Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
File: fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft (raw, json)
Hash identifier: erKNJKb51yd6WD1G3UQd9lYQwxeyDmR+I7K/NIBwqPA=
Subject key identifier: 60:87:57:BB:05:35:5C:10:D6:9F:05:12:39:8C:F6:64:BF:D6:46:54
Authority key identifier: 7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
Certificate issuer: /CN=7e3150f8c67063121027328954968d08d4cf329a
Certificate serial: 0197C124365389CE3F24BFFFF5CB9F4DC57A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
Manifest number: 4B
Signing time: Mon 30 Jun 2025 14:01:05 +0000
Manifest this update: Mon 30 Jun 2025 14:01:05 +0000
Manifest next update: Tue 01 Jul 2025 14:01:05 +0000
Files and hashes: 1: B0G3sXZP-lhExtNpCnBC4YPOMgM.roa (hash: gLC/9yZUh8hacXl47LTUe+LM65gMVKVuxWQdb+HkSvE=)
2: Jy053hxreS1mhBIYPf1qEV6q8xU.roa (hash: k5jKQxUhjzxS0xUSiqR57wxTDoi8K8tPdC3IRRvhbQY=)
3: fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl (hash: gvm3X+uwmhN85jV6MqqsvS7Z0cnb/OK/wP3c5ZRG+zw=)
4: k6PVLlZxAI3X_AkJNP_B54WXdz0.roa (hash: NcuIcur7U+66dD6xSrLkgdloxOkqGgs1VvRkZcvsiE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:24:36:53:89:ce:3f:24:bf:ff:f5:cb:9f:4d:c5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e3150f8c67063121027328954968d08d4cf329a
Validity
Not Before: Jun 30 14:01:05 2025 GMT
Not After : Jul 1 14:01:05 2025 GMT
Subject: CN=608757bb05355c10d69f0512398cf664bfd64654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:0d:74:cb:ff:c7:c0:64:87:db:b0:da:bc:
0b:a6:3b:ed:ee:2f:bc:36:7a:b0:ae:34:11:45:1a:
f4:64:09:31:15:a2:d1:18:b9:d4:39:93:f1:a3:50:
a6:c6:b8:9a:e4:6a:2c:b2:03:35:72:96:06:54:ff:
ce:fc:a4:9d:fb:20:02:7b:fa:ab:53:ec:a8:73:0a:
1b:63:53:94:53:82:95:83:ca:1b:49:b1:5e:c3:6e:
61:68:4a:96:8d:5c:6f:64:ae:48:db:a0:bd:90:e3:
0e:ec:f1:68:99:db:64:22:0c:a3:d7:f3:d7:cc:0c:
f8:6b:b5:36:19:7f:b4:04:03:26:38:d5:bc:25:e0:
0d:31:32:ec:47:c7:de:5f:01:e0:6a:f7:0f:78:36:
44:6e:0f:cf:59:bc:27:56:66:41:ef:2c:45:ea:98:
eb:16:87:5b:56:5d:90:03:c4:55:8a:92:97:b7:dd:
26:d4:1c:ae:da:7d:66:37:4e:60:6e:dc:09:80:28:
68:79:8c:22:f3:7f:3d:80:95:5c:4a:80:50:40:d6:
c0:b1:2a:8e:b1:97:4e:1e:3a:96:dc:c7:88:7a:14:
04:88:a4:a1:dd:72:42:f4:1e:9f:2d:bc:a7:ef:02:
69:d5:ba:93:8b:73:10:0a:7c:51:80:e9:c9:7b:8c:
51:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:87:57:BB:05:35:5C:10:D6:9F:05:12:39:8C:F6:64:BF:D6:46:54
X509v3 Authority Key Identifier:
keyid:7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9e:f0:47:d2:93:75:d7:e9:4d:25:d9:fd:5f:3d:26:d6:b2:
81:30:6a:fc:cd:72:a1:8d:65:19:42:9a:52:34:ec:76:96:c8:
47:0c:60:00:fe:52:f6:f0:4f:a3:c5:c9:37:88:38:b2:d7:d2:
6e:63:1f:2e:41:87:4a:8a:a8:be:0c:4b:ce:e4:ff:bf:3d:2b:
0a:f3:8e:43:d4:b1:dc:5b:21:18:f1:ce:7b:09:69:8b:66:0d:
cc:6d:45:2d:76:44:15:99:73:5f:69:84:e4:87:61:4c:c0:44:
a3:c1:23:8d:8c:8a:fb:3f:6e:d7:d8:47:2b:d5:45:b4:66:c6:
e7:a5:b9:6f:fa:bf:3c:cc:5b:07:1a:b1:db:05:e7:43:0a:9a:
de:26:18:65:55:ed:1f:8d:81:ef:22:09:ac:b6:c3:f8:6d:ef:
e7:69:c3:28:c0:53:78:5d:59:ee:a0:bb:ca:5c:a5:dd:0a:6e:
61:43:5f:3e:d0:e7:a5:38:ed:e8:26:c8:bd:e6:b5:cf:c7:fe:
df:22:de:c4:91:b2:6b:ae:7e:a5:36:06:cf:dd:ad:ce:87:8b:
d6:db:33:87:c6:b9:69:63:d3:b2:e0:77:c0:50:af:78:12:63:
97:58:85:b0:47:ba:30:a5:69:69:a4:0e:f7:32:a9:6b:36:6b:
4c:ad:6a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:30:13 2025 by rpki-client