Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
File: fF39tuHZPAkoI96WvdfIi7w2odE.mft (raw, json)
Hash identifier: QWNBR+imtAZe3/IdBC2A907LNsyzZ4fMQk1o0a/PfRc=
Subject key identifier: 39:02:F1:8C:5E:81:93:53:2B:0C:FD:01:8D:EE:4C:6E:55:0A:20:14
Authority key identifier: 7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
Certificate issuer: /CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Certificate serial: 0197C191F27588585BF9E57B2F7C5BA9E2A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
Manifest number: 1081
Signing time: Mon 30 Jun 2025 16:00:56 +0000
Manifest this update: Mon 30 Jun 2025 16:00:56 +0000
Manifest next update: Tue 01 Jul 2025 16:00:56 +0000
Files and hashes: 1: RZuMdxzgtqeut8ZsWIjCvxcq_HU.roa (hash: k8PO+wAyawu0IdR6r++/H7W0FSIFO01M/1RM3odCP4I=)
2: fF39tuHZPAkoI96WvdfIi7w2odE.crl (hash: /Kxdj0BA2/4dYXtyR3W7mRjlrBEphT6lRREIT2THtEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:91:f2:75:88:58:5b:f9:e5:7b:2f:7c:5b:a9:e2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Validity
Not Before: Jun 30 16:00:56 2025 GMT
Not After : Jul 1 16:00:56 2025 GMT
Subject: CN=3902f18c5e8193532b0cfd018dee4c6e550a2014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b6:bd:fc:3b:07:7a:cf:a0:2c:f7:49:e2:44:
98:16:ea:59:52:23:84:79:9e:c6:4f:ca:ef:0b:5f:
3e:59:9b:8c:da:ab:7e:ae:ce:32:55:e1:41:ef:f6:
9e:91:3b:ae:50:01:85:40:aa:f6:ec:ea:6e:6e:a7:
76:7c:3b:19:35:b8:70:3c:f5:56:36:53:bb:07:48:
0b:45:a6:de:42:6b:17:6c:98:9c:07:fa:02:37:cd:
b7:9f:fc:69:6d:6b:a4:fe:29:1f:94:fc:d1:83:58:
22:bb:46:2e:9d:b2:f1:2d:7e:15:83:4c:67:e2:25:
a7:61:86:51:4e:78:8d:66:5b:d7:cd:0d:40:47:b1:
60:95:22:aa:c5:4d:22:c2:8d:a3:6c:6e:56:16:a0:
c6:b7:b2:94:0f:40:7e:07:c2:d1:9a:24:44:02:70:
34:31:67:84:57:ca:43:26:d2:b1:a4:02:9d:09:72:
9a:07:4f:5a:37:40:b3:1a:8f:fe:25:29:b2:3b:e1:
42:19:62:e7:68:0c:df:18:9e:06:93:e6:3d:ea:8f:
c8:0c:19:b6:18:e4:e0:a5:88:ef:a0:8d:75:a1:e6:
6f:c5:99:09:8c:67:cf:ce:3a:c4:eb:f4:dc:0a:73:
fa:5a:e5:56:d9:02:1a:7e:43:17:e5:4d:6e:25:b2:
c7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:02:F1:8C:5E:81:93:53:2B:0C:FD:01:8D:EE:4C:6E:55:0A:20:14
X509v3 Authority Key Identifier:
keyid:7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:23:79:1a:a4:97:77:6d:7b:e8:b2:00:f9:36:70:b1:fb:90:
90:c3:1c:8e:03:53:e1:81:0f:b9:48:5c:48:2b:17:e4:75:13:
b6:82:af:23:d8:e7:ec:7e:b1:d4:93:14:df:ac:eb:c3:51:5d:
f4:c0:14:b2:e5:1d:cd:8a:16:5d:09:e6:f3:6d:29:72:d6:9e:
bc:6e:ca:2c:4d:3f:f7:bf:86:26:b0:34:bd:af:15:d9:c4:14:
51:1b:7b:b5:26:04:6e:30:2e:9e:f7:c3:32:42:f1:59:69:b0:
a6:b0:8f:7a:02:df:05:14:db:3c:41:1b:81:19:12:45:cb:2f:
a2:b0:e4:10:64:f7:aa:76:66:85:aa:b0:99:6e:0c:01:26:88:
a3:dc:cc:1a:19:3f:85:45:44:d7:b5:9c:27:83:22:f3:8f:39:
ac:62:82:66:ba:3b:aa:f6:35:69:be:b7:cd:f6:bf:57:4d:1d:
62:3e:d6:94:a4:c3:dc:f9:1a:36:83:89:54:7d:57:eb:75:12:
74:6f:23:2b:bf:1f:ce:b8:81:e1:ad:5a:04:a0:ed:32:e8:01:
de:7e:6c:dd:ff:8b:e3:32:8d:39:52:53:21:4b:eb:60:b8:ec:
36:e1:45:44:14:08:c0:36:97:90:8e:79:cd:24:ff:6d:2a:46:
74:27:01:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:14:02 2025 by rpki-client