Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
File: f-aLEiNL1wNDAbyWsTiq4neGCj4.mft (raw, json)
Hash identifier: EkWMqO13xfS0310qc7Aj8t4PQ+0zxr+hb/CISGKyvyw=
Subject key identifier: 5C:79:30:A9:91:8B:F5:4D:94:2C:63:5B:46:F8:45:6D:30:DD:67:A2
Authority key identifier: 7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E
Certificate issuer: /CN=7fe68b12234bd7034301bc96b138aae277860a3e
Certificate serial: 0197B6A1A729CA33526C99041B394E850833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
Manifest number: 0420
Signing time: Sat 28 Jun 2025 13:02:16 +0000
Manifest this update: Sat 28 Jun 2025 13:02:16 +0000
Manifest next update: Sun 29 Jun 2025 13:02:16 +0000
Files and hashes: 1: Wafu5_6TB8FPy-qQRyuoAEGDAX0.roa (hash: NgD/yDHNjwI5dLXtEOgTxi5zpKMG9LLhqvORpEaB0Qs=)
2: f-aLEiNL1wNDAbyWsTiq4neGCj4.crl (hash: A075aAxUZL32NpqA5Dclcn2uqYanPwr94A1L/70l5lI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a7:29:ca:33:52:6c:99:04:1b:39:4e:85:08:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe68b12234bd7034301bc96b138aae277860a3e
Validity
Not Before: Jun 28 13:02:16 2025 GMT
Not After : Jun 29 13:02:16 2025 GMT
Subject: CN=5c7930a9918bf54d942c635b46f8456d30dd67a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:a8:82:f0:2f:73:5a:1b:33:e2:49:49:35:
1d:77:f8:c9:0b:b8:81:d3:5f:0a:8f:9f:12:1d:b2:
40:fd:54:23:65:48:97:9d:4c:9e:d2:4b:2b:88:76:
52:e5:c1:b3:03:47:e6:b8:aa:a7:6f:e3:0a:44:d4:
aa:f1:eb:be:61:24:8d:73:ed:dd:e4:37:31:32:e8:
e8:b2:ec:61:0a:e1:e6:fa:82:dd:16:af:e0:3f:b8:
1f:4f:97:9e:ad:49:ec:0c:e1:0b:ae:e9:12:00:ba:
c4:d1:1c:3b:6a:fa:bc:b8:f2:40:09:9a:9e:65:fb:
6d:69:51:05:1d:21:3c:53:95:59:0c:3e:19:95:04:
bd:86:c8:d0:df:06:92:9e:37:12:35:44:15:f8:fd:
25:bf:29:d1:f6:55:d9:94:2a:5d:b2:ec:f3:c5:81:
f1:8f:55:c0:56:ad:8b:dd:e0:30:0d:ea:cb:05:75:
db:93:9a:c8:62:e6:0f:2d:b2:67:3e:3a:2a:94:10:
4e:ea:d5:bd:5c:92:57:c9:27:de:a9:70:49:17:86:
ac:d4:74:27:d1:1d:fb:4f:e3:fc:42:f2:d0:e7:bb:
dd:94:5d:bc:e9:cb:ae:82:09:25:1f:c3:6b:47:12:
29:52:2d:c3:65:75:2a:53:0d:4a:3c:9f:82:d0:63:
f3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:79:30:A9:91:8B:F5:4D:94:2C:63:5B:46:F8:45:6D:30:DD:67:A2
X509v3 Authority Key Identifier:
keyid:7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a8:a9:8c:71:2a:59:1b:cb:5d:1a:80:f4:5a:c2:7e:3d:1a:
38:22:48:c5:cd:23:9c:df:97:9a:1d:43:f4:cd:46:c2:3f:3f:
b1:79:9f:bc:8b:23:5e:ff:d7:da:7e:97:f2:85:43:89:f3:e2:
30:bb:61:f7:0a:ba:aa:ad:a3:3a:45:1e:22:bd:2e:57:93:fa:
45:d8:f0:93:5c:af:ac:46:1b:bc:60:4d:c0:2c:8e:e5:4d:a6:
d5:dd:f2:f3:26:b0:87:9a:72:eb:79:93:ed:21:1a:fa:c7:d4:
dd:6e:76:06:41:e1:59:60:79:d5:56:65:00:0a:ab:33:74:d1:
2b:5d:45:18:51:ae:d3:dc:e8:c0:af:1e:bf:6e:1e:86:a6:e7:
40:66:1a:70:10:63:b1:d8:ec:05:86:c7:59:be:23:59:b0:65:
10:a0:fc:18:21:36:77:f5:c2:9f:c7:2b:90:ed:15:b7:40:49:
f1:69:dd:13:46:10:13:1f:b7:ca:16:0b:a2:57:64:3f:c8:e8:
5e:e6:ff:6a:cf:9b:cf:d0:e4:b7:37:22:76:f3:d3:9a:d7:42:
91:68:5f:be:8d:8f:34:55:c8:96:d9:3c:ae:21:3c:e1:08:15:
f9:59:7c:ac:b5:ab:ee:37:fd:1c:d9:5d:05:ca:1a:30:61:d7:
f1:0f:9c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:24 2025 by rpki-client