Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
File: x3ER7FVJEVyzR2VNj-WycJ0n998.mft (raw, json)
Hash identifier: 7TAAxQLirMzKaTdVYNESlm8MOLUnks/8GqYH/j+rzN8=
Subject key identifier: FC:A0:80:58:A6:04:B0:BA:84:6D:B6:A9:26:00:D0:DD:FF:2C:7B:DB
Authority key identifier: C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
Certificate issuer: /CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Certificate serial: 0197C04A53F49D4441CF0B9C3732ED175E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
Manifest number: 0FB5
Signing time: Mon 30 Jun 2025 10:03:05 +0000
Manifest this update: Mon 30 Jun 2025 10:03:05 +0000
Manifest next update: Tue 01 Jul 2025 10:03:05 +0000
Files and hashes: 1: 9QkZQFFq52UED9EyY0jKnFH-pX8.roa (hash: qLNZsCVw5BE1cHr6HyybImHSaQWc8kutbUnGNRzqfeU=)
2: x3ER7FVJEVyzR2VNj-WycJ0n998.crl (hash: YNBJO11gSkf3MiH10ylV439YDbO4/0SDg0+mc8676EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:4a:53:f4:9d:44:41:cf:0b:9c:37:32:ed:17:5e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Validity
Not Before: Jun 30 10:03:05 2025 GMT
Not After : Jul 1 10:03:05 2025 GMT
Subject: CN=fca08058a604b0ba846db6a92600d0ddff2c7bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f1:b8:e5:a3:f3:50:94:8e:b5:d6:9e:35:26:
e1:04:cc:72:bc:26:f9:19:0f:71:b1:27:77:19:50:
e1:f1:bc:7c:92:52:58:fd:d8:45:4a:bd:8a:f7:2a:
1b:9b:db:f5:9f:6e:06:31:44:db:f6:eb:a2:0a:b6:
c3:98:6c:26:61:ba:f8:c9:47:a4:a8:63:58:9c:a1:
ee:b3:8a:2a:8e:ac:5b:29:c1:34:25:d4:05:b1:ea:
3a:12:f3:0e:da:cb:69:8a:39:a2:93:bf:d4:a0:b1:
30:95:75:04:be:19:3f:8c:b1:58:ec:16:90:fd:51:
3e:13:b7:b6:af:c2:3c:b7:28:26:8a:18:2f:be:9d:
ac:0a:66:33:80:2c:90:38:75:ac:6a:bd:e1:31:ce:
74:20:ac:58:29:66:b8:60:f1:be:cd:aa:93:e4:58:
f4:e6:8a:2d:f3:ef:f6:80:a6:5b:22:3b:e7:2b:04:
c5:13:81:3d:ab:4d:b1:f8:49:b7:94:37:c5:4a:c5:
76:58:87:6d:29:b5:d4:b8:e3:70:da:c3:77:5d:51:
aa:70:54:63:64:8d:3b:53:bb:1a:76:e7:d9:38:8b:
b9:2e:98:1d:e0:85:bd:56:fe:f2:61:0c:8b:56:06:
50:3c:60:98:b9:38:3d:26:cc:95:38:0b:0e:c4:2a:
4e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A0:80:58:A6:04:B0:BA:84:6D:B6:A9:26:00:D0:DD:FF:2C:7B:DB
X509v3 Authority Key Identifier:
keyid:C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9d:2a:d8:d2:07:59:56:60:ee:26:43:f4:f0:5c:53:e5:49:
5f:74:d2:d4:87:8a:d5:00:2a:56:53:98:aa:7f:8a:a4:8b:5a:
88:cc:2d:a8:02:9b:7d:99:6b:13:b1:0f:f5:c4:af:5d:58:91:
ae:0f:49:df:4d:fe:da:d2:9b:e5:6f:dd:f3:2e:73:c8:cb:2e:
b5:5f:de:e2:52:00:ff:85:69:b5:7c:ea:24:ba:28:c3:d3:d8:
2b:28:39:ce:cf:1e:a1:b2:db:13:56:81:3a:44:b5:6b:35:09:
b6:d7:1b:59:8f:32:4c:5b:5a:16:70:3b:1b:cd:7e:1e:2c:2f:
9c:88:39:15:16:cf:38:99:5d:d4:51:5c:74:70:5a:bd:57:b7:
05:e9:8a:20:d0:35:60:5d:08:e6:33:18:2f:68:b1:d2:9e:5b:
18:78:0d:d3:45:35:24:c4:d6:49:64:98:a9:5e:18:b8:95:32:
58:b4:ea:d0:74:10:bd:a3:62:b2:f8:37:94:1e:b3:43:5d:ad:
a3:ed:63:e6:96:1c:40:5e:04:92:d0:47:1e:7d:4f:b2:ac:f5:
11:d7:c7:64:c2:ac:b3:e6:d1:d0:3a:b4:ed:be:d6:eb:9d:57:
33:50:3f:9b:49:04:db:17:77:da:c6:8c:33:23:63:e1:02:f3:
d0:5a:b6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:16:16 2025 by rpki-client