Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
File: F-ad3CmgWyxF7jzFojQLLkxtrV0.mft (raw, json)
Hash identifier: fZOxS5LWY4LpmWA5rHuB3wcupC4n6vHJ4dxySkDVMKk=
Subject key identifier: 46:54:38:6C:55:4E:15:BB:20:C1:EE:E8:BE:47:CB:81:07:1E:25:86
Authority key identifier: 17:E6:9D:DC:29:A0:5B:2C:45:EE:3C:C5:A2:34:0B:2E:4C:6D:AD:5D
Certificate issuer: /CN=17e69ddc29a05b2c45ee3cc5a2340b2e4c6dad5d
Certificate serial: 01976D7465DFD6F6EC2CFE8AA1E28A84E455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
Manifest number: 0847
Signing time: Sat 14 Jun 2025 08:00:34 +0000
Manifest this update: Sat 14 Jun 2025 08:00:34 +0000
Manifest next update: Sun 15 Jun 2025 08:00:34 +0000
Files and hashes: 1: A8Ej05bPXSyJSutko6zMXi_LdTs.roa (hash: l1Np2vyuCibE5G3ZNC4CZuxMVOv5Q0qw24MUV/m5PcU=)
2: F-ad3CmgWyxF7jzFojQLLkxtrV0.crl (hash: v91e92rk70mX8wwXHQnSGwKGl6UV7lM5Afhfs+Kmhpc=)
3: LrktV_MNLgMuzH072PMIh7VuEn4.roa (hash: shYF8grlz0KlYGSJ/aVE66ppgDECTuvjQ5MpA1IvAJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:65:df:d6:f6:ec:2c:fe:8a:a1:e2:8a:84:e4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17e69ddc29a05b2c45ee3cc5a2340b2e4c6dad5d
Validity
Not Before: Jun 14 08:00:34 2025 GMT
Not After : Jun 15 08:00:34 2025 GMT
Subject: CN=4654386c554e15bb20c1eee8be47cb81071e2586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:f0:86:f8:ae:32:43:88:c0:71:3c:ce:92:
05:60:57:4e:73:3c:a8:c6:86:04:45:d1:78:89:d0:
49:98:88:19:98:56:c8:e3:9f:cd:0e:37:ee:67:1c:
9a:44:8e:dc:06:b6:34:ad:5e:16:d5:47:18:d1:d9:
41:97:50:43:55:1f:16:0e:88:f2:f0:c8:12:97:90:
4b:80:db:a5:41:23:54:91:b6:3f:72:95:6f:08:7b:
96:62:5c:20:70:75:4b:bb:80:73:1c:de:24:97:dd:
31:29:08:c9:45:84:99:20:e4:0b:11:4e:4b:03:a8:
a1:46:7d:24:15:e9:ef:d2:8b:9f:3b:d7:84:ac:fd:
5a:de:fa:40:87:66:dd:e6:f5:68:c5:07:5f:88:a8:
ee:15:40:55:1c:3a:26:e5:b1:2c:26:26:07:ae:fa:
2f:a7:b6:e5:1a:9d:e1:a7:42:8a:7a:03:bf:d8:02:
55:db:c6:28:4a:5d:73:92:32:d4:83:9d:36:9b:72:
07:df:ad:d1:be:1e:d4:34:54:e3:fb:ec:32:fd:ea:
bd:a0:2e:e3:29:87:b0:26:f6:be:70:e0:5e:58:cc:
d8:f4:8c:fd:a4:6a:74:01:f6:51:be:68:9b:f9:a3:
b8:47:83:0f:2c:6a:71:72:e7:9d:df:29:ad:24:e2:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:54:38:6C:55:4E:15:BB:20:C1:EE:E8:BE:47:CB:81:07:1E:25:86
X509v3 Authority Key Identifier:
keyid:17:E6:9D:DC:29:A0:5B:2C:45:EE:3C:C5:A2:34:0B:2E:4C:6D:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c7:b6:69:dc:1d:cc:88:68:bc:11:64:36:42:62:de:3d:35:
c6:3d:de:38:f2:a8:55:a7:0d:3e:70:90:43:ee:30:5b:0b:45:
0e:ed:0c:9b:48:01:da:10:e5:a4:79:e8:dd:9e:92:c2:6f:76:
91:f9:d2:b4:6c:82:d6:66:b1:73:b0:f2:87:29:98:64:a5:fc:
7c:92:64:9d:ac:6b:45:a7:59:a1:fb:b7:2c:12:0b:03:5d:10:
e9:dd:af:ce:c6:dd:3d:f7:24:14:56:73:c8:88:2f:a8:31:ae:
09:a6:da:67:c6:0a:85:b9:44:4c:9f:41:e3:f7:b4:fb:1b:bf:
c8:3b:c6:f4:1d:2b:23:db:f4:5c:6a:38:dc:c9:7d:5d:e4:c7:
38:62:ce:8d:b0:b6:7f:47:d1:8c:64:ad:39:1e:be:fc:73:5a:
d2:49:99:32:8b:b3:ab:25:96:26:02:23:15:03:c6:1e:bc:df:
53:5a:bb:3d:5a:da:f9:73:e7:af:14:43:a6:9d:b5:82:44:7b:
d0:e0:fa:c6:fa:c9:a9:ba:43:0e:9d:5f:df:b1:0a:65:65:db:
3f:1d:02:e9:d7:c2:28:49:96:dd:7e:7f:ef:d9:6a:8c:ee:9f:
fd:01:5a:84:32:2b:9b:17:bf:66:14:d4:5d:9c:13:2c:03:b2:
cb:86:3d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:57:29 2025 by rpki-client