Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
File: fktU39QWEHdP5_JC1904c6ZYRzs.mft (raw, json)
Hash identifier: WKKgvLwt0LDVLo5jwwKDadRSJ9Wvkf83uqzKKlG9XOc=
Subject key identifier: 9F:6E:98:8B:E7:61:84:EA:89:06:C9:8D:83:0B:C8:C8:D1:E6:DD:1E
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Certificate issuer: /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial: 0197B820CCDFA24BDC8073F0FE044F32ED98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
Manifest number: 140B
Signing time: Sat 28 Jun 2025 20:00:46 +0000
Manifest this update: Sat 28 Jun 2025 20:00:46 +0000
Manifest next update: Sun 29 Jun 2025 20:00:46 +0000
Files and hashes: 1: YRfkigtRLNkJN8VNtKbb3fRiIKs.roa (hash: CvzEdkr6eZNRd+mAapP+a07GKzLUJC/WQEw0I1mUkjI=)
2: fktU39QWEHdP5_JC1904c6ZYRzs.crl (hash: kPRXYhjKylVAL6pOx125zfj9zD8C4SIJTeJJP3xwn+o=)
3: hhzUk5P34fAewxviCp7L4orLbt4.roa (hash: anfj4g1I4XRHIljE+q3F4S8rJ8XQNKffMq+11otVUbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:cc:df:a2:4b:dc:80:73:f0:fe:04:4f:32:ed:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Validity
Not Before: Jun 28 20:00:46 2025 GMT
Not After : Jun 29 20:00:46 2025 GMT
Subject: CN=9f6e988be76184ea8906c98d830bc8c8d1e6dd1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:36:70:d0:75:d4:01:33:98:8c:c3:a9:d6:
3d:aa:6f:3b:ec:b7:66:31:50:7a:c5:06:1e:f1:eb:
76:08:d6:5e:1c:b5:7b:64:7f:7a:6a:10:bb:01:da:
cb:c3:4c:24:45:7b:f2:70:2e:a9:4b:89:73:cb:a9:
c5:e9:e1:36:a2:6d:3d:a8:2c:37:c8:a1:29:b6:96:
1f:0e:22:a9:32:d2:d9:c4:da:ed:d0:87:02:6a:6a:
7a:4e:4e:55:8a:0e:ff:a8:68:64:84:5d:87:fe:05:
cd:0b:c2:0c:52:a1:52:e0:0d:9e:f9:a4:98:80:7c:
be:51:69:0c:ad:e0:5c:74:69:99:1a:2c:85:36:ee:
37:76:a3:f8:bd:98:06:4a:4f:43:57:a0:e1:80:53:
43:c6:5f:92:63:19:4b:b5:e3:a4:97:69:6a:6f:d1:
ea:9d:77:87:36:28:b8:03:d5:05:d0:6c:54:52:e6:
a8:73:f8:02:e3:d7:b5:e9:1c:71:75:d1:57:a8:c0:
87:a1:f8:cb:3c:3a:57:48:ca:e7:3f:3b:43:68:e7:
20:6c:61:7f:4a:e0:31:9a:59:1d:5a:12:62:33:a1:
f3:ce:7d:00:ce:a8:e4:26:52:da:fd:33:a5:fc:f2:
ec:a6:2d:ad:c6:ba:10:91:dd:99:09:20:f7:5f:8c:
1d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6E:98:8B:E7:61:84:EA:89:06:C9:8D:83:0B:C8:C8:D1:E6:DD:1E
X509v3 Authority Key Identifier:
keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c9:73:40:77:e0:d3:86:a7:d1:74:93:66:a5:3d:2c:1e:ba:
06:53:93:ad:f1:87:65:33:aa:fc:2f:24:88:40:70:7a:2c:24:
a4:86:e7:6b:2c:f8:78:e1:89:ac:72:1c:4a:b9:82:39:35:06:
40:4b:64:95:36:44:84:13:59:3b:22:4c:da:50:1d:1d:1f:a2:
ef:6b:f4:c2:20:42:46:b3:c9:7b:90:38:4d:88:93:7b:0e:27:
bd:14:47:f1:60:76:9a:2a:ad:3e:c0:fa:c3:81:cc:d2:81:a5:
38:60:0c:53:94:52:64:34:b7:ca:a1:05:4e:a5:e8:17:e2:c8:
f3:c0:b5:43:f3:3a:73:2e:7c:57:2d:74:66:95:a6:9f:f4:e0:
d6:ee:cd:c1:f3:1e:4f:3a:a2:94:32:61:6e:df:ca:e2:4b:47:
a5:d3:b9:a4:b9:e3:33:ab:de:d1:29:e1:26:c3:47:c4:59:e6:
cf:4f:43:3f:69:13:b6:1f:d7:d9:4b:ae:d9:0f:55:ed:d2:32:
13:05:0b:82:7b:de:3f:72:46:b4:28:7f:84:38:6d:ce:53:5a:
4d:96:07:f1:c9:22:2d:e6:8f:06:f7:d3:57:37:be:42:1f:48:
88:23:3a:9e:86:b2:9e:1b:04:7b:02:45:bc:51:d2:09:8f:74:
4c:8f:9d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:22 2025 by rpki-client