Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
File: f-PWO0pbQEtf-Dy_KxUlowR39lw.mft (raw, json)
Hash identifier: m9vsq3FHEVz1WCQ+KgiX1qOwHPWDMBdNT4gdDktkDmk=
Subject key identifier: CD:4E:85:44:6B:D3:57:01:93:AD:ED:7B:D5:B3:A3:45:19:0F:13:B3
Authority key identifier: 7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
Certificate issuer: /CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Certificate serial: 0197BEC82CB9EA6B8B162832D0D4B3866C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
Manifest number: 02FA
Signing time: Mon 30 Jun 2025 03:01:19 +0000
Manifest this update: Mon 30 Jun 2025 03:01:19 +0000
Manifest next update: Tue 01 Jul 2025 03:01:19 +0000
Files and hashes: 1: f-PWO0pbQEtf-Dy_KxUlowR39lw.crl (hash: pwWNDKPrXFhRySJCfHpoqWpo1aKGWl8VqdGvo+ij8yc=)
2: siHg6lFmHbPgHoNeW2SywiubJmo.roa (hash: kskpJxlnZ+nR3C+TNiBxn+yry8UEOs9uLt7Ezmifj5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:be:c8:2c:b9:ea:6b:8b:16:28:32:d0:d4:b3:86:6c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Validity
Not Before: Jun 30 03:01:19 2025 GMT
Not After : Jul 1 03:01:19 2025 GMT
Subject: CN=cd4e85446bd3570193aded7bd5b3a345190f13b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:32:41:4d:22:b1:33:cd:06:c7:64:2b:bf:
1e:8d:5a:c8:54:4d:43:43:f3:2a:0f:b2:ba:73:b4:
e9:15:a2:b7:29:dd:c4:5f:d9:bc:47:33:c4:d1:81:
5e:21:3e:8d:60:f9:0a:88:cc:57:f1:6e:6f:5e:a1:
8d:79:36:da:05:cd:7f:01:60:64:13:a5:03:ec:62:
0a:d6:7c:3b:6c:91:68:10:be:0a:ca:08:c9:80:74:
06:f4:01:a8:20:81:b0:9e:b2:7b:62:2f:a0:67:7d:
9c:f3:8b:21:d2:c2:fb:9f:3f:c0:0b:f6:44:09:87:
5c:18:87:d1:07:86:18:f6:61:45:67:9f:5c:be:06:
f8:bd:a4:03:bf:8b:76:46:d1:af:72:3f:5d:cc:cf:
96:00:91:f2:6a:99:63:53:50:16:56:91:07:a2:43:
54:11:4e:a1:66:a1:d1:42:cf:c9:38:45:c2:70:51:
d1:80:b0:ab:68:b0:97:80:c8:65:4e:d1:c3:c1:89:
53:88:3e:a4:d6:a9:d0:2d:8b:8e:2d:2e:0b:f1:7a:
a8:4d:b5:d9:63:8d:67:59:6c:ad:9d:c7:06:18:ba:
35:b9:d6:ca:91:6a:4b:8e:69:0c:67:3b:94:7f:ee:
64:c4:6f:30:66:3c:9a:d5:3e:de:96:6a:14:30:16:
82:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4E:85:44:6B:D3:57:01:93:AD:ED:7B:D5:B3:A3:45:19:0F:13:B3
X509v3 Authority Key Identifier:
keyid:7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6b:1d:aa:70:cd:43:dc:6f:b7:ee:09:52:6e:af:3c:ae:60:
6f:4c:cc:bb:2b:c0:30:25:09:0e:43:26:56:0b:0c:02:c9:e7:
91:23:b5:5b:1d:a5:07:07:7a:f8:76:a5:4f:8d:2d:81:96:87:
e1:93:25:e9:a8:10:92:a7:22:7d:c9:7c:d0:c9:3b:b2:65:85:
04:76:f1:89:7f:51:9f:66:48:89:d2:5a:7f:f0:54:71:c7:1c:
36:cf:da:32:8d:b9:48:ad:7e:b1:70:2e:19:45:bc:44:9b:9f:
f5:0a:c8:8f:d9:bd:a3:f9:b6:63:40:76:d2:d5:63:7d:7d:76:
c5:e8:54:ee:c9:53:fe:53:a0:b0:46:94:fa:37:84:74:e4:c9:
41:7b:e6:b1:04:11:f1:d1:7d:2f:d3:b9:0b:22:60:fb:0e:29:
bd:b3:81:b9:d4:44:a9:55:b2:6c:0d:99:3b:32:65:27:09:91:
ca:6a:53:b5:c7:a5:d0:7a:47:f6:0e:e6:3b:c4:2a:0a:15:69:
d2:80:6d:ca:3f:14:92:e1:2c:66:60:07:40:91:f6:52:ed:57:
49:14:17:ce:c0:d7:a5:39:2c:3f:4e:8b:6a:07:4a:42:55:b9:
17:d8:a3:e0:14:1e:39:58:ff:6d:39:19:53:32:e6:27:8c:02:
f3:65:a4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:48:08 2025 by rpki-client