Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File: ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier: jvU26uffN1OiJnut3CCRFXS/MxDvT2bHviBrC06JtlE=
Subject key identifier: BC:62:3E:A6:0E:49:FC:89:00:C3:A8:F0:EB:22:F3:A2:56:4C:B2:C3
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 01978660639C006E72F8FF5276051F95CBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number: 0651
Signing time: Thu 19 Jun 2025 04:09:13 +0000
Manifest this update: Thu 19 Jun 2025 04:09:13 +0000
Manifest next update: Fri 20 Jun 2025 04:09:13 +0000
Files and hashes: 1: Oz6CxX5tDe3A5bSmQL-hm13NWqU.roa (hash: LuZXcyXypc7PcVpBwbxA5S6ocF17II624uDCDByYtxs=)
2: YmUMDVqggrsChPW-vHQncTBMhpU.roa (hash: zZahOdj1xk2zekmxJkuYE32juexSeFCP+2nSMel27JM=)
3: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: bnU0fiPAxQmYhsjcbWEDc/9WDyPZowiXQ5Pv3wmsdNg=)
4: wPcEp2M9VMWvBwIJ57QAHtXrjmQ.roa (hash: IZmN+wQznsRd0N9ZJauN0q3iFAek4sQFg68+aBUWHxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 04:09:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:60:63:9c:00:6e:72:f8:ff:52:76:05:1f:95:cb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Jun 19 04:09:13 2025 GMT
Not After : Jun 20 04:09:13 2025 GMT
Subject: CN=bc623ea60e49fc8900c3a8f0eb22f3a2564cb2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d8:d3:f3:e8:e0:83:d1:59:1d:ea:84:63:17:
3a:95:d4:71:e5:35:a6:56:8a:9d:d4:a8:e4:1c:bc:
98:e0:12:d0:65:58:f4:ad:4e:6b:53:ee:fa:78:2e:
a1:8a:5e:88:78:26:82:26:f9:0b:44:34:3f:17:75:
1d:d1:2b:0f:38:78:db:7e:5f:7f:f0:cf:b3:25:ff:
11:e7:81:65:8d:c4:be:7c:8e:06:86:cd:84:5c:c2:
70:b0:e1:3a:78:93:7b:5a:e6:5d:18:a0:c7:5b:08:
b7:d1:7e:b0:a9:fc:70:de:3f:33:37:93:aa:00:4f:
48:a3:dd:19:af:7c:e2:d5:10:fb:d6:15:d5:7d:d7:
a5:b1:be:f0:69:93:58:af:93:bd:3c:61:1a:07:af:
fa:d7:40:60:88:10:b0:94:21:48:b2:9f:fd:45:3c:
6c:95:d0:9f:4f:32:7a:12:10:8d:eb:99:57:87:98:
99:17:77:23:c7:d1:51:c7:90:63:cb:4f:ae:f6:c6:
f7:23:1f:dd:64:a9:c9:af:01:e9:ca:93:a4:30:65:
fd:c8:9f:32:6d:0d:3f:ad:e1:22:ee:37:5c:83:19:
25:3b:e2:d5:a8:12:ae:fc:e7:76:9a:7d:07:69:5a:
af:22:f1:e3:56:36:ba:1e:26:95:e0:c1:e3:b5:b7:
91:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:62:3E:A6:0E:49:FC:89:00:C3:A8:F0:EB:22:F3:A2:56:4C:B2:C3
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:24:b0:d3:e3:f0:18:7f:2a:a2:87:4d:d3:7f:ca:b5:0b:4e:
44:ad:2f:be:1d:53:0e:49:a6:ae:20:9c:a1:23:1f:04:8e:76:
6d:01:94:b5:d4:63:0f:ff:aa:07:5d:36:f2:10:00:b8:be:f7:
55:42:3e:a8:65:b0:9f:33:d0:9b:e8:39:3e:3f:40:09:f7:f1:
44:d2:d0:81:36:26:a1:95:4e:c0:db:c7:06:c0:be:b1:22:c3:
8a:1a:07:3e:89:7e:5f:aa:29:0d:91:fc:23:c2:33:25:68:da:
cd:c5:5c:1f:a2:0a:cd:ce:45:13:8f:ff:b8:ea:a6:1b:d2:24:
67:ad:2b:9d:c4:f2:e1:52:04:a2:e6:c9:29:25:73:68:05:bf:
07:81:16:5a:a4:6d:3e:cf:18:8d:50:a9:e8:81:51:53:3c:51:
30:19:fd:6b:7a:94:01:86:ed:35:b5:c5:8b:88:57:f9:ab:c0:
f1:63:a6:a3:d2:a9:e0:ad:83:7d:75:ff:94:49:d1:10:66:b3:
44:f1:19:c2:a3:18:b7:2a:4b:2d:bf:0d:84:16:47:5e:9e:c0:
5b:d9:87:cc:d6:80:0f:00:b2:d6:e3:d7:f2:b7:9e:39:a7:5d:
88:ff:b8:a5:5d:15:c4:1e:05:4a:36:8d:2e:3c:cc:94:70:b1:
32:5a:94:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 12:45:26 2025 by rpki-client