Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft
File: f_dNq9TrGqEUcUThWwJmnpgv3k0.mft (raw, json)
Hash identifier: olJMGdlUIn6unYlEeNdfSjGs0PJnReFNWzVrsC0XfqY=
Subject key identifier: 2C:E4:1E:8F:48:3F:C3:F0:DC:EA:40:BA:FA:4B:AB:4A:54:C9:B9:FB
Authority key identifier: 7F:F7:4D:AB:D4:EB:1A:A1:14:71:44:E1:5B:02:66:9E:98:2F:DE:4D
Certificate issuer: /CN=7ff74dabd4eb1aa1147144e15b02669e982fde4d
Certificate serial: 0197B6D75BCE71E4B3D8722DB363C50AD0DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_dNq9TrGqEUcUThWwJmnpgv3k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft
Manifest number: 0560
Signing time: Sat 28 Jun 2025 14:00:56 +0000
Manifest this update: Sat 28 Jun 2025 14:00:56 +0000
Manifest next update: Sun 29 Jun 2025 14:00:56 +0000
Files and hashes: 1: 2MgYI85TPEBCwm2elQTNgUHdzmQ.roa (hash: YR8wZ7h+NpjeTm3CMSeXFipDMaRQTBJNPwjk/7JOMyM=)
2: f_dNq9TrGqEUcUThWwJmnpgv3k0.crl (hash: YyGHfgwNsK2Nq3aBt9hFypEZ5EZR5nXJSHBAA7n/AW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_dNq9TrGqEUcUThWwJmnpgv3k0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:5b:ce:71:e4:b3:d8:72:2d:b3:63:c5:0a:d0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff74dabd4eb1aa1147144e15b02669e982fde4d
Validity
Not Before: Jun 28 14:00:56 2025 GMT
Not After : Jun 29 14:00:56 2025 GMT
Subject: CN=2ce41e8f483fc3f0dcea40bafa4bab4a54c9b9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8b:81:ab:05:b1:b9:36:31:a6:87:6d:42:5a:
ea:44:5a:da:68:6a:a3:f4:77:08:ea:49:30:11:08:
3a:3e:9c:5c:fb:2f:22:3c:d0:7d:98:42:e3:be:32:
c7:88:d7:28:af:0a:85:51:5b:c5:9f:1a:7d:76:b5:
c2:7e:8a:aa:d7:59:87:d5:45:e2:6e:97:9f:c3:ae:
d3:84:e8:94:78:9d:0a:b4:d6:5a:80:a6:7d:35:a7:
00:ba:7e:95:a8:7e:c9:64:f5:a3:cd:db:db:9c:38:
db:98:8a:1c:b3:b1:c7:72:7f:a7:9a:19:61:e3:72:
fc:d0:2d:a2:36:f6:7c:51:28:e9:f4:d0:61:b8:44:
d8:d2:01:68:01:53:06:a9:f9:c5:b9:cd:79:70:ce:
48:2f:30:ac:4d:af:7b:bc:43:33:48:2b:c4:21:d8:
9c:2d:ca:9e:20:d8:56:44:c5:94:af:80:0e:b5:c6:
52:7b:f5:0d:e8:25:e3:85:94:96:80:22:5e:a4:d1:
ee:bf:ed:df:58:6f:59:3f:de:60:aa:40:5c:15:78:
00:f5:43:54:a1:88:b1:f7:82:73:5e:18:b3:15:91:
dc:c3:60:e4:f6:b8:74:d1:e4:f0:38:72:4e:12:ea:
90:e3:2a:7c:2e:10:b0:32:90:cb:56:05:d0:4d:47:
58:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E4:1E:8F:48:3F:C3:F0:DC:EA:40:BA:FA:4B:AB:4A:54:C9:B9:FB
X509v3 Authority Key Identifier:
keyid:7F:F7:4D:AB:D4:EB:1A:A1:14:71:44:E1:5B:02:66:9E:98:2F:DE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_dNq9TrGqEUcUThWwJmnpgv3k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:37:dc:fa:d5:38:e8:62:ea:07:97:bd:d3:27:4e:dc:d1:ba:
ab:d5:a4:26:94:67:ff:e3:ab:a7:7d:f3:6c:b6:05:d7:35:d2:
1b:e2:ac:b8:81:f2:7e:62:bf:2d:ca:a7:81:4e:52:ab:4b:24:
6e:9e:ac:ca:50:3c:a7:14:ec:04:77:f7:a2:e2:fb:6b:e6:fd:
46:13:2c:0b:03:16:6f:1a:75:ba:cb:d1:83:ef:a6:36:5f:a2:
d0:77:f9:05:be:50:da:56:2d:a8:34:1a:55:bc:e2:ab:fb:6f:
15:c4:42:6f:6c:e8:ab:16:75:62:24:1f:dc:dc:06:89:63:6a:
f8:29:16:a1:47:94:fd:4c:a8:21:f7:40:db:0e:0a:e7:89:32:
9d:67:53:a6:59:7b:36:cc:c4:d0:1f:6a:67:d1:6f:20:48:b3:
41:9f:c6:f3:a8:b7:4e:fe:16:de:c9:ec:f5:86:f1:17:5e:0c:
85:1c:23:d8:ff:d9:91:99:80:8b:f2:f3:d9:85:a6:0a:61:74:
8c:63:94:d4:37:51:fe:65:53:87:08:30:62:0b:e9:2b:19:c0:
bf:5d:2a:c1:f2:57:63:04:a3:eb:38:e7:09:3a:d6:1b:97:da:
4e:32:2e:1b:91:25:62:dc:9a:01:b1:fa:55:0b:ea:f3:c2:73:
54:45:00:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:29 2025 by rpki-client