Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
File: fINUmPNRmaFXGWTYVcOHd1FoGrk.mft (raw, json)
Hash identifier: Y0uJmJGUcshUFT5dQMW+TIqFgGoHgTzJP02kMuEkqac=
Subject key identifier: 3D:7A:B4:8C:12:11:80:6A:12:A0:25:04:67:50:F0:C6:B3:1D:F6:24
Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
Certificate issuer: /CN=7c835498f35199a1571964d855c3877751681ab9
Certificate serial: 01976C990733B74083517E8F8A76C5775D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 04:00:57 +0000
Manifest this update: Sat 14 Jun 2025 04:00:57 +0000
Manifest next update: Sun 15 Jun 2025 04:00:57 +0000
Files and hashes: 1: fINUmPNRmaFXGWTYVcOHd1FoGrk.crl (hash: N7PLHqlPES7v0SApX5d3Hd2y7IEj4eohXLeM91CZ2m4=)
2: lEn451-XXHlherUNQr8Rc0JmU5c.roa (hash: kIpdRfZGgcVE/RkoYxVB/7zTwiZiv41Cisi6L8BZjv8=)
3: z-VHazRi4J3dfaKu9uPEdEUaUxE.roa (hash: d/YBGA/H3W0HjGNcA5bYsjIVUAEfDekBGnTdNyMczFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:07:33:b7:40:83:51:7e:8f:8a:76:c5:77:5d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c835498f35199a1571964d855c3877751681ab9
Validity
Not Before: Jun 14 04:00:57 2025 GMT
Not After : Jun 15 04:00:57 2025 GMT
Subject: CN=3d7ab48c1211806a12a025046750f0c6b31df624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:20:78:b3:36:99:45:54:0d:d7:cd:27:eb:1f:
a6:37:42:0d:b5:26:be:47:30:7d:47:4c:1c:34:48:
df:c0:dc:ae:79:62:e8:25:36:a5:ec:3f:b2:23:dc:
5a:3a:d0:21:2d:50:c1:76:b8:89:e1:a0:af:a2:ff:
c9:ff:8b:21:8b:9e:2a:ed:ce:65:90:e9:0d:da:85:
77:34:87:07:c8:df:84:cb:80:a8:69:88:e7:d1:79:
eb:74:19:f6:18:7d:64:14:d6:c8:08:6f:a8:a2:db:
38:fb:16:48:b1:7e:d8:c2:d3:79:f2:55:fd:35:33:
18:21:19:ba:7b:24:76:a9:a5:21:d0:c2:f4:7d:79:
38:d5:69:66:25:c1:3f:88:34:8c:0a:b3:ff:45:c2:
93:86:af:42:a3:b0:45:2a:5d:ae:25:a3:bf:30:64:
26:e1:9f:58:5e:69:b8:52:09:e8:b6:10:c5:00:ef:
6d:99:51:a2:31:2c:75:48:cf:4f:e3:40:34:b1:f3:
62:8d:82:ff:1f:24:28:60:bf:0a:e2:70:53:06:6b:
44:fc:e1:4f:9f:28:73:d0:c2:49:e3:da:96:fa:3e:
42:d1:b6:ea:c9:21:52:dc:77:75:91:af:49:37:72:
54:11:83:48:30:84:af:ec:41:f3:a0:14:47:86:f6:
53:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7A:B4:8C:12:11:80:6A:12:A0:25:04:67:50:F0:C6:B3:1D:F6:24
X509v3 Authority Key Identifier:
keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:24:d3:69:b4:85:94:1a:63:33:be:55:2d:d7:a4:ee:29:51:
ef:9a:7d:86:de:95:ab:49:33:8f:72:ea:ef:f8:be:01:80:6f:
4e:9f:96:df:f4:d8:94:48:ef:e9:ad:20:02:38:47:7d:ee:c7:
f1:42:a2:f0:36:37:5b:40:41:dd:c9:c8:b6:2a:16:e0:fd:ad:
4e:96:cf:ae:3c:57:cf:0c:ab:93:30:1b:93:ad:15:8e:7f:14:
06:b5:6e:80:c7:a9:73:62:d2:e1:6f:de:7f:1f:82:4f:2e:d5:
15:f5:9b:0c:f3:65:7e:35:c0:db:5b:7f:68:5a:b0:8c:79:94:
0e:a9:d9:5b:d3:74:21:cb:62:8d:3b:8f:26:5f:67:82:fc:16:
1e:04:d6:58:cb:c6:49:ed:9a:e3:4b:27:ba:89:ab:78:ca:9e:
96:5c:ec:11:ed:01:cc:bb:86:18:37:02:50:e3:aa:73:76:2c:
a2:bd:ee:04:5a:0d:58:61:32:98:62:15:1a:16:ad:7a:5a:e9:
e8:0c:20:ce:8a:59:c3:fb:08:75:60:53:99:fd:d0:5d:d8:b9:
ea:eb:d6:13:ca:c0:23:6b:c4:02:bf:f4:5e:df:7b:f4:f2:48:
53:2f:16:59:5b:6c:47:72:67:c6:71:5b:cf:44:e7:8a:af:60:
82:3c:12:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:25:41 2025 by rpki-client