Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json)
Hash identifier: ylewtxYqjQya3sFhHzxiL6B5Jph7HxMBhe73zCZ0FO0=
Subject key identifier: EC:E3:55:E8:04:B7:D4:9E:BB:5B:56:84:59:BB:30:9D:F2:DF:79:67
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial: 0197B933C2A71B1B57298F41996A191FF54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 01:01:06 +0000
Manifest this update: Sun 29 Jun 2025 01:01:06 +0000
Manifest next update: Mon 30 Jun 2025 01:01:06 +0000
Files and hashes: 1: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: odKoBJrapa94DsSwFJCA5Artco3IrRfCQ/W0YdEJU5I=)
2: tHSVKsBybW50BumwXnQO5sar17g.roa (hash: OnfbBFIXdIfqw6rK0o3+Fsa9mu/VebiT8548wWdX1dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:c2:a7:1b:1b:57:29:8f:41:99:6a:19:1f:f5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Validity
Not Before: Jun 29 01:01:06 2025 GMT
Not After : Jun 30 01:01:06 2025 GMT
Subject: CN=ece355e804b7d49ebb5b568459bb309df2df7967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:ac:3b:18:4d:93:d3:a6:7c:4d:e6:fe:eb:
fc:ce:b9:e4:ac:47:6b:2a:cc:61:84:2c:01:18:6b:
d1:12:c8:4c:71:07:9b:ed:62:58:24:a0:1d:2c:16:
82:0f:66:66:d4:d0:65:c6:d7:0a:09:53:91:60:75:
2f:3f:c5:f2:dd:39:1d:b0:f4:19:a1:be:57:8a:23:
22:39:f7:07:2d:8f:cb:04:ab:bd:ef:7f:0d:1d:4a:
97:f0:f6:47:42:be:55:60:ac:ab:af:0b:94:c1:b6:
08:e0:5f:c3:89:a9:50:36:d0:8a:e7:77:b7:5e:18:
57:1b:91:5f:44:0b:be:fd:b8:cb:36:ec:61:b9:5e:
fd:b8:87:9b:d6:e6:bf:f0:24:74:43:f8:08:2b:f9:
fe:23:45:01:43:80:a8:4c:81:dc:a3:95:cb:45:fd:
a9:22:9e:e6:bb:33:f9:a4:10:e6:9d:db:00:69:33:
b2:01:bb:43:22:fb:d3:05:97:67:02:e4:e2:9d:91:
26:1e:96:c1:f9:f0:73:db:58:49:f5:e9:de:ca:e2:
75:95:2c:1f:15:fa:03:3a:17:a4:9d:bc:b9:ac:38:
3d:cd:e6:b4:04:43:99:ef:af:4c:c9:fc:1e:a7:2d:
b2:fc:08:db:68:c9:1d:e0:06:19:1f:4d:08:e8:ae:
c4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E3:55:E8:04:B7:D4:9E:BB:5B:56:84:59:BB:30:9D:F2:DF:79:67
X509v3 Authority Key Identifier:
keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:fa:f7:24:c1:ba:61:37:bf:f3:35:32:1a:a3:1a:e1:6d:91:
02:f4:9c:38:d7:eb:4d:e3:e5:54:d5:40:5d:8e:9f:b3:49:c1:
76:b4:18:bb:73:30:75:13:d3:a5:ce:7f:10:26:f6:59:e2:a5:
00:45:11:d2:74:d6:23:33:a6:9b:17:5b:f6:fa:dc:1b:80:dd:
33:61:5f:06:32:76:fd:a3:f6:2e:8b:45:6e:f7:9b:e8:8c:41:
5e:1b:21:37:c4:3f:86:e7:e3:65:91:53:da:51:ac:e6:7b:f9:
b1:88:f0:5e:3b:de:44:cd:85:d4:8e:46:34:b7:73:00:08:bb:
50:db:5d:bc:c4:0a:a5:41:9c:db:e0:97:e1:e4:3d:f4:98:f6:
18:b1:76:1f:64:af:11:4b:84:d8:75:6a:24:1d:6e:9c:21:e2:
9b:f9:79:c9:04:68:59:1f:70:3a:df:aa:2f:25:d7:46:c0:3d:
d6:4d:2d:6f:4b:ae:fd:e2:ae:cf:de:bc:37:7f:76:32:22:67:
13:cf:88:e6:da:8f:24:7f:16:f9:16:94:5a:48:93:4e:70:5f:
c4:15:b5:7d:a3:52:cb:32:38:2e:70:b6:e3:f7:d2:d1:95:14:
c7:71:df:9b:36:ae:e1:a4:fa:cf:15:94:25:07:5e:e2:ca:f7:
33:51:49:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:34:59 2025 by rpki-client