Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
File: 03fcZqVjo68h7gerM-i__nr5KI4.mft (raw, json)
Hash identifier: 07sys9OHeUYBl535lISTIQ6xTZIDBlyjxJpG5l86UIo=
Subject key identifier: C7:A5:16:48:7C:4B:BA:DE:10:8A:BC:F5:79:C4:68:DB:99:48:52:92
Authority key identifier: D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
Certificate issuer: /CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Certificate serial: 0197B70E976064A1C9C8A1797402F5B2A17E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
Manifest number: 0400
Signing time: Sat 28 Jun 2025 15:01:16 +0000
Manifest this update: Sat 28 Jun 2025 15:01:16 +0000
Manifest next update: Sun 29 Jun 2025 15:01:16 +0000
Files and hashes: 1: 03fcZqVjo68h7gerM-i__nr5KI4.crl (hash: yF+kAZ81Iq7LnyvNr/UWrXRmSHlRZ9AntSWh47Ho8hs=)
2: 6NWP4SmZYIKGrMKHkiHYbZ6J5I4.roa (hash: m+2x+5LklJoq5rlCh1u/r9pBwdaQs57tN+EGau9SsmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:97:60:64:a1:c9:c8:a1:79:74:02:f5:b2:a1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Validity
Not Before: Jun 28 15:01:16 2025 GMT
Not After : Jun 29 15:01:16 2025 GMT
Subject: CN=c7a516487c4bbade108abcf579c468db99485292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6b:a8:78:c0:e6:5c:d6:58:a4:6b:f5:83:8e:
57:ee:78:e5:a6:2d:44:47:22:6b:24:28:3e:41:69:
07:3e:8b:db:ce:46:01:f6:fc:c9:3f:df:23:51:b4:
28:35:eb:5f:15:48:79:31:0d:2f:df:c0:20:2d:89:
98:b3:3c:a4:43:b1:31:77:f6:55:09:4a:6b:5e:3c:
bf:0d:0f:1f:57:f5:ad:27:ea:8a:2d:3b:ba:31:b8:
5e:85:b6:95:8d:97:f4:7d:82:11:c5:d4:00:8d:5d:
77:e3:6a:a8:ae:ce:7b:f7:ab:d0:74:39:22:b1:a0:
74:65:4e:40:5c:3f:54:fd:f6:b3:82:7f:c8:01:36:
a7:d2:3d:cc:1c:cb:b9:f6:cf:6b:24:c9:45:4c:25:
8a:ae:e9:1f:6d:f7:e6:cc:2a:95:76:83:40:c9:05:
35:4b:a1:1a:15:b1:67:90:a6:3b:fb:55:ce:f2:21:
88:7f:31:58:e5:5f:d5:4e:bf:14:bc:a2:5b:89:f2:
23:ba:90:58:e0:1d:16:68:53:99:e1:23:fd:d0:78:
55:da:24:ca:a4:6c:13:f3:0a:53:7c:9d:12:79:b7:
96:66:5e:10:9d:d7:83:77:1e:3d:7d:b8:a5:23:95:
b3:44:78:b6:77:82:c9:26:ab:81:df:33:99:46:8b:
67:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A5:16:48:7C:4B:BA:DE:10:8A:BC:F5:79:C4:68:DB:99:48:52:92
X509v3 Authority Key Identifier:
keyid:D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:30:6f:02:22:7f:38:28:f9:34:08:39:5a:68:2d:97:1d:c4:
2f:ae:5b:29:36:51:54:72:3d:f8:2f:81:59:32:ab:91:b7:1c:
d7:37:d8:fb:81:e0:53:73:f1:c7:25:2d:fe:a8:3f:8f:47:b1:
e5:16:db:06:97:df:08:a9:c8:cc:81:5c:53:db:01:02:f8:12:
a6:a3:f1:f5:48:f2:5b:55:19:2b:ec:25:20:ce:f4:8e:16:42:
88:0f:6d:77:7d:53:92:c8:6b:1d:6c:ba:e6:17:1f:a1:2b:c2:
80:66:8c:61:1c:41:b0:e9:f7:d2:b2:35:e5:ef:95:ea:5b:a5:
c2:9f:36:ea:0d:1e:7d:8b:aa:9e:b1:23:a7:ff:e3:2d:32:7d:
ef:7e:f1:10:0a:21:de:a8:69:fc:0e:e5:83:da:ff:28:db:34:
b7:8b:c4:42:cf:8a:95:cf:dd:2e:1b:e4:4a:12:54:4f:e3:6d:
f9:f7:18:d6:48:51:7f:36:0e:49:76:9c:98:63:c3:fe:ee:d9:
5c:65:00:f7:3f:0a:5a:04:0d:7f:a9:42:57:e5:f8:5d:1d:ab:
41:a8:4f:fc:01:9c:99:11:e6:a1:5e:dd:3c:ea:5b:c4:3d:5c:
bd:03:23:38:fd:62:03:47:1b:7a:5c:e4:94:5b:0d:a2:e6:6a:
fd:d7:29:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:50 2025 by rpki-client