Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
File: fVllljYInjIyRpdinCGNo4orZz0.mft (raw, json)
Hash identifier: c83tjvTM3AHJv89P2b3K+hhhFOfcd0eOszW0ldG4KiA=
Subject key identifier: 5F:E1:44:89:10:35:03:67:09:60:DE:CA:4C:F9:A9:8E:9C:FA:8A:4F
Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Certificate issuer: /CN=7d59659636089e32324697629c218da38a2b673d
Certificate serial: 0197C2377DCD0A24420A715AC7289CC3681A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
Manifest number: 13F5
Signing time: Mon 30 Jun 2025 19:01:45 +0000
Manifest this update: Mon 30 Jun 2025 19:01:45 +0000
Manifest next update: Tue 01 Jul 2025 19:01:45 +0000
Files and hashes: 1: UK9YjHWc92sXiUJt3VZoNIq4t0k.roa (hash: igI+4irUGdklUjezFA8tc/PWzUHzep3VbVTtAZ5nupE=)
2: fVllljYInjIyRpdinCGNo4orZz0.crl (hash: mPe832cathIcrYdjZDasjqHRhjVR1WZwPYuwr4JNRyI=)
3: zUIN-vPBSWAo7u0peNQbk111_tY.roa (hash: ycq1Cqg0dupTJx5bcb6gz2Vt69i1lXhyAaV7FfHeKNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:37:7d:cd:0a:24:42:0a:71:5a:c7:28:9c:c3:68:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d59659636089e32324697629c218da38a2b673d
Validity
Not Before: Jun 30 19:01:45 2025 GMT
Not After : Jul 1 19:01:45 2025 GMT
Subject: CN=5fe14489103503670960deca4cf9a98e9cfa8a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b8:e2:0a:a8:4a:5f:2e:14:41:a0:f0:a9:f9:
2f:c2:9f:d1:6c:b8:06:6c:19:3d:ee:9b:e5:e6:8c:
6e:4e:4e:9a:a6:26:20:c6:a9:1b:11:f4:7c:5f:7f:
22:18:5c:6c:71:33:4a:e8:9a:80:bd:61:f7:e2:9a:
a8:fa:9d:05:dd:8e:a8:55:94:65:c4:58:56:65:68:
81:e4:70:8f:63:bb:35:9b:dd:71:b0:e6:ce:1b:13:
31:55:3d:7c:51:2a:ff:3d:64:34:43:fa:41:11:72:
35:2a:9b:e9:ed:51:ec:eb:d8:90:ec:74:88:23:c9:
a8:86:f0:91:04:1e:ce:4a:08:23:45:9a:05:44:01:
47:63:e4:f2:62:48:8a:82:9b:a1:ae:3f:e2:69:fb:
76:d2:3c:08:cc:4a:a6:0f:aa:92:72:c4:50:9c:3f:
38:08:03:8c:a4:ea:70:6f:71:b0:2d:12:5a:55:f4:
f5:02:16:18:9b:d5:3c:4f:23:ef:7f:a7:8a:3f:a9:
90:af:5c:6e:b5:a5:96:ee:7f:a2:24:bf:e2:f6:85:
99:12:3d:b9:a5:e0:87:9b:bb:85:c3:2a:aa:66:a0:
83:d7:0f:3b:6b:e2:38:a5:08:bf:c7:46:3e:bd:87:
fd:ed:bb:5a:db:73:8d:eb:64:01:e4:8e:8d:e1:db:
e5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E1:44:89:10:35:03:67:09:60:DE:CA:4C:F9:A9:8E:9C:FA:8A:4F
X509v3 Authority Key Identifier:
keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:98:ef:c2:55:c4:a2:f4:be:3a:fa:9f:e6:25:c9:fc:0e:b9:
d1:39:db:d9:41:22:9a:a7:74:b4:64:f2:37:20:9c:a3:4d:16:
ef:b0:d5:37:5f:2b:4b:5b:14:a5:7d:bc:e8:04:fe:99:4f:7b:
34:3a:7c:76:51:fe:89:a5:12:64:6d:58:50:f9:66:a7:e7:b1:
5f:25:08:d7:98:4b:d4:f8:fb:64:de:ec:24:26:08:62:08:e8:
0c:e3:58:d0:00:e2:7c:4f:0b:91:cd:39:5e:bc:88:ff:4b:4c:
1f:cf:15:f4:55:ca:b6:c5:f5:32:f5:5c:c6:7f:43:f0:5e:a9:
89:0e:05:59:8e:f5:70:26:a0:97:b2:dd:e8:50:3e:23:f1:50:
63:47:f8:f1:96:ef:0a:7f:de:8e:e9:23:9f:8a:2e:48:f0:5d:
3c:c5:c9:cc:3e:6c:b0:44:a6:88:34:2d:52:0b:b0:56:e1:64:
9f:ed:23:72:64:b2:fc:9b:6b:0c:23:0d:92:a4:5b:e9:5c:cc:
9d:29:de:a9:a4:62:01:1c:75:28:0e:ae:92:e5:39:ed:cb:34:
61:eb:87:35:ae:43:75:dd:8a:34:27:9a:7d:67:8e:1f:7b:a7:
9f:a0:93:a1:31:55:e0:05:6d:48:82:43:8e:8c:8b:7d:4c:61:
60:5d:5e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:09:42 2025 by rpki-client