Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
File: _u3yFAZ0rm_z5GRWDElWq24hre4.mft (raw, json)
Hash identifier: mGgkHdU3ZaQpzTLQwhw9Sgy8hR1BIzNX0feJrG7GwtY=
Subject key identifier: 4C:F6:8C:9E:6E:D1:B6:2C:7A:8A:7B:39:5F:67:5A:26:6D:DA:02:57
Authority key identifier: FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE
Certificate issuer: /CN=feedf2140674ae6ff3e464560c4956ab6e21adee
Certificate serial: 0197B7B3185C535006F2B7DDBE503C10ABC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
Manifest number: 0A00
Signing time: Sat 28 Jun 2025 18:00:57 +0000
Manifest this update: Sat 28 Jun 2025 18:00:57 +0000
Manifest next update: Sun 29 Jun 2025 18:00:57 +0000
Files and hashes: 1: M58q90VZFeP3jvyPYnq7UDFhR3E.roa (hash: pfDDAToaRStBIBYW01WrjbiSm0zCrXjT/V6YwQttWeY=)
2: _u3yFAZ0rm_z5GRWDElWq24hre4.crl (hash: efYgeSKFN/lk/iK7W4TpZ33lIp8yPSh3lNSUym0mD80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:18:5c:53:50:06:f2:b7:dd:be:50:3c:10:ab:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feedf2140674ae6ff3e464560c4956ab6e21adee
Validity
Not Before: Jun 28 18:00:57 2025 GMT
Not After : Jun 29 18:00:57 2025 GMT
Subject: CN=4cf68c9e6ed1b62c7a8a7b395f675a266dda0257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d4:cc:a1:35:8b:ab:80:9d:e1:1d:b2:56:b5:
3c:2d:3d:10:4c:a8:af:85:64:af:12:7c:67:1f:ed:
f7:e8:a3:15:00:51:32:40:f8:1a:40:34:80:38:a9:
7c:cb:2d:2c:ba:64:81:e4:60:49:9b:74:53:8c:da:
df:5d:69:5c:99:db:c5:bc:e3:39:da:0a:f0:a2:5f:
f6:2a:2d:31:8b:e1:22:d9:6b:ae:de:10:9d:02:18:
6b:11:1b:d1:da:ef:6f:02:a9:b2:98:68:85:1e:64:
d2:94:2e:5c:87:f8:c1:c3:f4:36:59:70:4f:6e:18:
46:00:ce:80:74:5d:f3:19:60:97:55:50:a8:2b:65:
e4:ed:40:d3:5f:23:37:33:e1:fe:9f:00:93:ba:7c:
57:2a:46:d0:ae:70:0d:9b:a7:cf:2d:72:37:d0:c3:
e4:34:da:99:d9:2b:07:dd:ad:d3:ec:64:2a:bc:ac:
6c:c3:ce:c7:72:c8:73:94:5c:ea:92:1e:31:25:3e:
77:85:e7:22:c5:cc:7a:31:58:08:3c:b2:c1:5a:56:
12:e9:e6:84:27:34:7f:a4:3f:54:6a:51:34:a3:80:
d2:8f:39:40:08:0d:7f:ae:5a:fd:87:63:36:31:f6:
54:a1:29:6b:57:f7:9f:b7:51:e7:82:46:8c:c6:68:
c4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F6:8C:9E:6E:D1:B6:2C:7A:8A:7B:39:5F:67:5A:26:6D:DA:02:57
X509v3 Authority Key Identifier:
keyid:FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:76:34:c1:d1:a1:76:b7:27:b8:4a:7f:5c:0f:aa:1e:0f:3a:
f8:38:2e:bd:1a:d3:85:04:bf:52:28:27:01:84:35:be:56:62:
ad:fa:03:66:d1:b3:e4:4d:c7:74:ac:8f:eb:7d:2d:07:14:09:
bc:28:ed:ae:ef:3c:90:f8:14:44:42:5c:6c:f0:98:ad:ce:4e:
47:be:d9:6c:ab:36:d6:76:3b:a4:cf:b2:fc:db:35:bf:da:a6:
95:8e:d2:32:4e:2e:23:0b:d9:8b:7a:79:d2:70:e3:4e:08:b4:
28:4c:06:04:56:e2:13:00:72:a0:26:9e:c3:cf:af:6a:25:fb:
2c:c8:ef:49:22:24:8c:4c:f9:c4:d4:7c:90:e6:b0:08:a1:fd:
00:b1:22:2f:18:19:a4:a6:b9:a4:6d:f2:68:17:25:83:cc:7c:
c8:eb:06:b8:ba:15:72:f0:b0:92:18:07:34:69:47:56:85:79:
05:f8:17:d7:27:a5:97:f8:e1:75:b6:6e:f6:dd:f1:c6:24:63:
ec:6f:83:98:3d:85:e8:81:8b:5e:da:1a:22:9d:ae:a7:80:5a:
7f:61:66:70:86:85:df:c6:aa:0c:fd:5f:ef:1b:f0:5f:3d:74:
13:c9:ad:bb:33:df:c0:bb:95:c2:ad:17:09:c3:09:d2:20:12:
8d:4b:e0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:04:46 2025 by rpki-client