Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
File: rPerPxqT5xTzB0oF2G_M4iBjBag.mft (raw, json)
Hash identifier: XmXyc51xWz8KR2wlSRVFF/w/CphI5CNoO+70CwcD5Xg=
Subject key identifier: F9:DA:D0:25:A9:AC:EC:AC:5E:2E:31:15:C1:7F:B1:0C:9D:28:6C:62
Authority key identifier: AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
Certificate issuer: /CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Certificate serial: 0197B96B02686A0F760DE1DE30B81C3BABE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
Manifest number: 089C
Signing time: Sun 29 Jun 2025 02:01:27 +0000
Manifest this update: Sun 29 Jun 2025 02:01:27 +0000
Manifest next update: Mon 30 Jun 2025 02:01:27 +0000
Files and hashes: 1: KcohbphFnkSf2gxoBmgqyMOKDSE.roa (hash: /zXCNYtomEkl0yxgG+cZiQbxEeQJlGsjs0SY8DMwQ+k=)
2: rPerPxqT5xTzB0oF2G_M4iBjBag.crl (hash: o1pmdklDmxbADMybMOSIS88iDSn58A1MpDAZWhsjlv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:02:68:6a:0f:76:0d:e1:de:30:b8:1c:3b:ab:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Validity
Not Before: Jun 29 02:01:27 2025 GMT
Not After : Jun 30 02:01:27 2025 GMT
Subject: CN=f9dad025a9acecac5e2e3115c17fb10c9d286c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:85:c0:26:f0:81:ac:cb:ca:ea:9f:f3:0f:6f:
49:f4:74:55:da:2a:e3:69:7a:32:6d:62:e9:61:8e:
94:58:3d:af:9e:da:f4:45:7c:9b:cb:b5:43:60:42:
22:a5:9d:79:3b:64:79:53:c0:8b:85:fc:b7:c5:ee:
22:d3:e4:57:bd:d1:b1:9e:af:cf:28:53:87:8a:6d:
09:4e:65:8a:49:33:5a:00:85:b6:ca:38:3c:a9:0e:
d4:14:a7:21:c6:8e:27:4d:89:08:3d:a8:06:a9:e4:
a6:7a:fb:e0:96:2c:62:96:14:84:2f:1e:31:66:8b:
60:60:44:ad:dc:06:18:79:1f:d9:25:dd:14:27:6d:
d8:2c:31:f0:b9:2a:15:62:7e:7e:f5:a4:73:e4:65:
89:67:4d:6f:ea:da:54:5a:37:2d:53:04:2a:58:27:
38:f3:ca:d6:b1:e3:17:26:01:16:75:50:ae:c9:d2:
79:4e:28:b5:9f:9f:24:dc:44:b6:c9:ba:22:e5:21:
6b:c7:63:9c:01:af:6d:45:1f:c8:7a:96:9c:49:c3:
96:d0:19:2a:60:5b:24:64:fd:e7:e0:9c:65:b4:47:
3f:53:ce:6e:b8:f4:ea:14:c7:8a:6a:ca:82:05:97:
ba:18:af:ee:84:bf:22:e9:9a:5c:0d:dd:ed:a1:34:
0f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DA:D0:25:A9:AC:EC:AC:5E:2E:31:15:C1:7F:B1:0C:9D:28:6C:62
X509v3 Authority Key Identifier:
keyid:AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d1:73:89:bd:6e:c5:56:fa:37:0b:23:e7:a7:6c:d4:72:50:
18:2d:3d:8d:98:d4:fc:d0:13:d3:4e:17:9f:87:24:b1:90:47:
90:79:7c:9b:18:b2:23:26:bd:36:f7:7b:0c:6c:d2:d8:47:b0:
2e:0b:88:f7:0f:bb:b7:01:29:90:12:62:85:a4:19:ca:a8:45:
3b:dd:c8:df:1d:11:87:99:03:32:93:47:41:00:31:32:18:69:
d4:06:98:f8:cf:4c:4e:3b:e8:fd:4b:ce:c1:08:9f:7e:37:e2:
73:d4:64:5d:85:c1:76:7a:9d:6d:6b:93:ee:9a:b4:0a:fd:3e:
ce:52:b3:8d:84:34:34:95:40:ab:c4:47:4a:d5:d9:2a:52:3c:
73:55:ca:4f:80:82:b6:b4:25:61:49:ce:d7:bf:b3:31:18:aa:
00:3c:01:4c:88:2a:af:9a:85:ca:33:a6:12:13:79:8f:8f:ec:
a5:70:b6:a6:ba:1b:a5:77:68:99:58:58:1d:73:89:2b:a5:1d:
4d:f1:43:f2:ea:c6:03:58:2c:a4:62:fb:91:e5:ba:7d:cd:08:
8a:ea:80:c8:9c:08:ad:b0:de:6a:32:ef:59:73:77:0a:fd:d2:
e1:f9:9e:8f:4a:fa:f2:8d:01:d4:e3:6d:67:c0:c1:a5:76:ec:
fb:23:2a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:14:16 2025 by rpki-client