Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
File: fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft (raw, json)
Hash identifier: 7LTMODUzyHWG4+6iFaQZ1/ZKDkRFimSqZYH/viQdC28=
Subject key identifier: 53:3A:93:78:02:22:40:FC:C0:7B:54:96:36:49:BD:DD:AA:1D:E3:FD
Authority key identifier: 7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
Certificate issuer: /CN=7e058377510a3a9245ce72cbe88e0efa19719204
Certificate serial: 01976C62562DCD24BC6E12E92487AF497FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
Manifest number: 0FD7
Signing time: Sat 14 Jun 2025 03:01:13 +0000
Manifest this update: Sat 14 Jun 2025 03:01:13 +0000
Manifest next update: Sun 15 Jun 2025 03:01:13 +0000
Files and hashes: 1: _J2QkiOT3wZXiv-kIeQ1vzDjGQI.roa (hash: ieQbUeSA/ZnjcXq9UchtsLIMyHxTCALoQIa6C87a8+U=)
2: fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl (hash: 2gBtLzdpitbjaUnMElxENy77GtibStPsQicdbmvG9H4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:56:2d:cd:24:bc:6e:12:e9:24:87:af:49:7f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e058377510a3a9245ce72cbe88e0efa19719204
Validity
Not Before: Jun 14 03:01:13 2025 GMT
Not After : Jun 15 03:01:13 2025 GMT
Subject: CN=533a9378022240fcc07b54963649bdddaa1de3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:ce:f9:c7:41:ab:c1:da:50:eb:d0:e5:a4:
ef:fe:dc:c3:07:65:82:5d:b4:fd:a2:c4:1a:a4:58:
92:56:39:3d:f7:62:9e:a7:ed:a1:ad:f8:4f:1c:5d:
17:b8:26:cf:5e:9a:cc:70:d8:3b:af:de:75:e4:67:
3a:41:a5:91:73:6b:28:6c:78:d2:0f:f7:46:f6:f6:
81:83:e4:4a:51:41:1c:1a:cf:9c:e3:e1:a0:f8:9d:
ec:f1:02:c3:19:d1:54:a9:55:86:c9:44:38:f0:b4:
52:8c:37:b5:ea:f6:9d:2f:c2:7a:90:7f:f4:7e:dc:
c5:63:90:49:ae:d6:a4:3b:af:d4:91:94:57:a1:9f:
0d:f9:30:16:8e:72:72:4c:3a:3b:cc:64:58:3c:80:
e7:5f:d7:cc:4e:c3:5b:22:52:2d:db:3e:47:6f:14:
45:62:c7:73:3a:6f:c7:1f:da:3e:a3:2f:43:2f:59:
92:e7:1f:d2:e6:d0:14:99:14:be:9b:74:80:9e:67:
86:ad:20:e1:0b:cd:a9:b2:8c:96:d0:6a:ba:e0:85:
d9:66:a7:6a:c2:48:91:05:ec:19:b0:99:2c:c7:b0:
a8:5d:30:08:2e:a8:a9:a9:9f:d4:b7:96:29:95:78:
47:a4:54:f5:26:bd:1d:47:9a:76:34:d5:e3:5a:eb:
ec:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3A:93:78:02:22:40:FC:C0:7B:54:96:36:49:BD:DD:AA:1D:E3:FD
X509v3 Authority Key Identifier:
keyid:7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9d:5e:0e:a3:d2:df:32:56:7b:5d:c9:fd:b3:ee:45:fd:e4:
5b:f2:2b:89:d2:90:58:a3:00:78:51:96:17:97:75:87:df:dd:
99:05:49:56:a2:38:bd:f3:50:20:b9:a8:f3:1e:47:1f:74:8e:
8d:8c:66:2f:9e:af:22:94:4e:c6:1f:b6:ec:57:e3:a1:e4:e7:
37:fe:10:d8:32:26:d2:f6:51:3f:13:76:29:2f:c2:fe:83:d2:
15:c9:49:d0:88:36:71:98:b3:29:ea:9c:92:2d:d4:a9:d7:4a:
44:0b:ca:29:a3:81:96:5d:a5:89:d7:86:bd:32:30:1b:3b:b3:
42:79:d3:3d:7e:fe:70:3b:05:18:35:19:e2:07:87:fd:a7:63:
8d:c4:73:c3:90:fc:75:e8:c6:42:d9:82:ac:56:0f:a3:83:f8:
74:f0:b5:3b:19:bc:49:56:26:05:58:60:2b:ce:5e:aa:bd:3e:
7e:8d:99:23:2b:0d:3c:7f:87:d7:23:8d:92:ba:f9:bc:c7:b1:
22:3b:03:e4:87:5e:58:c0:5b:8f:0c:d1:4e:6c:ef:60:73:d9:
05:8b:79:d9:36:56:78:e5:b2:f1:d6:9f:0e:05:5a:c6:5d:aa:
11:5d:a4:ab:b7:7e:ee:c2:30:ef:82:2a:ac:f0:ed:48:60:87:
09:4b:ff:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:54:11 2025 by rpki-client