Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
File: F2w05a5wFsNgXTJpVkrpaFRDWV0.mft (raw, json)
Hash identifier: f7zvChTvw7h+F5cTRYKZOJA9tSpN2InEPNpjfRxNIE4=
Subject key identifier: 5F:B4:2A:18:6D:40:04:6B:EF:76:CA:50:72:2F:E4:E8:67:69:7F:A8
Authority key identifier: 17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D
Certificate issuer: /CN=176c34e5ae7016c3605d3269564ae9685443595d
Certificate serial: 0197B9A1AD96DAD19A39C692AF5071DE7FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
Manifest number: 081D
Signing time: Sun 29 Jun 2025 03:01:10 +0000
Manifest this update: Sun 29 Jun 2025 03:01:10 +0000
Manifest next update: Mon 30 Jun 2025 03:01:10 +0000
Files and hashes: 1: F2w05a5wFsNgXTJpVkrpaFRDWV0.crl (hash: OFMtM8YulQyI7/6S8N9oWLztwrKBxsD1YwCKKvQTpe8=)
2: wlY-QtAkBrD3gjKIpeQoXPyzFOM.roa (hash: zJBXQ4JCSb3Ylp4EVKprUMeUDS30W25c/gEiCbzENgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:ad:96:da:d1:9a:39:c6:92:af:50:71:de:7f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=176c34e5ae7016c3605d3269564ae9685443595d
Validity
Not Before: Jun 29 03:01:10 2025 GMT
Not After : Jun 30 03:01:10 2025 GMT
Subject: CN=5fb42a186d40046bef76ca50722fe4e867697fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f3:22:23:ae:00:5a:df:a7:db:09:6e:d8:f5:
e8:11:ea:80:be:87:d2:f8:6d:c7:fb:48:9d:3f:24:
a5:e7:4e:68:19:e3:f4:4f:2f:17:23:66:2b:fa:99:
06:c3:18:73:e9:a5:97:55:f0:a1:d7:17:e7:e7:72:
10:d4:2a:f6:c9:f7:31:0f:c6:66:9d:77:9f:f3:ba:
ce:5c:d2:78:a6:dd:fc:55:62:29:42:1c:0b:46:2d:
b8:a8:96:72:c0:26:51:fe:29:a6:ec:a5:4d:3d:27:
75:45:64:6e:df:7e:a2:91:53:42:3f:22:0a:da:fa:
d5:da:76:69:aa:7f:5f:9d:08:8c:3c:c9:81:42:cb:
96:e3:e0:9e:3c:32:5e:bb:50:4f:e3:5e:c4:34:4a:
f3:e6:52:af:aa:e8:08:77:62:ea:b8:51:10:fd:eb:
04:23:1f:42:fc:2b:f5:d4:2b:12:85:1e:34:68:5c:
76:04:2e:7b:5f:83:3b:5e:40:5e:1b:b2:02:56:f6:
7e:dd:dc:61:03:56:5c:d3:38:cf:fe:e8:15:3b:dd:
e8:cb:38:a7:d3:22:2d:e0:3a:b1:81:87:ec:38:17:
98:8c:d7:7c:da:6a:9f:f4:2c:23:ad:7b:0f:22:61:
da:d0:30:d6:96:38:d8:2a:71:9f:b5:59:d8:33:77:
90:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B4:2A:18:6D:40:04:6B:EF:76:CA:50:72:2F:E4:E8:67:69:7F:A8
X509v3 Authority Key Identifier:
keyid:17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:08:99:b0:26:df:0e:51:1e:64:fd:ab:1e:82:e9:3e:4e:51:
ba:8e:45:2a:18:1d:43:11:ea:32:94:ed:51:d8:3a:61:a1:5f:
f5:6e:5a:fd:57:9c:a4:18:70:58:e0:ba:5c:29:70:11:2b:4f:
f6:7a:51:97:f6:c8:73:3d:8b:cb:95:8e:65:c6:89:bb:73:bd:
d0:30:b8:81:69:a0:67:c8:8c:77:bb:81:10:60:1c:85:2d:40:
e9:5a:a4:bb:96:ac:a4:cd:52:c3:09:35:61:9c:25:aa:f2:6a:
7c:c7:a9:56:40:5e:e9:09:d6:73:12:dc:8d:3a:34:af:27:34:
76:4a:e7:7b:13:09:cc:ee:51:76:a3:9f:e9:b8:c3:02:1a:e9:
d5:2b:73:89:35:50:5b:7c:fa:7e:07:75:0a:d3:2d:b1:bf:29:
ac:18:f1:c2:25:79:e9:95:c4:86:70:76:61:a0:ed:82:f0:e2:
4a:55:9d:69:1b:52:18:5a:3f:67:be:04:d4:85:67:68:bb:64:
ec:0e:59:b3:74:dd:b7:89:68:98:f1:94:b3:f7:0c:f9:a0:ea:
24:cd:6c:58:ad:2a:d8:29:28:e7:1d:e7:e8:e9:87:0b:15:78:
8e:87:56:70:37:5f:da:79:03:ee:1a:f3:fb:60:7e:ab:c9:ea:
74:d7:23:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:04:45 2025 by rpki-client