Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft
File: fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft (raw, json)
Hash identifier: znys0bMUIR4JbvQfgO+g1J8wDE3/VVy5QDXBFmXS858=
Subject key identifier: 36:79:20:64:80:30:02:FA:B8:03:B8:27:16:AD:62:58:61:FC:3B:DF
Authority key identifier: 7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F
Certificate issuer: /CN=7c45672fc42bdd33e545338a7417e8171a04ee3f
Certificate serial: 0197B6A177B17AFD6D45D2D6410A6B33A402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft
Manifest number: 0AC2
Signing time: Sat 28 Jun 2025 13:02:04 +0000
Manifest this update: Sat 28 Jun 2025 13:02:04 +0000
Manifest next update: Sun 29 Jun 2025 13:02:04 +0000
Files and hashes: 1: RdszoR0XDemrxWZ7ZuzRpfNYzZk.roa (hash: YWnaBwFSvymmXHCPjERkvxYdDqJ7Cm5zkK0Huya48uA=)
2: fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl (hash: +YP7Pc0dzSBv1P7I4QcczjRyxvlZpXO0QdekM0NGXts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:77:b1:7a:fd:6d:45:d2:d6:41:0a:6b:33:a4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c45672fc42bdd33e545338a7417e8171a04ee3f
Validity
Not Before: Jun 28 13:02:04 2025 GMT
Not After : Jun 29 13:02:04 2025 GMT
Subject: CN=36792064803002fab803b82716ad625861fc3bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6f:c4:3b:d2:43:22:e2:10:84:d7:f1:18:5a:
9f:95:d5:fe:99:0d:04:56:21:b7:c3:95:5d:8f:b3:
37:8e:51:d5:6b:dd:72:13:54:46:7f:79:28:f3:f6:
64:69:f0:35:9c:8f:16:67:c0:a1:8a:27:16:a4:2c:
03:c9:bd:9b:68:63:7a:5a:21:0f:b1:29:bc:59:be:
f7:76:ea:05:46:dc:18:e6:d6:ec:d8:4e:50:b0:dd:
77:a2:cd:7d:70:3c:9e:f7:c8:85:b4:7c:fa:33:21:
b0:28:6d:fa:2d:4e:88:28:1c:51:ac:c0:c3:1d:da:
69:72:41:9d:13:86:04:76:98:63:37:ad:11:7d:48:
b8:19:79:4c:42:ad:db:3c:7f:79:01:ad:5a:9c:a6:
10:54:82:3f:d8:07:c7:86:7a:73:f0:28:a2:f8:85:
52:45:04:4a:ed:79:f9:41:6e:f0:e1:02:d4:a2:f7:
f2:35:06:5c:0b:36:d1:de:61:c7:01:ba:3e:b6:33:
63:1a:7d:2f:ff:b8:5f:a8:67:fd:f8:38:91:b8:13:
22:f4:09:07:32:0c:c9:5e:81:a0:7d:bb:af:70:93:
0d:3f:29:2c:20:03:6d:14:bc:32:48:c6:04:af:ab:
fd:1d:d5:bd:6d:0a:d2:1b:b4:6d:5f:f1:17:5b:d5:
1c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:79:20:64:80:30:02:FA:B8:03:B8:27:16:AD:62:58:61:FC:3B:DF
X509v3 Authority Key Identifier:
keyid:7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f0:75:59:c1:0b:a2:8b:05:ad:d3:2d:ca:3d:ee:2b:92:bc:13:
b6:23:f7:db:4e:7c:db:b8:ab:04:54:b3:ec:7c:20:ba:b6:35:
e0:63:b7:db:43:c9:18:92:5a:56:d5:02:12:30:2d:da:cf:53:
0b:be:c2:05:98:5d:41:0d:5d:a2:44:3c:b4:8f:88:b2:17:0c:
ce:e0:94:26:cd:00:53:7e:60:ec:b2:da:d8:57:c5:2c:5d:4b:
93:66:21:a9:e6:ec:c2:f7:3f:6a:d5:3e:77:de:8c:bc:2a:99:
44:5f:db:04:72:56:87:db:d6:2e:27:e0:63:c2:12:1a:89:00:
32:56:2c:a5:87:36:79:99:34:e9:61:f1:fe:3c:b1:35:58:7e:
39:7c:1e:c1:c8:e2:d9:a2:63:57:fa:18:4f:2e:5a:1b:23:9f:
54:fa:ed:6b:af:9c:6d:30:9e:bf:31:19:65:86:0d:4b:41:86:
ad:eb:08:d9:f6:96:3a:96:c4:a9:e2:ff:37:31:ea:8d:41:56:
15:8b:f9:ff:fb:02:4a:58:da:26:74:80:83:d5:ae:44:0c:ae:
68:cb:33:c9:f6:21:4a:e3:d7:91:fb:1a:8c:ba:06:bf:57:49:
0c:9e:3f:b3:ab:b6:e9:02:4c:e9:2a:a3:c0:c6:9d:d3:e5:77:
82:db:94:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:29 2025 by rpki-client