Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
File: fZK2dHUnB1UTaoo8qALKEsisfnc.mft (raw, json)
Hash identifier: nNXVojZeMAgV07eNpXCU7I+tq3N13cu4i1iHqGDS07A=
Subject key identifier: 0F:09:1D:E2:88:CF:84:49:E9:35:6D:B0:60:3D:B2:13:24:20:9F:B3
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Certificate issuer: /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial: 0197B6D788E4C36B9011F430409E61CF0640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
Manifest number: 0CDC
Signing time: Sat 28 Jun 2025 14:01:07 +0000
Manifest this update: Sat 28 Jun 2025 14:01:07 +0000
Manifest next update: Sun 29 Jun 2025 14:01:07 +0000
Files and hashes: 1: 2CYNXB5qZHN7in7RGaGVmXvb7Xs.roa (hash: n74UAylTv760Shvrd+PI6ipCj4rV+2WaR3QnP3+8e6Y=)
2: fZK2dHUnB1UTaoo8qALKEsisfnc.crl (hash: XRG4InvJHCtpdKEWeiXdX87R2GLBvWJGZ2ECCLwLbsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:88:e4:c3:6b:90:11:f4:30:40:9e:61:cf:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Validity
Not Before: Jun 28 14:01:07 2025 GMT
Not After : Jun 29 14:01:07 2025 GMT
Subject: CN=0f091de288cf8449e9356db0603db21324209fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:a7:9e:5e:4c:6c:53:99:92:97:84:6f:b0:
23:86:92:cc:1d:e9:96:f9:c3:1b:86:89:00:c9:ee:
14:f2:23:02:9a:40:d3:b7:9d:b7:98:9f:5e:1f:1a:
3f:11:ec:13:5c:5c:32:3d:ba:60:b5:96:62:42:e3:
b0:74:23:09:22:4b:76:e1:93:54:d8:2e:f8:16:4f:
9f:74:06:1a:86:ef:51:fc:d4:9c:32:5d:4a:69:41:
85:cf:f7:fc:69:1c:1e:ee:64:53:ab:5a:a0:a0:27:
d7:80:48:61:41:59:d1:27:f7:cf:09:78:eb:34:b6:
cb:03:09:94:71:7d:a6:f0:de:08:bc:09:52:98:e2:
18:70:aa:34:db:f6:b0:6c:b9:e1:5e:ed:bb:cd:66:
d7:44:09:23:cf:da:68:bb:31:7c:95:0c:31:bb:19:
b5:0b:3d:c6:69:d2:ac:bd:85:97:22:a6:f4:ee:d0:
71:6d:ae:31:2a:ba:a5:cc:28:44:2f:eb:ae:30:93:
84:f9:b7:a5:cd:c6:fe:b1:ef:65:f8:df:e0:8a:12:
e2:ed:53:4d:22:2c:ac:50:cc:ca:eb:dd:e6:33:c2:
10:23:9d:c5:9b:c8:3a:96:8f:fa:56:e4:88:6d:3d:
21:7b:bb:24:ee:8d:04:4b:89:01:cf:6c:f0:73:44:
65:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:09:1D:E2:88:CF:84:49:E9:35:6D:B0:60:3D:B2:13:24:20:9F:B3
X509v3 Authority Key Identifier:
keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5d:43:c1:df:ed:87:b9:66:e7:7c:6e:1b:78:16:11:06:89:
3c:57:84:18:e8:df:92:e0:c9:cb:32:a4:f7:13:5a:52:03:3a:
73:cf:e0:53:c8:e8:21:0d:97:c4:ff:c1:6b:3b:6f:e2:9b:db:
f5:c6:ff:c3:db:d8:b8:ca:c1:76:35:5f:63:a9:28:ae:47:15:
c9:45:ee:9a:b2:f8:ed:c2:71:c9:82:12:f4:0b:39:c4:20:6f:
42:ae:32:ef:cf:ed:4e:b0:b4:f3:71:49:87:65:ec:6a:a7:69:
06:df:98:64:6a:e4:d7:91:e8:d2:26:26:2d:1e:b5:96:ee:19:
e2:26:45:ce:a2:fc:b4:bc:95:9f:8b:2c:75:2c:1c:d8:a5:d6:
30:b0:8b:a0:7e:2e:87:eb:73:b2:fb:7c:be:88:e4:f3:a8:2f:
07:5c:72:1b:38:25:fd:b9:5f:59:7a:bc:d9:2a:67:25:7e:f7:
db:4c:4a:09:6d:72:a6:5d:9e:b9:2b:69:e5:93:96:c9:1d:64:
c8:83:da:ea:a3:14:bb:29:7c:e6:d3:13:ad:75:72:fc:33:c7:
b7:b4:a5:ad:0b:7f:b7:57:08:2c:18:02:2d:c6:2c:ae:bf:ab:
20:1d:5a:0f:b7:58:ee:46:5a:e1:37:f0:54:12:28:d1:8c:28:
88:4b:7e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:35 2025 by rpki-client