Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json)
Hash identifier: sA9RohpvCJxOcC3ES8/sp63TJMvn0RWMaiHn7WNQ3WU=
Subject key identifier: 24:21:65:1B:06:B9:98:1E:1C:EE:A0:BA:92:71:96:93:4B:99:DC:52
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 01976C2B36A254633CA41867D3AD627D5DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
Manifest number: 08FB
Signing time: Sat 14 Jun 2025 02:01:00 +0000
Manifest this update: Sat 14 Jun 2025 02:01:00 +0000
Manifest next update: Sun 15 Jun 2025 02:01:00 +0000
Files and hashes: 1: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: kIsIA2Evfb7XXM2rnO8Vi5t9P/4wYCOrnx49VrBsmQQ=)
2: oYXpqhTt3GbQvZqNdYr3EWQ5ung.roa (hash: UPRTIlRixS9CM22oBbc4c5Z63dIGJf+vJONZ8V2i0x0=)
3: pcs_PEHDTdXvP_iINnpW2AcXpTo.roa (hash: bWlTVPyUsWBnzuOtIjYtj485am3ZoH6EessaELskjTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:36:a2:54:63:3c:a4:18:67:d3:ad:62:7d:5d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: Jun 14 02:01:00 2025 GMT
Not After : Jun 15 02:01:00 2025 GMT
Subject: CN=2421651b06b9981e1ceea0ba927196934b99dc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:44:be:c1:19:47:19:4d:86:da:5b:e4:07:8b:
30:b9:0f:9d:58:78:35:e6:17:be:2f:34:e7:80:d3:
e7:82:fa:78:f8:eb:82:52:60:c2:1e:8c:45:9a:1f:
4b:c4:a1:00:2a:d6:63:4e:83:14:9d:8f:38:82:04:
45:d0:a1:d8:11:84:ae:f3:91:4c:77:3a:09:33:43:
38:50:cc:68:9d:a6:7c:32:9a:68:f4:48:24:04:8a:
25:57:ab:50:9d:9c:8c:c6:00:b2:cc:8b:4e:1d:5b:
f8:4e:79:ae:14:99:c7:dd:54:64:8b:ae:ca:e8:54:
0e:14:62:fa:1f:ed:c3:b1:c6:53:8a:73:c4:a7:ab:
6c:36:73:c3:f5:0f:f5:02:1e:24:21:9d:a7:fb:3e:
29:b5:8c:99:ab:2e:ac:22:c4:29:fc:57:6a:b8:c2:
6a:c6:94:7e:ee:c8:f0:c7:5c:0d:50:d1:59:f2:02:
b8:69:62:47:4f:51:72:51:da:fb:25:d1:16:08:94:
59:60:1c:6b:e9:6e:58:b1:fe:c3:24:dd:65:88:0e:
8a:c5:a8:d2:03:77:df:71:27:8a:ee:5a:d7:8a:20:
37:c6:6a:51:83:87:ac:b2:bb:f0:09:0a:ee:ce:48:
12:a3:79:87:75:91:f6:40:19:16:6a:27:9c:23:73:
05:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:21:65:1B:06:B9:98:1E:1C:EE:A0:BA:92:71:96:93:4B:99:DC:52
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:26:2b:0c:17:d3:7f:4d:88:61:d0:05:9f:da:6d:0b:42:9d:
4b:d8:3f:75:26:40:90:d2:df:2c:38:68:3c:69:24:4f:c9:c4:
67:2c:b0:66:6a:62:b3:a3:1d:16:ba:e1:bb:76:c9:c7:64:5d:
d9:df:4e:b6:5b:95:32:d1:32:ec:ce:50:3c:32:df:ca:c8:6d:
d0:88:74:98:c9:6d:03:fb:6e:ef:63:de:55:40:f0:d5:73:f1:
d5:30:34:f0:9c:f6:42:39:76:21:84:0f:41:3d:52:f3:40:83:
ce:13:24:8d:7c:df:41:d4:4d:dd:e1:e1:83:20:66:ca:20:63:
3d:bb:af:64:af:25:95:0b:0c:c6:88:41:d9:6f:ad:37:5a:8e:
34:2d:84:ad:20:2d:6c:2b:f4:9d:ff:52:26:e2:57:78:aa:9f:
40:70:a8:38:30:73:8f:68:29:a3:81:40:b2:10:4b:bc:e3:47:
29:66:50:42:ba:44:53:e7:bc:ca:96:f8:4d:87:c0:40:bd:5a:
68:10:5e:35:41:e6:4d:8a:36:c5:e4:b9:75:21:05:28:12:71:
1a:c5:0d:27:3d:46:47:17:d7:57:67:08:6c:22:ad:1d:e6:d6:
3a:6a:69:09:10:39:a6:ec:12:f0:18:2c:f1:cb:5c:28:f7:f0:
f0:b7:ac:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:32:19 2025 by rpki-client