Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
File: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft (raw, json)
Hash identifier: DZFecQxyusoHXftJ5R+VCIaGUGDQtrC1+/jOzQHJGcs=
Subject key identifier: CB:FB:21:0A:BF:B2:00:11:A3:0A:2E:1C:A2:A1:10:72:5D:DE:9D:D8
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial: 0197B9A14AFD73712EE75E683E05EBE0F4BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
Manifest number: 0A25
Signing time: Sun 29 Jun 2025 03:00:44 +0000
Manifest this update: Sun 29 Jun 2025 03:00:44 +0000
Manifest next update: Mon 30 Jun 2025 03:00:44 +0000
Files and hashes: 1: ACD72rE-jioyxPH9RAuGb5mC6oU.roa (hash: QtFylWnulCc2yQBn+mtJTIcyYgVI68tUvXBBF4rKnVc=)
2: _4IIJhtFlJdrkjSOppTsaFBNkrg.roa (hash: r5hI609ZhZ4xyXvkrk1Z26XwV02QOdDJJ0CIfMyhg7s=)
3: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl (hash: jQKWruhmfhV+ixIaqRDFoUBxuGsZbiySbNfuurUJe0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:4a:fd:73:71:2e:e7:5e:68:3e:05:eb:e0:f4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Validity
Not Before: Jun 29 03:00:44 2025 GMT
Not After : Jun 30 03:00:44 2025 GMT
Subject: CN=cbfb210abfb20011a30a2e1ca2a110725dde9dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:79:21:33:15:2d:31:a3:64:93:03:9a:23:
3b:8e:64:fe:47:9c:bb:42:17:cc:08:4b:59:9e:ac:
bd:43:57:91:71:6b:09:e0:af:f3:35:71:b6:d8:02:
bb:cf:04:62:1b:04:b3:60:f1:d0:b9:84:78:4a:e2:
f7:f8:26:9d:ea:a5:5d:60:cf:01:33:f4:77:af:f2:
99:cc:b7:4b:29:58:26:c0:7a:77:da:4c:37:8b:68:
f3:29:57:ac:16:96:d3:21:3e:40:8e:f6:39:7e:cf:
2a:a8:13:59:67:81:ca:ac:d1:62:d1:82:19:09:26:
a6:92:81:c1:7b:6a:99:0a:cb:4c:aa:f7:cb:04:3b:
ba:7c:32:b7:2a:16:36:f1:e4:e0:6c:7b:6a:69:d0:
1e:7c:7d:ea:a2:44:87:63:cc:51:6e:66:57:10:af:
4d:1c:c3:4e:5a:e4:b4:43:01:63:1d:22:08:af:e3:
c9:1b:84:81:6e:fc:19:40:98:7b:c9:ed:f0:e5:37:
0b:91:00:29:96:bf:a5:46:dc:78:8a:b7:20:10:e2:
54:91:96:9c:0c:86:4b:42:a8:82:5e:73:98:d4:f3:
52:ec:d3:d1:ae:4a:ab:b0:bb:ea:39:76:7f:12:77:
af:12:c8:96:5f:b8:50:56:8a:e7:5c:d9:96:32:3b:
48:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FB:21:0A:BF:B2:00:11:A3:0A:2E:1C:A2:A1:10:72:5D:DE:9D:D8
X509v3 Authority Key Identifier:
keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:12:6c:c8:65:7d:aa:df:a3:ed:fa:93:e0:49:f0:1a:5a:d1:
5c:9a:99:f0:81:ff:55:58:92:e4:70:ff:7b:75:0c:ae:ff:79:
0f:b3:38:2a:fa:01:5d:da:67:ef:dc:11:14:f6:f5:fa:09:7c:
63:3c:b8:c3:66:f5:03:c6:c4:ec:ea:f0:4d:0c:88:c8:96:1a:
c1:38:54:5c:0e:08:b9:86:b3:74:54:b7:71:3f:12:34:21:52:
2c:7c:ca:4c:df:9b:55:f0:b8:07:bc:b2:b9:49:84:c5:0c:5a:
37:62:13:08:e5:2d:cb:72:ec:6c:ea:b7:fe:28:a3:66:45:e1:
60:cd:08:d4:06:9f:9c:55:a5:2f:7d:97:fd:17:3e:ea:d8:29:
14:7c:20:a0:b6:72:7f:6f:b8:4a:59:d4:f2:12:e8:c2:85:cf:
39:b0:34:c2:c6:9c:4a:37:27:4f:6c:1f:84:72:20:37:5e:d1:
81:58:60:87:c6:86:a1:98:cf:df:a9:51:db:40:fe:9c:82:a4:
37:da:a8:93:4b:55:ec:21:81:cd:b5:ff:10:25:53:84:fb:91:
7b:7e:96:19:b1:0d:c0:9d:9b:cc:d0:aa:b3:1c:05:69:57:4f:
84:5e:b0:a7:21:5e:95:cf:ed:d6:c1:bd:e8:1f:9f:89:ee:a4:
e8:14:b9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:12:12 2025 by rpki-client