Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
File: fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft (raw, json)
Hash identifier: btZ0z8pVFlFGB7/Dp57+cbF3X25O4dWzRBpQ4sEL3/E=
Subject key identifier: 2F:13:B9:88:F3:88:84:8C:CD:7A:08:C3:39:22:8F:DA:E1:98:A1:30
Authority key identifier: 7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
Certificate issuer: /CN=7e02a961b0375d72191bd970815d6b15f427d073
Certificate serial: 0197C681A419AD113AF027720330D7D1888B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
Manifest number: 15BC
Signing time: Tue 01 Jul 2025 15:01:14 +0000
Manifest this update: Tue 01 Jul 2025 15:01:14 +0000
Manifest next update: Wed 02 Jul 2025 15:01:14 +0000
Files and hashes: 1: O_lyoeGqf219CPNaRILiVGtpSnw.roa (hash: MBjGGTF1i33MT6liDQumorJo2rjHXFkdaYBR/A83Hr4=)
2: fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl (hash: IA7+BySw08MPkNRtQmNiFsNSMiB+On9PN344kAo+mro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:81:a4:19:ad:11:3a:f0:27:72:03:30:d7:d1:88:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02a961b0375d72191bd970815d6b15f427d073
Validity
Not Before: Jul 1 15:01:14 2025 GMT
Not After : Jul 2 15:01:14 2025 GMT
Subject: CN=2f13b988f388848ccd7a08c339228fdae198a130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4c:bb:4f:5c:f7:c4:ee:05:aa:da:53:c9:a2:
f7:95:e7:be:74:e5:37:86:0f:62:c0:7d:95:2b:80:
d0:73:73:26:20:6c:89:d1:b6:1e:64:47:36:7b:13:
1c:c3:12:97:6e:5e:42:8d:76:7c:c2:4e:a7:88:86:
f4:40:da:8c:13:4e:43:dd:8a:ae:fe:d4:4b:eb:f1:
ca:85:a1:8e:0d:84:fe:ab:2d:7b:c7:c0:0d:4d:97:
a6:43:e4:dd:83:10:69:d1:ca:f4:d4:0a:b9:c5:25:
ec:b8:dc:29:5a:c7:22:bb:52:e2:7b:fd:df:c8:e9:
a8:dc:1d:34:6d:a4:4f:90:64:eb:ee:9b:ca:8d:1d:
6c:c5:10:2d:3b:d1:56:cd:00:33:ed:7c:cc:8e:fe:
9f:f2:9c:24:be:97:80:e4:c6:59:60:5c:0f:b6:4c:
fc:aa:cc:71:6f:68:71:59:a6:5b:ad:72:92:74:a9:
1e:fe:ea:6c:4c:8f:e5:81:b5:10:a5:d4:35:dc:13:
db:e7:81:6e:d7:48:a6:9b:be:dd:4e:c7:d5:f8:0c:
f0:12:d0:3b:1b:e4:04:a0:1b:b4:3d:92:2f:21:82:
3f:ef:6f:81:ed:e4:7b:1a:ca:6e:43:a8:c9:5d:1e:
03:3a:a7:a8:91:63:37:d9:f9:66:b8:ca:2d:e4:6b:
3c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:13:B9:88:F3:88:84:8C:CD:7A:08:C3:39:22:8F:DA:E1:98:A1:30
X509v3 Authority Key Identifier:
keyid:7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:82:42:40:bd:af:0e:6d:e3:9f:bc:82:bf:e8:61:f3:fb:de:
03:e9:b7:4b:31:64:88:10:27:a8:26:5e:25:bc:b7:b9:85:f1:
2b:9e:a2:f7:cf:32:5a:12:f7:4e:b5:2d:91:76:e4:41:60:65:
d3:f2:50:a8:a7:7c:3e:4c:8f:4f:3f:76:56:3d:41:9c:98:b1:
c1:4f:8e:40:a9:23:72:80:3b:b3:08:a1:76:e5:bd:02:79:0e:
97:09:a2:a6:22:80:a1:6f:1d:07:cc:c4:7f:8e:17:71:41:93:
53:eb:73:c3:86:cb:cb:e9:c5:63:dd:a6:77:8b:d8:a0:06:d3:
91:79:e7:05:ed:d3:1e:2d:1d:56:7e:bb:4a:65:49:4e:a2:37:
9f:a0:82:30:af:0b:f7:12:79:e8:32:61:98:0f:b5:5b:8d:77:
ae:7c:0a:f1:49:b2:9b:30:14:f3:b0:f4:dc:b4:c4:9c:9d:b8:
95:91:3e:32:7f:1d:ff:71:b3:dd:0a:bf:26:20:08:34:8a:0d:
71:ec:14:6d:3f:5a:80:00:23:cf:dd:04:19:07:00:02:65:b5:
71:52:f6:fe:0f:92:9b:12:3f:ab:fe:32:35:41:42:9c:a7:fc:
8f:fa:da:64:4a:f1:03:53:7a:1f:93:40:5c:76:b2:8a:8e:ca:
04:30:8d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:06:02 2025 by rpki-client