Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
File: fzXVrkF_Re6FBdds6qGzTEWDlKA.mft (raw, json)
Hash identifier: ZciIVtTcPKYXqUS5yJDJC6s+ZOFim/3Xs0iTXraicBg=
Subject key identifier: 9F:04:EF:BB:52:12:50:4F:3C:65:B8:67:F7:D3:D8:DE:7E:96:C2:E3
Authority key identifier: 7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
Certificate issuer: /CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Certificate serial: 0197C613F68C6F684F92DC33FBD88D7C91D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
Manifest number: 0E97
Signing time: Tue 01 Jul 2025 13:01:26 +0000
Manifest this update: Tue 01 Jul 2025 13:01:26 +0000
Manifest next update: Wed 02 Jul 2025 13:01:26 +0000
Files and hashes: 1: 60SN0C5WIf6xee2zdPp6NtBUZT4.roa (hash: 4gepFS/5lwBJIpO8Zj2TAgVElFJH/stJp2iOcS189VA=)
2: fzXVrkF_Re6FBdds6qGzTEWDlKA.crl (hash: Fu4mQfe/qea3ipbrQBfGdhYju8pQdLTPou3PDscEdAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:13:f6:8c:6f:68:4f:92:dc:33:fb:d8:8d:7c:91:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Validity
Not Before: Jul 1 13:01:26 2025 GMT
Not After : Jul 2 13:01:26 2025 GMT
Subject: CN=9f04efbb5212504f3c65b867f7d3d8de7e96c2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:23:f0:1c:ef:6d:4e:97:11:ba:30:92:07:6e:
c9:6b:89:e6:bb:a2:75:5b:37:c0:43:b0:bb:27:3d:
20:c7:18:f4:06:5f:05:5e:6e:89:a1:d6:7c:7d:47:
aa:27:42:34:82:52:30:f0:11:ef:32:01:f9:17:f5:
56:99:a4:a7:18:d1:3e:25:a5:98:45:5d:91:00:b2:
d9:9a:9c:af:81:1c:4f:1b:92:df:e1:8a:ef:9b:e7:
35:b3:54:dd:0d:dd:54:91:ca:ae:34:5b:73:ac:e7:
6b:27:fe:f3:15:02:dd:80:32:b9:fe:ff:1e:25:9f:
99:38:ce:93:a9:97:58:5d:27:88:22:67:37:26:6c:
72:f1:7a:aa:e1:a7:87:29:da:81:62:8d:dc:53:69:
0f:c7:b4:3f:d7:4a:b9:6a:a7:67:7c:4e:fa:29:56:
b4:65:99:89:96:94:91:75:da:5c:f3:05:e3:7c:35:
46:58:f6:7f:fb:a9:13:eb:20:f7:c5:99:5d:52:29:
2f:b0:03:69:ef:83:92:5a:ec:41:b0:fc:3c:a6:8e:
ac:21:e0:73:fa:31:bf:32:c2:d0:77:f2:b1:3b:72:
88:89:6c:e8:08:cd:9b:9c:6f:a6:e2:51:1d:62:72:
21:e9:6e:61:f0:fc:5c:be:67:d6:0e:3c:1c:85:14:
91:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:04:EF:BB:52:12:50:4F:3C:65:B8:67:F7:D3:D8:DE:7E:96:C2:E3
X509v3 Authority Key Identifier:
keyid:7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3e:a2:01:09:01:b2:b5:c1:4b:0e:81:8e:e0:6d:73:f1:78:
0d:17:e9:69:10:c5:d5:02:c7:42:9c:2f:cc:31:fd:a2:77:34:
4c:2f:ee:33:39:25:58:96:58:c6:e7:bc:60:97:97:a5:c9:49:
bd:42:74:c8:0d:37:44:4d:7c:8c:14:0e:4c:2a:f6:ab:87:96:
8d:d9:01:7e:4f:0a:73:ae:f3:38:9a:84:c5:f5:d4:1a:10:c8:
c0:38:9e:7d:d6:3d:da:4a:da:f2:da:a6:6f:db:25:bf:c9:a8:
87:de:62:cf:35:70:ba:13:dd:43:53:24:eb:05:a4:48:5f:4b:
7a:66:0e:2b:6a:09:80:2f:0a:a8:84:43:25:ab:a1:ab:16:9c:
5d:b2:3c:ce:f6:fa:93:62:91:55:c5:01:fd:c7:54:f7:04:ea:
8b:dc:8b:45:93:d0:1e:2f:fb:92:66:70:f8:cd:d9:d9:96:fa:
9f:7e:c0:3c:47:ca:b5:f8:83:9d:67:72:7b:17:5b:85:3b:c6:
d2:c8:1e:d4:85:ea:72:60:48:62:26:cc:63:fa:12:09:80:b2:
3e:40:bd:e7:e2:25:f4:57:6a:91:71:3b:4e:71:02:fb:29:c1:
78:2b:b2:ca:32:96:bb:48:3e:50:3b:d9:13:bb:c2:62:43:58:
5a:7e:34:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:35:02 2025 by rpki-client