Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
File: fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft (raw, json)
Hash identifier: MyZlUWW5mbHrZ9+n55Z/WWdAcPX5KDthNOwG3wjH4Ik=
Subject key identifier: C4:70:97:A9:7B:52:24:9B:86:65:68:D8:09:29:10:71:D3:DD:D4:9B
Authority key identifier: 7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
Certificate issuer: /CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Certificate serial: 0197B6A0BD0D867C7F8F213ED0A2DEF2A629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
Manifest number: 08F6
Signing time: Sat 28 Jun 2025 13:01:16 +0000
Manifest this update: Sat 28 Jun 2025 13:01:16 +0000
Manifest next update: Sun 29 Jun 2025 13:01:16 +0000
Files and hashes: 1: WdmL2O8VPrkR42ZOw2QephNcMKQ.roa (hash: hlVVES8UOIZDvKYVagg5Nkh0JVEcOtJVFmlV0ra9F/8=)
2: fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl (hash: peJlqwV+q7Dw7Dd6WZmgXgMJQfCRJDJRiUdZRQp0UNY=)
3: lujy_B0CgE3UQHNrtRpIDknhG84.roa (hash: HhEZYonW06tw2KSs5U9keAqL3PO1g1AoWXaLns6T1aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:bd:0d:86:7c:7f:8f:21:3e:d0:a2:de:f2:a6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Validity
Not Before: Jun 28 13:01:16 2025 GMT
Not After : Jun 29 13:01:16 2025 GMT
Subject: CN=c47097a97b52249b866568d809291071d3ddd49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:40:40:6a:37:ab:d2:33:a6:8b:55:7e:c5:44:
b6:ed:4b:f6:e1:bd:f3:aa:88:e1:0b:9b:53:0d:cb:
22:15:05:99:92:fd:df:3e:29:a9:fd:47:86:75:a4:
67:5f:92:c7:d9:51:af:b8:f3:16:76:22:c2:85:94:
34:1f:c2:91:8f:b5:9c:03:87:dc:35:c4:bf:3d:2f:
b6:e4:74:2b:bd:68:c4:7b:eb:1a:a0:a5:08:4d:6c:
cc:33:d7:c8:d7:d2:07:e2:09:ee:da:2b:f4:06:00:
26:13:68:ff:4f:cd:be:f7:7c:74:ec:7a:5b:d9:9e:
12:18:4f:8d:4d:4c:cd:24:c4:c7:ed:66:62:bc:bd:
a3:5e:bf:e7:ad:f7:12:ca:ca:ed:86:c2:fb:99:3f:
56:35:19:ae:2c:05:f3:1c:b2:d4:85:c1:ce:c0:ae:
8f:07:60:b4:02:29:cd:56:fc:e8:85:51:ec:b9:82:
c4:c7:58:55:e0:fe:97:b5:7e:91:00:03:39:13:dd:
2b:f5:95:62:7a:cc:1d:9a:e4:f7:c2:9e:31:b4:e6:
d0:4f:a0:6a:72:88:3f:95:86:9d:d1:cf:bb:19:82:
3d:ba:a9:0f:d5:81:3f:60:72:09:27:44:3d:ed:8d:
b0:6d:20:73:8a:f9:b7:54:e8:e3:6e:a0:3a:80:0d:
25:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:70:97:A9:7B:52:24:9B:86:65:68:D8:09:29:10:71:D3:DD:D4:9B
X509v3 Authority Key Identifier:
keyid:7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e9:5d:15:6c:99:a2:3e:6b:dc:d3:42:fb:1b:f3:5d:83:59:
72:3e:9f:21:61:eb:81:c4:05:27:27:47:85:d6:48:3e:6b:a4:
61:92:c6:f8:68:08:2d:37:73:c4:cc:71:2c:bd:36:5b:30:f3:
0a:7e:c4:04:fd:b7:15:b5:d5:4e:2b:e1:20:13:33:a7:58:6d:
b2:cf:e6:6a:b5:d4:62:52:f3:9d:59:3e:4d:5e:f2:59:43:17:
0c:21:82:f1:ae:7b:be:7c:d4:ff:97:22:de:c8:60:57:8e:2d:
d7:80:f5:3b:88:f5:fe:41:a7:4b:18:7a:2c:44:8b:21:3c:c3:
79:aa:e5:09:d3:22:8e:3f:2e:c7:78:a8:dd:05:92:44:5d:e0:
72:67:1d:33:e5:15:7f:a9:fe:8e:5e:e5:69:96:33:b2:06:d4:
e2:21:70:fe:52:00:4a:51:67:4f:80:fa:e9:fc:16:66:8a:0b:
2f:d8:dc:7f:de:e2:f0:5b:e2:00:bd:8f:86:4e:af:46:ab:0f:
0c:75:3c:12:b1:7c:be:c6:61:0a:ed:71:b8:df:c5:de:f0:48:
6d:a9:b5:bf:79:ec:e4:e2:50:78:9e:b2:75:fd:75:4b:66:16:
b3:7b:02:15:d2:91:dd:1a:d6:21:2e:8c:01:7b:73:fe:53:74:
4a:5f:b1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:43 2025 by rpki-client