Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
File: f_G4HP5quxGOl-AyW2Yur5hPL2o.mft (raw, json)
Hash identifier: Pqgd4NeEqXrOAOeKIXoMucd8ERzz7G+qEqHjTt5/XOM=
Subject key identifier: A3:56:B2:FC:EE:B3:87:D2:87:61:46:D9:3D:6B:59:2E:04:E4:3F:DF
Authority key identifier: 7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
Certificate issuer: /CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Certificate serial: 0197B7B32872EF19A0F35EDC71C180ED1E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
Manifest number: 0C21
Signing time: Sat 28 Jun 2025 18:01:01 +0000
Manifest this update: Sat 28 Jun 2025 18:01:01 +0000
Manifest next update: Sun 29 Jun 2025 18:01:01 +0000
Files and hashes: 1: Ws0PzSlzciL_18ZyL-n7RNJX1Rc.roa (hash: Mhq4SXBV17W3XI37JWd2SZ0W3pU7Z4ZVwJBUNoboInU=)
2: cGNrX1MW3V5Pj8rPvvjXgsht_VU.roa (hash: r7fN/lwL4D0NMCG6ql+7DEym7FVBCcSQnDkJLbzAoCE=)
3: f_G4HP5quxGOl-AyW2Yur5hPL2o.crl (hash: JAQXnH7e1AolBs+M5flnVPbTaV6Kdg+RXly3kkCH3SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:28:72:ef:19:a0:f3:5e:dc:71:c1:80:ed:1e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Validity
Not Before: Jun 28 18:01:01 2025 GMT
Not After : Jun 29 18:01:01 2025 GMT
Subject: CN=a356b2fceeb387d2876146d93d6b592e04e43fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:8a:a4:08:b1:ab:56:46:5a:c2:af:18:06:
4f:23:50:b9:d8:74:18:76:7d:e4:98:1d:69:c2:99:
19:98:5e:ca:4c:c4:d9:6d:da:63:fa:bd:cc:d0:cd:
ee:af:a7:ef:34:44:91:8f:bc:2f:50:7e:16:10:92:
45:2f:a6:1a:c6:64:1d:82:37:1a:db:c6:83:23:fb:
d5:cd:bf:9c:d4:0c:7c:57:46:05:e9:b2:39:28:f9:
e6:ba:35:ef:b3:5d:d4:46:c8:28:61:39:a5:1a:ca:
56:e3:cc:99:e1:33:43:ca:bb:07:b6:c7:a5:48:df:
51:9a:4a:b8:7d:80:c2:17:cd:fe:7b:86:95:f6:7d:
80:65:49:ff:74:67:f6:49:3b:b6:45:82:51:8e:0e:
e0:71:fd:63:3d:76:04:d0:71:c7:8c:36:1a:51:a5:
9d:7c:35:43:bb:4f:b7:ac:e1:25:31:4a:33:7f:72:
65:3d:06:2a:65:70:03:3c:15:ec:2b:7e:82:8c:9a:
7b:18:fa:0c:24:ac:29:b5:54:71:b8:ee:ec:5f:0b:
76:7d:a7:d9:07:d8:4d:37:f2:cd:2a:38:95:77:a2:
34:32:c7:04:43:a4:e2:6a:a8:c5:09:2b:50:06:fd:
63:5d:de:0d:84:ec:43:20:b7:33:35:59:e9:0e:e5:
c5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:56:B2:FC:EE:B3:87:D2:87:61:46:D9:3D:6B:59:2E:04:E4:3F:DF
X509v3 Authority Key Identifier:
keyid:7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:2f:b1:8f:68:e9:24:d6:bf:2a:80:5a:9b:bf:67:34:ca:6c:
e7:47:dd:b0:cb:eb:8a:bc:c5:df:70:23:6e:64:50:f3:da:2d:
0e:e4:95:1d:5b:b7:77:11:76:19:48:85:8e:c7:5d:b8:7e:5d:
52:c7:9a:80:41:d9:02:26:bb:6a:0e:31:99:52:24:3b:88:bb:
9d:bc:a8:a0:d0:df:0d:4b:9d:e7:93:2b:0b:9c:37:c9:dc:b3:
ff:c0:66:ee:d3:c7:5a:aa:69:63:ca:7d:5a:1a:bd:97:c4:9b:
77:ab:7e:a5:32:7a:f7:6f:47:b5:45:ea:f5:9d:3f:9f:e7:aa:
9c:70:02:a7:1a:a3:ee:68:7b:bf:43:66:90:cf:15:3c:63:7a:
6d:5c:7b:24:83:ec:78:46:15:69:50:75:68:1a:45:83:4d:7a:
59:e6:2a:51:eb:aa:26:68:89:eb:b0:5d:4b:b5:fa:03:fc:9b:
3e:15:65:03:2c:24:4a:82:f3:52:fc:ac:d8:ae:37:d1:36:c9:
61:67:ba:63:0e:e1:9b:a1:83:75:73:28:f2:32:6f:25:b8:44:
c2:01:9e:7c:ea:01:e9:9c:d3:36:49:cc:d9:50:2f:c0:ec:de:
9b:4f:46:94:7d:7c:e6:2e:36:88:f9:79:5e:e5:d2:c5:4b:52:
16:e2:de:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:37 2025 by rpki-client