Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
File: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft (raw, json)
Hash identifier: pUwTC8DYLw6S+xr6DrkKpFKVAGU+LTSDpkfVusjePJA=
Subject key identifier: 3A:10:07:FE:05:80:11:47:EB:61:B5:92:1A:E9:CF:7D:C0:C0:98:CF
Authority key identifier: 16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
Certificate issuer: /CN=166fed8bb6449b1cec6b665e930718b858a2b694
Certificate serial: 01976DE2E8FA5FD83942FBD4393FF057CC23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
Manifest number: 0BCC
Signing time: Sat 14 Jun 2025 10:01:16 +0000
Manifest this update: Sat 14 Jun 2025 10:01:16 +0000
Manifest next update: Sun 15 Jun 2025 10:01:16 +0000
Files and hashes: 1: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl (hash: qozSR/lDSOtqE5O3zmwKjaS9j8VdxkJgxoUbIE35cKU=)
2: krakPppfz7flLx069ZARtir4dzE.roa (hash: rc01bvPv/5+vfBCkfObVuaLV/O1M46ZYkYO5PLG/3iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:e8:fa:5f:d8:39:42:fb:d4:39:3f:f0:57:cc:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166fed8bb6449b1cec6b665e930718b858a2b694
Validity
Not Before: Jun 14 10:01:16 2025 GMT
Not After : Jun 15 10:01:16 2025 GMT
Subject: CN=3a1007fe05801147eb61b5921ae9cf7dc0c098cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:3f:bf:18:61:25:ac:ee:49:79:39:20:33:
3d:2b:18:b5:dc:85:f1:72:66:5e:93:37:a4:2d:e6:
f0:18:e2:c3:90:c7:62:77:d5:69:66:9d:71:5a:75:
72:52:f9:75:02:93:b4:e3:08:a4:40:4f:b9:5f:44:
60:b7:1d:06:ab:09:e5:b5:66:96:cb:44:2b:67:9e:
46:54:40:80:38:97:5f:11:61:4f:1b:3b:50:96:28:
17:a9:ff:2a:4a:67:82:b3:ec:63:6f:15:eb:e2:cc:
09:68:d6:62:43:7a:9e:db:f6:9d:24:fd:a1:3b:af:
a7:81:40:71:c0:ea:4b:5a:19:d8:24:43:38:40:6a:
a4:b0:05:6d:6a:8f:d3:60:14:33:17:b9:bc:5b:93:
1a:a8:f8:42:dc:2d:73:e7:ac:d5:40:69:c9:dd:dc:
dc:2b:6e:26:c8:17:27:aa:0b:43:dd:16:7a:25:cb:
60:82:86:b1:13:1a:43:18:c8:cd:0c:04:c9:80:c1:
a2:49:da:72:fd:65:8e:03:d1:c8:b8:20:66:e3:a3:
3d:b6:54:b7:cb:5f:16:9b:2a:cf:f3:93:6b:b9:d5:
d8:06:d1:65:20:cf:34:7e:45:ef:d8:55:97:22:28:
3a:ae:f6:f3:3a:6d:e2:da:3f:b3:1f:05:67:af:53:
a9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:10:07:FE:05:80:11:47:EB:61:B5:92:1A:E9:CF:7D:C0:C0:98:CF
X509v3 Authority Key Identifier:
keyid:16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d1:51:20:b7:68:c9:8e:7f:5a:e7:23:34:e4:c2:26:db:ea:
5e:b1:6d:c7:8e:74:c3:50:33:d1:27:1e:a5:77:34:95:7d:8f:
d7:8d:dc:ca:a9:01:8f:7e:de:ac:bb:92:d9:79:76:83:f0:fc:
a5:98:ca:6a:23:1a:22:b3:a3:7f:5a:82:6f:34:8d:12:f5:e3:
78:00:c1:35:bd:04:75:19:e0:dd:59:d0:1a:b8:fa:2b:c8:f7:
41:f0:61:87:2e:0b:0a:73:d1:a4:e4:48:e0:db:9c:fe:80:1d:
66:9a:9c:29:bc:5e:ac:69:b9:78:c1:6c:1f:b1:1d:35:8d:be:
a6:38:e2:43:ba:d8:5d:87:fc:21:8e:c2:91:5b:90:7e:b9:4a:
8c:3c:e0:ee:a9:3c:c8:e3:d6:cd:46:28:43:b9:52:fb:87:d5:
cd:47:6e:8f:6f:3a:57:51:2b:d3:a6:86:0d:eb:cc:db:5e:80:
4f:22:c8:f8:b4:5b:67:ae:f5:1b:81:c3:e9:88:e0:83:23:f0:
41:df:26:93:19:be:af:6e:6e:5f:9c:2f:03:ec:a4:54:11:a5:
ed:5e:a5:34:a6:23:c6:ff:76:3c:17:6b:82:c0:e3:b7:c2:22:
0a:fb:38:eb:b9:9e:c4:c9:b9:f5:69:3e:60:9b:7d:05:93:79:
bf:4b:b2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:55:15 2025 by rpki-client