Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
File: fDUy5S6q_vlIxCyLHVEUXKydTJY.mft (raw, json)
Hash identifier: 2FQEpF/pvgiy4n5jE/LJ4ZqWOvBTCzMzVJxgbUonKKw=
Subject key identifier: 3F:2B:73:2B:FD:B2:AD:13:81:AE:19:C4:CA:30:F7:F6:A7:80:4D:CD
Authority key identifier: 7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96
Certificate issuer: /CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96
Certificate serial: 0197CA277FD533CB69A59FF768FEBE2B1A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
Manifest number: 0BAE
Signing time: Wed 02 Jul 2025 08:01:15 +0000
Manifest this update: Wed 02 Jul 2025 08:01:15 +0000
Manifest next update: Thu 03 Jul 2025 08:01:15 +0000
Files and hashes: 1: XCHPvb-EkH1zGNPsBprEZBKSmdE.roa (hash: Sji1HnCVrncrNibsWO7N88ENDvFcUSSKPSq/SoaOpWI=)
2: fDUy5S6q_vlIxCyLHVEUXKydTJY.crl (hash: vbFGqJClwaZ8/oYgb+fib1XKkAka7eCgpUXQkZ6AvdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:27:7f:d5:33:cb:69:a5:9f:f7:68:fe:be:2b:1a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96
Validity
Not Before: Jul 2 08:01:15 2025 GMT
Not After : Jul 3 08:01:15 2025 GMT
Subject: CN=3f2b732bfdb2ad1381ae19c4ca30f7f6a7804dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:28:04:5a:0f:86:70:7f:f4:8f:8c:43:4d:98:
3d:f6:3b:4c:a6:24:e8:cf:9c:9a:a2:e0:b3:77:5e:
6f:f2:13:a3:5e:24:1b:22:df:80:ba:e3:50:64:d3:
1b:c2:be:63:62:7e:77:65:6c:a1:66:8f:74:4e:d4:
b8:04:7d:90:06:01:5d:2c:12:bf:d7:27:a1:68:98:
b4:50:27:a4:0e:c8:24:2c:b7:07:9a:92:25:5c:be:
e4:c3:27:69:1c:c2:68:2d:4b:04:4c:f8:71:30:4d:
29:b9:f4:77:eb:07:f0:26:f5:fc:32:b4:45:67:e6:
66:73:cc:92:48:0e:5e:0f:5b:76:7b:9f:ea:94:d2:
dd:5b:44:bb:b1:9b:f4:e3:11:23:4a:48:12:fb:9d:
05:85:17:b2:fd:1b:f4:86:e3:33:f3:a3:f1:b6:1a:
90:a0:1b:ec:cb:e0:5f:44:60:b7:c7:8c:23:6e:c1:
91:bb:f9:17:6c:1c:0d:b3:84:52:1f:bf:f0:ac:07:
41:f9:1a:f2:06:9e:97:82:3a:76:c5:fe:5d:f9:6a:
6f:97:33:4b:bd:b7:3f:11:d3:58:b4:e8:58:d0:69:
b5:93:26:60:5c:97:c9:67:de:ef:55:ab:0f:ec:17:
82:4a:04:f7:bc:f4:9e:5c:bd:f3:63:fa:7f:10:1b:
ea:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2B:73:2B:FD:B2:AD:13:81:AE:19:C4:CA:30:F7:F6:A7:80:4D:CD
X509v3 Authority Key Identifier:
keyid:7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7b:a2:c9:35:87:09:bb:28:e7:2b:34:f3:c7:17:60:5e:e6:
b2:fb:f8:1c:03:26:5d:ed:49:90:45:46:53:5f:40:74:01:ed:
09:10:29:78:45:2b:c9:e9:d5:d3:af:8f:59:66:bd:37:38:b8:
97:4b:9d:bd:e9:7c:c8:ca:40:70:29:23:13:9e:a0:00:02:30:
29:87:0b:84:c0:e7:7b:2a:ef:ed:c8:23:91:d7:d8:ec:bd:95:
d8:b7:7d:74:2b:89:26:51:cf:fc:82:1f:b5:88:30:03:2a:0e:
c8:ee:46:cf:1d:a4:48:60:0c:98:85:9a:1c:b6:7d:95:30:05:
60:cd:b9:74:81:e3:6b:b3:d8:63:ca:56:da:a4:90:e2:92:11:
42:e2:45:f4:b5:d6:f5:60:85:83:08:51:a0:d5:05:6f:25:33:
c0:8b:f1:29:37:19:1f:45:15:48:9b:00:c0:64:6e:98:d3:ec:
77:19:c9:4c:49:a3:40:f2:70:54:57:f1:1f:7a:df:09:f8:72:
7f:da:48:6d:02:82:00:06:f0:67:be:6c:e3:41:96:13:d2:50:
72:04:ae:fe:8a:68:88:4b:76:e4:e6:5c:df:30:8e:85:1d:a1:
e4:ff:13:d8:1e:3d:7a:ed:70:c5:45:54:52:f4:12:48:3e:6d:
7f:20:8b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:53:19 2025 by rpki-client