Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
File: F263G9VVdvRXY7retnbtWZkNOWo.mft (raw, json)
Hash identifier: diEyZl9DojPRfSh+x5fsskqVoRNCcdljcERI6OUwyB4=
Subject key identifier: 49:8B:5B:5C:AE:78:F6:7C:E8:E1:2F:40:D5:E0:D0:4A:1A:E0:B8:0D
Authority key identifier: 17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A
Certificate issuer: /CN=176eb71bd55576f45763badeb676ed59990d396a
Certificate serial: 0197B6A17074A6FBB5F3E1D4453CD86A0489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
Manifest number: 0CC5
Signing time: Sat 28 Jun 2025 13:02:02 +0000
Manifest this update: Sat 28 Jun 2025 13:02:02 +0000
Manifest next update: Sun 29 Jun 2025 13:02:02 +0000
Files and hashes: 1: F263G9VVdvRXY7retnbtWZkNOWo.crl (hash: fXWMED4X2dPOhx/Tw4xke4/EDhVWbbfCpeVDmPxpcuM=)
2: kQBDlI9AJTPDOANcbfub1qPVjs0.roa (hash: ws3dJ8ac8FYqQSPBpJu2ZxPrhp444gx9gUkFmi10lLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:70:74:a6:fb:b5:f3:e1:d4:45:3c:d8:6a:04:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=176eb71bd55576f45763badeb676ed59990d396a
Validity
Not Before: Jun 28 13:02:02 2025 GMT
Not After : Jun 29 13:02:02 2025 GMT
Subject: CN=498b5b5cae78f67ce8e12f40d5e0d04a1ae0b80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bb:36:33:72:fa:4d:bd:85:4c:e8:a7:d2:66:
a1:f1:69:5d:67:24:8c:4e:a4:bc:05:37:21:08:23:
07:47:0e:10:03:86:b7:b6:61:0b:22:78:49:3f:e8:
07:c8:67:af:2e:c2:47:73:1d:d9:93:6f:c9:c6:8d:
97:5b:69:2e:5c:55:fd:18:f6:b7:72:63:86:67:1d:
47:e5:b7:47:a5:ca:0a:c1:31:45:b3:31:0d:49:0a:
f3:9a:71:4f:67:ae:c0:52:8f:4a:5f:6e:51:5e:35:
44:c1:64:f0:37:6e:cf:b8:2e:9b:20:d2:c6:0f:c2:
bc:5c:66:ca:0d:b6:9e:0c:ca:88:95:73:2a:f6:6f:
93:99:23:2b:67:33:72:79:de:28:bd:7f:2f:39:c9:
0d:2e:a4:aa:ba:72:01:67:d5:45:e1:30:27:e4:06:
90:0d:3d:ef:0d:e5:1b:7c:80:b7:90:d0:01:ac:4d:
fb:e4:a4:7d:36:97:f4:84:eb:3a:6d:be:11:02:4f:
76:d6:31:c8:55:f4:33:08:d6:2d:c7:0d:f6:ff:20:
01:40:28:8f:b7:45:98:1c:26:cf:d9:4b:20:da:4a:
c8:c4:80:e9:53:b6:31:1f:c7:9d:79:ce:a4:30:f0:
61:06:81:a5:e1:5e:ac:83:92:9f:61:c0:7c:65:28:
a7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8B:5B:5C:AE:78:F6:7C:E8:E1:2F:40:D5:E0:D0:4A:1A:E0:B8:0D
X509v3 Authority Key Identifier:
keyid:17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ad:95:c0:43:c5:3e:b6:a9:09:79:ea:0a:33:7f:a2:ba:06:
fb:26:7d:6c:cf:db:88:5e:f3:d3:4a:d5:6d:a7:40:77:ce:cb:
3a:45:0c:30:e4:5e:bc:9f:29:89:e8:f2:b7:06:e4:23:6b:c3:
33:66:f6:91:d4:08:52:98:fe:d6:4e:2e:01:68:2e:68:2d:11:
6a:47:07:f5:64:a6:ec:6a:dd:06:00:e5:57:e8:c3:d8:a7:e4:
b6:51:04:d3:28:66:e6:8a:6b:4e:2b:32:63:c8:57:1c:6b:1e:
df:36:09:20:23:41:95:ee:e1:b2:1f:01:1b:aa:1e:6a:f6:46:
51:76:cf:42:4b:42:fd:74:17:25:d3:1c:2c:5f:14:75:bb:a7:
17:d5:58:09:37:00:0d:03:61:88:a4:d6:3e:4f:bb:d1:5b:e1:
73:77:eb:8f:be:10:69:fe:34:0d:27:b9:da:d7:11:ab:94:e3:
c1:c8:43:9d:2a:3e:18:c4:75:c3:e4:44:75:5a:56:43:fd:d7:
fd:6b:a9:b2:a4:fe:04:d5:ba:b4:e9:84:b1:80:d5:37:59:f6:
52:97:30:bf:84:ae:9e:df:63:1b:03:2a:d8:24:bc:3c:3c:ef:
45:15:74:28:d6:d0:d8:c1:94:b0:e9:c5:14:dc:6b:4d:9c:80:
27:d0:ca:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:39 2025 by rpki-client