Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
File: 87fdVNqwL-jN6KheVp-CcIiXlBk.mft (raw, json)
Hash identifier: CUiglHOZ7a1o6YsuPlBvr4guog0DBBbdBvmfqJor0ME=
Subject key identifier: 64:44:20:4E:99:20:B3:91:77:25:B8:97:32:D3:7E:27:C1:2A:E7:B3
Authority key identifier: F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
Certificate issuer: /CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Certificate serial: 0197B63272BDB2EDCB237A3743B13198F860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
Manifest number: 0B29
Signing time: Sat 28 Jun 2025 11:00:48 +0000
Manifest this update: Sat 28 Jun 2025 11:00:48 +0000
Manifest next update: Sun 29 Jun 2025 11:00:48 +0000
Files and hashes: 1: 1-Umc9hOt2tpo1ZchNi7HZONvobM.roa (hash: uKhjdfQ+p8B+ov8GKsdABY8fRu2epUYrzObWxrEfxuQ=)
2: 87fdVNqwL-jN6KheVp-CcIiXlBk.crl (hash: iYsEu3eiuyD2HJZ576kPDOJv+u+lUZq08zY9R4zp9d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:72:bd:b2:ed:cb:23:7a:37:43:b1:31:98:f8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Validity
Not Before: Jun 28 11:00:48 2025 GMT
Not After : Jun 29 11:00:48 2025 GMT
Subject: CN=6444204e9920b3917725b89732d37e27c12ae7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5d:ea:72:df:72:26:df:5d:97:f0:ca:48:4b:
cd:94:f0:93:0d:0e:38:cc:21:5c:66:62:f5:56:0c:
d3:59:e2:ab:eb:f3:d9:c4:38:f7:84:2e:38:1e:d8:
5f:50:4b:fc:82:93:22:a8:91:ff:00:56:47:86:98:
20:4b:ca:82:f9:38:57:94:eb:1a:ff:f8:0d:d9:83:
b1:88:74:e4:2e:bc:f2:26:6a:4e:3a:93:7b:a0:a3:
3a:63:ec:45:9c:b0:84:80:95:22:13:c9:18:8d:a4:
c0:ff:7b:ac:3b:b9:a3:f1:d2:b9:a7:49:b4:9b:f8:
7d:bd:c6:f3:87:21:13:68:8f:ef:08:b7:93:07:2d:
3a:18:15:28:d3:0a:0d:62:d4:8f:f3:78:f2:10:ca:
96:4c:0b:83:ee:c0:40:62:17:2e:28:f6:2b:61:80:
54:eb:da:0d:33:9c:89:bd:a5:4d:92:94:1c:76:e6:
32:54:2e:b7:28:38:59:2c:b1:89:65:5a:f9:df:18:
8f:bb:9b:e4:9b:4b:63:05:72:34:8d:4b:24:e9:27:
3a:24:db:0d:4c:c4:6f:f9:94:21:8e:35:c5:8f:e5:
00:e7:46:d9:0c:98:46:43:8c:7f:bd:1c:b2:30:9b:
8e:cd:1e:f8:20:2d:97:85:59:6f:e6:f5:45:b8:23:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:44:20:4E:99:20:B3:91:77:25:B8:97:32:D3:7E:27:C1:2A:E7:B3
X509v3 Authority Key Identifier:
keyid:F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:33:cc:57:06:12:86:57:58:7d:d7:fd:7c:44:02:69:a6:d5:
f7:b6:c4:a9:d9:d0:c3:73:67:b3:3d:f3:a2:bb:5e:85:85:ff:
4e:49:06:15:a8:e5:35:92:e5:9c:7d:03:97:9d:db:4e:8d:5c:
a2:b1:3b:c7:31:9a:ab:c2:58:21:94:c6:1c:64:e9:5a:3f:2f:
df:3f:1d:9d:34:ec:94:0e:c0:08:e5:a7:e9:27:50:0f:e6:42:
95:34:f7:66:52:90:40:7c:92:16:87:dc:8f:70:b8:84:0e:6a:
12:11:81:73:c6:e7:19:23:a6:9c:18:92:91:01:e4:6c:5a:ab:
56:4c:36:7f:4f:b4:e5:6b:3a:da:11:91:40:07:f7:8d:52:76:
9d:85:85:36:1c:0a:97:28:ca:68:72:23:47:6e:c7:96:b5:9d:
81:a5:41:d9:22:de:89:bd:7d:92:f8:3b:5e:3e:7d:86:bc:a3:
2c:b3:71:db:81:37:f4:f2:aa:a0:de:03:b4:40:ef:d6:67:5a:
15:89:9d:03:13:07:c1:fe:38:20:7a:93:cc:72:c5:56:c8:28:
e7:50:c7:21:04:df:be:56:0b:ca:c7:1f:5e:b7:72:13:b7:ee:
20:34:66:1f:96:6f:49:25:e0:fb:b9:fd:24:66:c6:02:f1:3d:
29:f1:c0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:37 2025 by rpki-client