Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
File: fiCwNOLEl7GIRIje8QaXJwR2UCk.mft (raw, json)
Hash identifier: 5rfpwZdbAexkrpdn5MQLpyBlo/b/7gYPx4kEMri5IU4=
Subject key identifier: 14:80:0D:B4:B5:EF:F0:E3:8D:27:EC:0A:97:3D:9E:E9:28:BE:E7:EB
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0196BE5C94F191EB76F4718AEC9E847A35D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
Manifest number: 068F
Signing time: Sun 11 May 2025 08:01:00 +0000
Manifest this update: Sun 11 May 2025 08:01:00 +0000
Manifest next update: Mon 12 May 2025 08:01:00 +0000
Files and hashes: 1: EuixT9ldcg3ONH8jn1jySyMuzMQ.roa (hash: cCyIArIo/MtmkGH2yVvTDKe4dI4Gj4OILXluoYwb1cs=)
2: _c7ADB2yCG7ygmEJVKO5UMjX1Mg.roa (hash: wQQa9Mnur4vqn575tKy3l6q/9fmjlstZd96o2yaRPEI=)
3: fiCwNOLEl7GIRIje8QaXJwR2UCk.crl (hash: g/Tkb7ey2nM/+My8qsl/RGh/U70aiNJie250GyUoEts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:94:f1:91:eb:76:f4:71:8a:ec:9e:84:7a:35:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 11 08:01:00 2025 GMT
Not After : May 12 08:01:00 2025 GMT
Subject: CN=14800db4b5eff0e38d27ec0a973d9ee928bee7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d0:9c:65:5f:76:8e:57:bf:41:58:d9:4c:3f:
3c:52:d5:0f:85:24:59:38:73:1e:93:50:3f:59:6a:
be:11:46:d3:aa:92:60:2b:77:3c:8d:31:84:99:c0:
5e:93:6a:e9:98:96:68:8f:d0:eb:c3:e4:45:4f:d5:
99:ac:1c:0b:96:8b:23:43:45:8e:01:ae:f7:3e:35:
ba:5b:d9:5a:9f:7f:62:0a:93:e8:12:1a:8c:02:0d:
4d:0b:88:27:88:57:b0:f4:0a:fd:dd:fa:ed:46:8b:
d3:fd:18:a7:dc:59:0a:eb:33:4c:7b:b7:f4:64:02:
93:68:b4:5c:07:bd:86:1b:96:a7:63:a5:be:68:dd:
98:ca:41:6a:93:87:8e:ee:94:b8:1d:a2:34:1b:da:
d9:e5:4a:28:ee:16:ca:96:3f:bf:ce:48:4b:b1:6c:
47:1d:dc:d9:39:5a:ee:96:d5:37:35:ec:94:3a:dd:
c1:c9:a1:b7:86:93:c2:31:ef:6d:51:4e:45:e6:47:
49:67:d5:08:10:f0:a2:0a:93:f2:2d:53:21:34:b3:
89:be:89:89:ac:92:d3:d9:61:84:c4:ba:b6:04:bd:
6e:4e:67:16:c0:20:91:b4:53:c1:5a:e5:b6:7a:02:
00:da:31:09:a2:91:88:24:a7:93:6d:f3:77:c4:e7:
52:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:80:0D:B4:B5:EF:F0:E3:8D:27:EC:0A:97:3D:9E:E9:28:BE:E7:EB
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:6e:07:a6:fc:4e:73:cd:18:d9:9a:c1:0b:2c:0b:18:57:9f:
33:b9:1b:8d:c1:8c:b1:46:ea:93:30:55:ed:2d:63:61:8d:53:
ae:d8:cd:28:3d:5d:00:53:80:46:08:73:88:b8:05:76:e7:d5:
c7:83:9d:00:e8:c5:5c:91:f5:2b:f1:b6:fa:d5:df:01:d0:5f:
0c:0e:55:cd:0c:58:93:d6:8e:b7:08:d2:ee:c1:e1:40:de:e6:
60:14:95:c3:88:b6:ad:99:52:61:01:61:2c:e4:69:3f:82:43:
1b:18:8c:a2:1f:ca:cf:e0:e2:eb:7d:f0:0c:1f:bd:85:14:cf:
e0:b6:eb:4b:41:92:3a:65:93:76:c5:99:72:5e:d5:6e:a5:46:
59:71:08:71:86:db:48:75:12:be:6b:e4:e1:cf:6e:bb:d6:d3:
2a:52:6e:59:9c:32:8c:a3:94:3b:71:fc:a0:de:e3:41:d4:45:
ef:6c:49:5a:b3:b8:d5:dd:df:ec:1a:7f:17:d6:65:87:d6:50:
27:e9:d1:e3:05:fe:ff:df:e1:2a:f3:b5:21:1d:c8:2e:ea:d9:
1d:58:0b:a9:64:2c:44:7d:a9:58:05:41:04:2a:82:bf:19:69:
03:28:01:b8:f3:ed:c6:a5:17:5b:46:ec:fb:f4:49:fd:0e:35:
6f:98:39:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:56:56 2025 by rpki-client