Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
File: feY3584h1skbVKBojiD5JBYiIjc.mft (raw, json)
Hash identifier: YXi0m/c+xsRD2xglEiUksF/C9+MYjwi8xRHONt5L91s=
Subject key identifier: 1F:C2:9F:D1:C6:92:82:79:27:06:00:C6:85:A2:93:72:79:DD:36:04
Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Certificate issuer: /CN=7de637e7ce21d6c91b54a0688e20f92416222237
Certificate serial: 019769CF08E353022771751C0C4D8D9E92EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
Manifest number: 0FEF
Signing time: Fri 13 Jun 2025 15:01:05 +0000
Manifest this update: Fri 13 Jun 2025 15:01:05 +0000
Manifest next update: Sat 14 Jun 2025 15:01:05 +0000
Files and hashes: 1: feY3584h1skbVKBojiD5JBYiIjc.crl (hash: 8O33IP+sEMa2l0zos5EAfAeLPMrfIpRDHZ3II07qBBY=)
2: gSkIa_heLgXoxXWpRCNJvp9Xs88.roa (hash: 5vrs6puP5YdpeYb/igpgdkuukfc/yg5fXJ/pSyPNWx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:08:e3:53:02:27:71:75:1c:0c:4d:8d:9e:92:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237
Validity
Not Before: Jun 13 15:01:05 2025 GMT
Not After : Jun 14 15:01:05 2025 GMT
Subject: CN=1fc29fd1c6928279270600c685a2937279dd3604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:9c:d0:63:d7:f0:4c:fa:94:c1:b9:94:a6:
a7:0a:61:49:25:b1:99:3e:4d:72:c3:8d:ac:b2:48:
27:b9:81:ac:df:a7:e1:f8:e5:61:79:27:71:ee:93:
f9:dc:fa:92:2b:16:3c:01:a2:aa:2b:cd:27:ff:9c:
0f:3b:29:28:a6:75:ff:27:cf:b4:5f:11:ae:e8:3e:
e1:1d:c7:49:c4:4f:02:34:70:cf:93:e5:3f:c8:f1:
f5:46:5a:32:52:29:96:23:08:a6:8e:29:7a:98:15:
b7:35:66:04:62:07:85:ee:6a:35:ce:fd:cf:20:b1:
75:b9:af:c9:03:56:25:fc:d0:f8:c3:5a:43:ab:fa:
7a:4c:95:9b:b1:c1:4a:1e:0f:e1:70:da:cb:74:fe:
ee:d7:98:1d:c4:64:26:96:99:c4:02:5e:53:a7:b6:
af:b1:16:69:c1:d2:51:42:77:52:29:b2:9a:49:f9:
47:d9:2c:55:1b:94:d9:7b:d1:71:c0:d5:fd:60:f9:
27:42:83:1c:a2:c0:ac:22:4d:ef:f1:0f:ae:c8:4e:
20:58:a0:4e:c7:f5:d1:ca:f5:b7:5e:29:59:0b:78:
60:85:a6:21:99:2f:99:f4:7a:e3:c7:cd:df:f7:fb:
9c:0d:63:af:3d:48:24:0a:f6:c1:2d:76:24:be:6c:
ab:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C2:9F:D1:C6:92:82:79:27:06:00:C6:85:A2:93:72:79:DD:36:04
X509v3 Authority Key Identifier:
keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:26:e7:c5:a6:65:34:97:d0:0d:e0:f1:04:12:fe:ef:0a:70:
30:14:39:55:f2:bf:fc:e9:f0:a3:84:cd:c5:d3:74:d2:eb:bf:
eb:7d:5f:65:52:b4:e4:f9:27:02:42:6d:04:50:cc:18:b8:6a:
19:e6:5a:be:66:1d:d7:de:65:82:c1:1d:b0:61:6d:8b:17:32:
f0:7a:f6:ce:02:6d:2f:b5:30:44:b5:9d:ff:3f:3e:d1:ab:9a:
70:0f:9a:4a:34:9c:87:0b:85:09:9f:f7:43:f1:00:c5:3c:1d:
64:01:f8:6c:99:9b:fa:bf:01:73:a0:91:3c:c3:fc:21:7d:fb:
4f:99:1f:13:69:47:7c:cc:6a:30:64:92:3d:b0:f1:8b:23:44:
7b:a4:5f:44:9b:a4:36:74:c8:ac:96:87:07:5f:41:52:ea:97:
7d:a2:2f:32:ce:2f:68:37:82:ad:94:a6:36:5b:a9:52:85:b6:
21:f3:8d:86:1f:bc:d1:5a:bc:03:40:7c:e3:65:50:3e:1f:45:
09:81:60:3a:07:30:41:dd:0b:78:67:61:ee:3e:bc:c9:12:67:
5d:f0:aa:3b:32:d2:72:dd:96:d7:eb:6e:e7:0a:51:61:32:14:
b5:9a:cd:fb:49:f9:49:8c:64:c8:9d:f5:e8:fc:5e:72:d5:5e:
82:a5:bd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:36:52 2025 by rpki-client