Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
File: fgRhmrDxIJtw8QWYxplEvzTb8jI.mft (raw, json)
Hash identifier: iCCJ7xOGME/YoFy0HKxhh/fuOiOd+LMJmn+BPx92FSE=
Subject key identifier: 6F:21:FD:3C:A3:11:1F:43:71:A7:60:7B:DC:85:EF:F8:F0:F8:1A:85
Authority key identifier: 7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
Certificate issuer: /CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Certificate serial: 0197CFF24BCACD797DC58BFFC76DA1D01692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
Manifest number: 1301
Signing time: Thu 03 Jul 2025 11:00:52 +0000
Manifest this update: Thu 03 Jul 2025 11:00:52 +0000
Manifest next update: Fri 04 Jul 2025 11:00:52 +0000
Files and hashes: 1: 787yu0Xx7LAqYI4eV6FlvWwe4sU.roa (hash: 0rdw2IxnG2UduKLMx9SDd9m8DvhrTv12ADsR6eydjg0=)
2: V7t1MzfzXgW3Q66a3IOYRULIxX8.roa (hash: 9ljAarH2vMiPbFaBcASuSrcoh5ApRcxsoYC+Da4pdfQ=)
3: fgRhmrDxIJtw8QWYxplEvzTb8jI.crl (hash: LxSIprxVNfjUOQqVMupLLaOnWG1d7PbvpkUkWdDs5uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:f2:4b:ca:cd:79:7d:c5:8b:ff:c7:6d:a1:d0:16:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Validity
Not Before: Jul 3 11:00:52 2025 GMT
Not After : Jul 4 11:00:52 2025 GMT
Subject: CN=6f21fd3ca3111f4371a7607bdc85eff8f0f81a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:0b:a6:57:b1:fc:7e:67:04:94:77:61:08:
da:4e:6f:4a:e3:53:5c:0c:11:e0:ce:50:c4:3d:98:
b2:b4:ea:12:be:b0:cb:1b:d2:e9:39:4e:a9:df:2c:
b5:0c:00:ad:b5:e7:85:c5:ad:b1:c4:e4:6b:d5:c7:
e9:14:42:88:92:f0:6d:39:db:af:c1:48:ac:51:84:
12:d4:bd:eb:ae:dc:82:32:6b:40:fc:76:a0:90:e5:
e8:1c:33:ce:d1:95:21:13:ca:83:f3:74:cf:62:a4:
65:4a:8c:6c:7d:3d:e5:81:50:e5:a3:37:12:36:fc:
3d:ab:b2:e6:51:01:bd:fa:99:56:9d:7e:0c:21:ca:
94:4c:35:d3:ac:90:91:35:6c:5a:83:06:d6:10:5d:
ed:a7:8a:14:9f:2c:25:d7:7e:cb:b5:8c:4d:f0:90:
da:df:0c:c0:79:e4:c8:0e:5d:3b:cb:be:08:13:2d:
4a:a1:cc:e2:b6:19:99:2e:6d:8c:4b:47:28:c3:8f:
26:ab:eb:3b:19:50:63:fb:4c:01:8e:3a:29:a0:6e:
7c:2d:a9:aa:a1:b5:6b:a5:13:d3:77:a1:51:73:d0:
d1:da:d1:5e:4b:72:0d:3a:5e:c2:9d:7d:8e:31:0d:
84:48:f7:ae:39:5b:e3:90:18:8e:35:87:7e:17:99:
72:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:21:FD:3C:A3:11:1F:43:71:A7:60:7B:DC:85:EF:F8:F0:F8:1A:85
X509v3 Authority Key Identifier:
keyid:7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c0:2f:7d:7d:e1:da:63:ca:b2:57:c5:4b:1b:98:95:77:2e:
12:f5:70:54:7d:76:3b:54:77:77:d1:44:ed:81:16:6e:bb:c6:
0f:d4:e0:5f:0e:88:e8:82:ec:8f:1a:5b:01:37:9f:44:a8:87:
82:eb:01:63:05:d6:bc:e7:11:b7:e6:d6:05:75:d1:51:95:70:
b0:34:16:3f:86:ba:44:b8:0a:f2:33:b6:de:2e:e9:c3:fe:ea:
76:f9:b8:13:b6:bf:0a:ee:72:84:12:67:5b:e4:f4:68:4e:04:
84:c1:e4:84:e2:84:85:b4:30:b2:c2:d0:f9:ff:12:0a:9d:6c:
b8:54:62:4d:39:76:8a:54:7c:51:6c:ab:83:41:c2:15:0a:4b:
1d:ae:67:6a:3e:fb:92:05:31:77:66:65:e3:38:fb:1b:39:06:
63:56:7f:9b:01:d7:a4:3b:2e:ec:7a:91:60:8f:07:01:aa:a8:
5e:ac:21:d4:06:04:b2:f6:20:48:d1:b3:73:1e:54:e7:4b:32:
d3:9a:34:3e:ca:dd:00:88:97:93:50:38:92:52:ae:e6:df:6e:
b6:bb:1f:0e:7c:fc:e4:03:39:b4:48:d3:57:29:f1:11:53:d0:
7c:c4:75:b0:cb:86:62:e1:76:c5:ec:f8:7d:94:4d:8e:66:96:
12:1e:d1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 20:04:14 2025 by rpki-client