Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.mft
File: f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.mft (raw, json)
Hash identifier: VYg5zZm9v5BfYmxUL1KbekcucifbowgIlC/YTOPeZFM=
Subject key identifier: 43:CB:BE:3F:F1:63:2D:A8:D0:41:B1:95:E4:97:A4:C2:19:44:DA:9A
Authority key identifier: 7F:6A:8E:5D:55:C2:49:8A:82:63:6F:99:F8:FC:9E:31:9E:07:77:1E
Certificate issuer: /CN=7f6a8e5d55c2498a82636f99f8fc9e319e07771e
Certificate serial: 0197B77CCBFEFB1D5F610B29CBB0DC91380E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.mft
Manifest number: 0EB6
Signing time: Sat 28 Jun 2025 17:01:38 +0000
Manifest this update: Sat 28 Jun 2025 17:01:38 +0000
Manifest next update: Sun 29 Jun 2025 17:01:38 +0000
Files and hashes: 1: f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.crl (hash: XhQ/RoQ/JXHsRkfZGz7VqBKsYKYaVf1JHah8qkMueec=)
2: uqH7vaJE3PXnQyRjphQi0vNIcTA.roa (hash: 43GuWr72hhzBtb+xvMSJfj29iARrwWk3XD88vNRHObQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:cb:fe:fb:1d:5f:61:0b:29:cb:b0:dc:91:38:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f6a8e5d55c2498a82636f99f8fc9e319e07771e
Validity
Not Before: Jun 28 17:01:38 2025 GMT
Not After : Jun 29 17:01:38 2025 GMT
Subject: CN=43cbbe3ff1632da8d041b195e497a4c21944da9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e6:27:33:36:cb:03:fc:81:fa:99:4a:68:f8:
97:33:96:5f:06:c6:f6:52:2e:53:35:36:6e:cf:07:
ef:ea:ee:bb:1e:d4:63:4c:c6:d7:27:7f:d1:9b:e8:
d0:c3:2f:83:e2:7d:2c:10:83:37:0e:14:02:a8:f3:
81:a0:8a:e9:0f:2c:0a:d0:86:a1:c7:4d:eb:10:42:
5d:5d:dc:6a:00:bd:07:c9:b0:c1:c2:ab:6f:3c:74:
56:56:51:12:de:84:fe:b4:d3:12:26:5f:e1:3d:64:
0f:3e:3e:76:e3:55:6d:d6:a9:45:c7:c7:6f:2d:95:
0c:a2:e3:02:93:d3:26:b6:6a:07:99:b9:c6:b0:3b:
da:32:d5:cd:95:0b:a0:c9:b9:ab:d3:cb:9e:74:2c:
cf:1a:a9:26:22:fc:2c:fd:92:49:e0:ff:3c:bd:26:
d7:78:60:97:51:d3:b8:db:bc:a7:c8:92:27:6a:93:
58:35:8d:e4:45:5d:80:dd:51:57:df:5c:67:be:0a:
df:cd:50:1d:b6:0e:67:2f:58:e7:00:6c:26:9a:76:
e4:f3:28:66:3d:0b:3c:65:c0:5e:bd:35:dd:10:c5:
a7:48:af:03:a6:4f:9d:42:46:70:a8:ef:6d:74:7e:
13:e6:94:3f:93:68:2c:16:17:f2:8b:b5:48:60:82:
2c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CB:BE:3F:F1:63:2D:A8:D0:41:B1:95:E4:97:A4:C2:19:44:DA:9A
X509v3 Authority Key Identifier:
keyid:7F:6A:8E:5D:55:C2:49:8A:82:63:6F:99:F8:FC:9E:31:9E:07:77:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:67:bf:f3:84:d7:3c:71:14:1d:5b:9f:c9:8e:6c:76:3b:49:
57:b3:1b:26:d2:f5:51:e4:6f:1c:a5:0d:0a:28:bb:4b:0d:08:
a7:4b:42:99:1c:f1:4b:ca:1c:62:4a:58:2b:63:e3:7d:7a:52:
a8:35:1c:5b:4b:f6:0f:3a:14:aa:b1:28:37:b3:3a:aa:ef:2f:
e5:ec:6e:97:b2:9a:a9:d3:94:35:c9:83:40:e4:07:13:d6:b6:
a2:3a:c5:7f:55:72:9f:81:e0:36:93:40:23:ea:10:d7:2b:65:
db:85:f0:7f:31:48:73:0f:67:bc:bf:5a:03:db:e8:7f:d1:a0:
11:40:aa:01:64:bc:be:ae:d8:a2:63:ad:89:57:f1:5c:9d:70:
db:ff:74:2a:f4:20:81:d6:c5:88:54:8f:f1:f5:61:7e:d7:d5:
42:b9:36:12:c0:a1:b3:bc:91:d5:d4:d0:aa:15:8b:c8:7e:29:
26:20:3d:bf:df:8a:cd:8e:f8:50:a6:11:65:37:06:26:ec:b6:
62:66:f1:1f:14:ff:f1:82:62:85:b6:6e:ba:d7:a5:a9:6b:39:
c2:1a:49:d1:78:4b:fb:51:60:34:a8:97:40:3d:51:af:0c:7e:
26:5f:d3:16:f4:e9:72:f1:e7:14:15:5f:b7:f2:95:11:32:19:
e9:47:0c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:24 2025 by rpki-client