:9b:a8:2b:3e:1e:46:2f:d9:22:bc:2b:e6:
0c:40:d5:a6:4f:17:6a:b3:76:83:60:52:45:b2:74:
ce:14:7e:b7:3c:6d:1a:53:ef:cd:c9:51:20:fe:96:
6a:e0:80:15:71:bc:18:4e:ce:ad:84:17:94:73:9f:
45:a0:71:6f:d4:c1:23:29:fa:94:c7:b7:25:f1:d3:
8a:66:c6:c6:6d:db:74:c5:c3:f0:db:25:df:52:56:
df:36:5f:62:6b:db:52:ad:f9:3a:23:9d:f2:c5:d8:
89:d2:98:5f:5c:c5:5e:db:21:02:7a:ce:02:28:78:
61:39:a5:1c:4e:e7:ae:a8:03:ae:65:40:51:85:fd:
3a:e2:06:69:bc:ed:a8:0c:0c:1c:4d:c3:bc:09:7a:
f1:d1:1e:64:90:da:6e:1b:e7:51:79:17:e8:9c:c5:
e2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:11:BF:6E:49:31:1A:91:11:E8:74:18:6A:80:CA:D6:CB:E1:F0:17
X509v3 Authority Key Identifier:
keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:52:9b:11:c2:d7:bd:39:7f:01:45:4b:5a:3f:fb:67:f2:7f:
0b:de:16:36:50:ef:83:f1:63:db:4e:2e:03:1a:de:dd:b5:d0:
ef:e7:14:1c:f1:fe:5a:df:43:00:91:c9:bd:dc:19:2f:eb:35:
20:7a:a8:6d:8c:a8:3e:ac:cd:80:e4:16:c0:23:82:52:cb:16:
fd:43:b8:8d:0e:35:18:c6:22:fd:e1:34:eb:6b:05:23:a4:75:
93:c7:50:a5:06:42:a2:50:e5:13:19:80:73:d3:92:c2:8a:2c:
78:3d:9a:6f:22:92:d0:8c:dc:79:9e:f6:8b:75:bf:0f:df:69:
e2:7f:03:b9:f9:db:8f:d4:32:a1:a6:b9:2e:99:99:ba:3a:a6:
58:99:bd:d7:7d:09:fe:c5:a8:d6:3e:e8:74:2f:db:ab:69:0a:
59:2f:35:2e:a7:4e:11:c5:d7:5d:11:e1:26:04:e8:37:29:8a:
60:cd:81:e6:9d:34:af:46:84:1a:72:6a:12:56:72:4d:c0:43:
51:70:7c:0b:06:8b:d3:4f:7d:5c:f0:69:04:09:a3:78:c6:5b:
73:40:5c:57:1f:b5:4f:64:07:db:22:ca:b3:25:4a:44:24:1e:
22:13:67:72:c1:80:5c:29:0c:83:89:96:b2:93:2d:dd:b2:e2:
f4:0b:e0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:45 2025 by rpki-client