Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
File: ffyQHUowe9oPOwv2XTEEaCINxeE.mft (raw, json)
Hash identifier: kPEFhJ6ybIXcTTO5Vdi+kvABpGxSnBzTBZt15IWp2Lk=
Subject key identifier: 9C:3A:F6:4A:22:35:AA:6A:BC:5C:DB:D2:4D:B1:12:AB:12:22:A8:DA
Authority key identifier: 7D:FC:90:1D:4A:30:7B:DA:0F:3B:0B:F6:5D:31:04:68:22:0D:C5:E1
Certificate issuer: /CN=7dfc901d4a307bda0f3b0bf65d310468220dc5e1
Certificate serial: 0197B9D94A7AC20BE2A90D073C3BF997D97C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffyQHUowe9oPOwv2XTEEaCINxeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
Manifest number: 0C
Signing time: Sun 29 Jun 2025 04:01:54 +0000
Manifest this update: Sun 29 Jun 2025 04:01:54 +0000
Manifest next update: Mon 30 Jun 2025 04:01:54 +0000
Files and hashes: 1: ffyQHUowe9oPOwv2XTEEaCINxeE.crl (hash: bZxYle2sD9o8LRW+ok8EiZ+D6okYDMo/toSezUykhlw=)
2: jQYNkPm-7PL8fW0UL9FVZuPtO60.roa (hash: KBWJmS4cybTN+ONWvg4jGPD1GVeVDhS/4yiWvoMcO6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffyQHUowe9oPOwv2XTEEaCINxeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:4a:7a:c2:0b:e2:a9:0d:07:3c:3b:f9:97:d9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dfc901d4a307bda0f3b0bf65d310468220dc5e1
Validity
Not Before: Jun 29 04:01:54 2025 GMT
Not After : Jun 30 04:01:54 2025 GMT
Subject: CN=9c3af64a2235aa6abc5cdbd24db112ab1222a8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bc:37:bd:81:07:39:5b:bf:d8:69:29:7e:5c:
4e:88:81:d5:69:2f:e1:22:55:49:bb:f2:f2:dc:db:
06:6b:cc:7c:ba:44:46:aa:5d:16:83:47:e5:b9:24:
a9:7b:bf:be:03:c6:ff:fa:c2:c3:1a:1a:ea:27:27:
ac:9b:91:07:9b:47:54:c3:fb:45:de:ed:5e:ce:73:
a7:31:bd:3b:ca:30:02:a4:08:02:95:81:1e:9a:2b:
61:e9:2a:f3:0a:02:a4:fe:c4:36:d4:c3:45:a0:aa:
8a:40:21:fa:68:55:15:05:e4:25:09:24:74:86:da:
54:4e:02:22:a9:dd:59:3c:2b:b4:d2:8d:ba:aa:a3:
87:a9:83:3a:e3:89:5a:54:22:2b:90:ef:f8:9b:3b:
dd:dd:d4:93:59:db:98:10:a1:f8:2b:07:0e:a6:c4:
80:a1:cb:e6:60:e8:88:7a:aa:dc:06:fb:09:e3:5d:
8f:40:7c:1e:ac:43:b6:9c:b4:b2:91:12:9a:83:2a:
c4:62:ab:4c:33:2b:a1:0c:34:b3:a6:6e:25:ad:81:
64:40:72:35:71:a3:62:04:de:a4:b5:dd:85:fb:20:
15:4e:03:ea:77:9e:d5:fe:8e:a1:f3:8e:53:99:c6:
7f:e3:34:39:7e:af:0b:27:d2:0a:88:7f:73:0d:7d:
72:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3A:F6:4A:22:35:AA:6A:BC:5C:DB:D2:4D:B1:12:AB:12:22:A8:DA
X509v3 Authority Key Identifier:
keyid:7D:FC:90:1D:4A:30:7B:DA:0F:3B:0B:F6:5D:31:04:68:22:0D:C5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffyQHUowe9oPOwv2XTEEaCINxeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c0:38:9d:26:68:31:16:f2:45:7e:ee:77:5d:10:59:b7:da:
fa:f0:73:88:7e:2a:3d:98:a6:9e:8f:19:82:1f:e6:c7:a8:0c:
19:2d:69:a1:a8:1e:89:fa:25:48:32:43:8f:69:6b:92:b3:ba:
94:8a:d1:8a:7e:85:79:bf:43:03:52:b0:b5:48:e8:b4:52:7a:
f9:c4:50:2e:fb:fe:77:3b:18:9d:35:e3:72:79:56:a3:e5:72:
c7:47:c2:e0:de:f9:3e:3c:50:01:bb:36:e3:e2:a3:77:be:ab:
9a:e0:b6:44:8c:94:93:c3:9e:28:17:9c:ac:e0:48:dc:c5:22:
cd:db:97:b4:73:b1:8b:c1:c5:89:45:84:70:95:d0:a4:3f:19:
3f:0e:ca:75:07:c5:a4:f6:66:3b:02:81:85:66:bb:55:e2:e0:
0b:0e:eb:16:34:2f:80:69:49:64:3b:c9:ab:c5:c9:a3:15:3b:
92:38:a9:89:2c:10:a5:89:62:f6:b5:95:dc:76:78:d0:ab:a3:
90:55:94:28:98:22:75:c8:80:69:e6:8f:89:5b:53:fe:f5:e3:
8b:82:65:71:84:a3:2e:e3:e2:de:f8:06:84:17:35:b9:83:d2:
66:64:b9:c7:bd:51:63:16:7e:c9:13:d8:32:80:a9:b5:c6:cf:
2a:2e:cf:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:31:49 2025 by rpki-client