Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
File: _fVLGHmhRTl_rA01jvq9L1_QrKE.mft (raw, json)
Hash identifier: 2Mhyo5PhyrYI7jjF3XUnGKa0RiSkSyZvIPQzZ5C7CFw=
Subject key identifier: 33:2E:3B:13:6C:87:BE:B0:53:CD:2C:58:96:C9:98:00:55:AB:13:D2
Authority key identifier: FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
Certificate issuer: /CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Certificate serial: 0197B6A122D643C4A806E18209A6990BE616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
Manifest number: 76
Signing time: Sat 28 Jun 2025 13:01:42 +0000
Manifest this update: Sat 28 Jun 2025 13:01:42 +0000
Manifest next update: Sun 29 Jun 2025 13:01:42 +0000
Files and hashes: 1: PJVRMSwCuaTF6Wt5Ab_qrSCFprE.roa (hash: WQvJvWmSXxW6cpMx4aipy9UMo8UhhROB6wLnhOsN/4c=)
2: _fVLGHmhRTl_rA01jvq9L1_QrKE.crl (hash: qBC25x2iccd6VsDIk8D4buW5iKsJ9GOqxS4nmjSMzyM=)
3: aFgiJNKCIanfvnqNDMdjznHMd1g.roa (hash: LkdaN274HWy1PdIg0LvK8JE9h9510OV9pL6YxntLzSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:22:d6:43:c4:a8:06:e1:82:09:a6:99:0b:e6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Validity
Not Before: Jun 28 13:01:42 2025 GMT
Not After : Jun 29 13:01:42 2025 GMT
Subject: CN=332e3b136c87beb053cd2c5896c9980055ab13d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:18:b1:17:a9:27:84:a2:f3:e1:f3:3d:33:be:
e9:2b:7e:95:95:16:56:ae:a3:44:cd:b4:db:ed:57:
13:b8:04:d0:32:ac:c4:06:cc:b8:7d:3b:40:80:9c:
0b:27:7e:72:60:06:6a:c7:39:b3:b6:d5:3a:ea:99:
19:03:3c:97:2d:34:21:bf:8c:e3:df:4a:3b:05:a4:
86:27:ec:c6:6d:03:ed:cf:7b:83:a9:90:b5:5f:c5:
38:7a:4f:da:53:78:4f:15:f7:42:16:64:5c:9b:25:
42:ce:26:f4:4d:fd:0f:71:a5:e2:c2:4c:2e:20:dc:
22:64:9f:92:13:8e:d4:61:f7:ee:91:65:45:01:78:
81:66:9f:f9:c2:9f:17:b7:a0:ad:01:00:34:cb:e0:
95:c5:72:29:0b:31:da:c7:33:42:a5:47:c5:ac:8b:
88:d9:6b:3b:b8:09:c5:ea:90:46:b9:68:09:49:e9:
3a:03:bf:7f:73:71:a3:eb:a2:17:5e:2b:47:d7:98:
46:66:cc:8e:6d:4a:09:c8:7e:b2:01:6c:db:50:9d:
76:6a:b4:30:e6:82:f8:19:ce:f2:52:c3:7c:49:4a:
5a:a2:66:3e:02:c4:a7:fc:cf:59:bc:cb:61:0e:49:
3e:29:cc:1e:61:71:b3:fb:85:b6:96:8b:08:2f:71:
7e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2E:3B:13:6C:87:BE:B0:53:CD:2C:58:96:C9:98:00:55:AB:13:D2
X509v3 Authority Key Identifier:
keyid:FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:af:c0:62:83:d2:56:7e:cd:93:f1:52:11:3d:65:5b:61:d5:
64:06:22:35:93:31:46:03:38:05:c9:18:c6:4f:14:6d:21:e0:
f8:71:2f:72:ec:e9:7e:e8:4d:9a:dd:91:62:2b:69:02:c1:50:
ac:e6:cb:18:ec:03:8c:18:c8:3f:e8:51:47:47:e5:2b:31:40:
79:c0:15:28:96:66:28:df:d3:05:4c:1d:72:7a:3c:fb:32:22:
f4:5e:56:de:a7:80:c7:72:c5:ff:8f:05:4e:f0:c9:6e:c7:26:
de:20:5c:64:41:19:34:82:f1:35:5a:9c:17:26:1c:1b:cd:7e:
54:5e:8b:7a:c1:4e:ed:07:00:a6:6b:f4:14:d0:e2:48:f0:83:
7d:11:4a:71:40:57:0a:e5:49:de:e0:bf:68:87:a4:20:5d:45:
05:a8:00:03:d8:fd:a9:c2:10:d8:53:56:1a:23:38:a4:6d:17:
f8:8d:4a:88:06:fb:bd:15:23:eb:bd:b1:4c:36:8c:f1:9c:7f:
9e:eb:c8:65:c0:6b:06:d1:22:d3:d4:42:ba:e2:23:52:98:6f:
b3:db:54:7b:07:d5:66:45:34:a0:d0:ed:93:b7:00:b4:e3:09:
5d:fd:94:2b:20:d8:f9:f6:22:2c:ae:f9:e8:7a:50:b7:db:61:
41:66:b1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:46 2025 by rpki-client