Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft
File: F6zfazcM8QTIcsxNuutzcbL3xoo.mft (raw, json)
Hash identifier: FFlBvGXIfeTTjo3d7kvapOPhCpOr450UFT3WnVsTVVA=
Subject key identifier: EF:8C:77:EA:FA:E2:67:F0:9D:26:A3:07:09:2D:EA:26:47:6C:FA:F6
Authority key identifier: 17:AC:DF:6B:37:0C:F1:04:C8:72:CC:4D:BA:EB:73:71:B2:F7:C6:8A
Certificate issuer: /CN=17acdf6b370cf104c872cc4dbaeb7371b2f7c68a
Certificate serial: 0197B7EAD1610CD103DDA034EBAD1B461D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft
Manifest number: 33
Signing time: Sat 28 Jun 2025 19:01:48 +0000
Manifest this update: Sat 28 Jun 2025 19:01:48 +0000
Manifest next update: Sun 29 Jun 2025 19:01:48 +0000
Files and hashes: 1: F6zfazcM8QTIcsxNuutzcbL3xoo.crl (hash: okAJM+vanGbga0HyinyUmIoLep7NEA0FSa2dw4oVEqo=)
2: KFM6Xxb4yGnXw8_bU_5u9NFp1Jw.roa (hash: FzqITUktotdSEgzJPKi/MbN0jwrtNR+ishuw7Jc2ADw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:d1:61:0c:d1:03:dd:a0:34:eb:ad:1b:46:1d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17acdf6b370cf104c872cc4dbaeb7371b2f7c68a
Validity
Not Before: Jun 28 19:01:48 2025 GMT
Not After : Jun 29 19:01:48 2025 GMT
Subject: CN=ef8c77eafae267f09d26a307092dea26476cfaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ad:4d:a3:fe:77:a4:e0:63:28:58:2d:96:bc:
88:5d:60:a5:99:91:f9:d4:f4:30:3f:8c:fc:b3:7d:
d7:38:9c:cc:0a:05:7d:17:8a:b9:78:21:9c:63:2f:
b2:4c:6b:3d:a7:f8:e7:65:4f:e6:8e:ab:16:8f:2e:
f0:47:12:f3:f8:19:74:57:c2:d0:57:bf:d3:b8:33:
4c:22:8e:23:d1:8e:35:bc:d6:48:78:71:6d:85:f7:
58:e1:24:6a:de:18:0d:68:3f:ce:db:7b:11:b1:b9:
dc:47:05:38:29:40:e7:61:b7:44:1c:e0:2d:f8:d7:
90:7f:e3:39:09:c2:de:b9:8f:d5:29:a6:81:96:7c:
f6:95:fb:9a:15:56:dd:68:3a:36:71:7f:2f:aa:b5:
d5:43:5e:2f:e3:90:ad:d2:06:e5:96:12:90:6b:43:
21:2e:f1:24:e9:f8:9b:0c:28:ab:01:0f:34:29:d5:
62:0c:08:ef:a9:c9:05:48:75:7e:b0:2e:b6:67:28:
27:59:de:9e:ad:88:5c:67:dc:fb:fd:e5:96:17:8e:
21:c8:d2:51:3f:dd:0c:68:a3:ee:42:e0:ce:59:03:
8c:00:0a:f2:c3:42:ec:55:c4:80:b3:c3:9e:a5:37:
0a:05:da:44:24:be:90:81:22:b3:a7:ac:88:93:2b:
f8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8C:77:EA:FA:E2:67:F0:9D:26:A3:07:09:2D:EA:26:47:6C:FA:F6
X509v3 Authority Key Identifier:
keyid:17:AC:DF:6B:37:0C:F1:04:C8:72:CC:4D:BA:EB:73:71:B2:F7:C6:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:59:2b:5c:8e:1a:ad:cb:9b:ea:a2:48:c3:f4:02:ce:f4:5e:
e3:e7:65:81:fc:b7:3e:e1:7d:6e:b6:c5:c5:07:12:2d:cb:d1:
ed:0a:ae:12:58:11:1c:d1:0e:28:01:f1:58:a5:69:2e:3b:d3:
ff:5f:4c:90:30:3f:70:22:b5:55:7d:ce:3b:58:76:bc:36:e5:
9f:a5:f0:83:aa:62:76:5e:df:d8:96:43:d6:70:c1:53:93:7a:
e0:55:95:ac:39:63:c4:7d:75:35:51:60:8d:7e:92:ec:17:2d:
86:0c:36:63:7f:00:7c:e9:2e:70:2b:87:77:2c:d3:f1:bb:aa:
a3:cd:db:16:dc:68:2d:ab:e5:2d:75:62:3f:01:d1:9d:97:71:
21:8d:42:19:69:ae:8e:87:f2:8f:4c:f3:9c:13:21:f4:57:d7:
e5:68:06:88:c6:34:51:e7:ca:7f:b3:6e:3b:4d:a3:91:eb:8d:
da:e6:23:6b:0e:dc:da:e6:6f:d1:a9:6f:15:39:48:9a:4f:36:
92:ad:a2:e6:9a:44:45:e2:ad:52:45:19:b5:a1:96:a5:ff:8b:
d0:ae:4c:ce:49:64:f8:ee:01:5a:9e:2c:d3:8f:0c:9f:c1:37:
9b:30:b5:c9:24:27:00:4a:22:54:c4:46:a8:6f:35:ae:cd:c9:
b2:5e:59:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:38:11 2025 by rpki-client