Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
File: RF3xPSDztXGkumELgeYwPbbQmcA.mft (raw, json)
Hash identifier: PEyOiU7OOvtLkmEfCDG12Y0Gk3xZKScl6ovT3ir6b88=
Subject key identifier: FA:7C:18:56:03:6E:5F:40:33:CC:44:0C:89:3C:3C:4D:BA:10:6D:80
Authority key identifier: 44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
Certificate issuer: /CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Certificate serial: 0197684DE8677B9B1C309704BBF9666B5230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 08:00:25 +0000
Manifest this update: Fri 13 Jun 2025 08:00:25 +0000
Manifest next update: Sat 14 Jun 2025 08:00:25 +0000
Files and hashes: 1: 6Ch2BA4EBBViUCewGb6Paaan7YI.roa (hash: WRYMr3XPQ7z0oDRXKp9hN0X+086fzEIRzfg0NuzfPNE=)
2: RF3xPSDztXGkumELgeYwPbbQmcA.crl (hash: FvlRw2x+qCbSJYsoQAN8HXvnYTxOjmRSKQGWALgI1hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:e8:67:7b:9b:1c:30:97:04:bb:f9:66:6b:52:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Validity
Not Before: Jun 13 08:00:25 2025 GMT
Not After : Jun 14 08:00:25 2025 GMT
Subject: CN=fa7c1856036e5f4033cc440c893c3c4dba106d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:eb:a3:08:59:c6:0c:5c:a1:79:0d:a4:c5:
4e:7f:f9:35:53:a4:fa:0b:48:90:70:4b:f1:c1:de:
17:98:71:fe:a0:ad:ab:f7:4a:fb:43:da:ec:4f:3c:
8f:60:70:28:12:76:13:2e:15:9f:47:91:95:b7:60:
1a:1a:98:d5:f8:97:5d:7c:8f:e6:4f:f2:d7:f3:80:
73:b5:90:40:de:7d:77:10:e2:19:52:73:09:43:8c:
82:bf:64:07:1f:c5:2d:99:7c:64:54:82:59:40:b3:
43:28:e8:83:84:3d:69:0e:44:24:9f:c7:95:9b:7d:
e7:49:42:0a:ee:4a:6a:21:63:85:30:7a:17:52:44:
6c:f8:4b:4e:45:ce:92:54:63:13:50:a0:a7:0f:50:
ce:6e:a9:8e:59:a5:d4:c5:2f:ee:27:26:38:6b:5e:
9f:31:fc:c2:7a:97:36:a9:3f:01:ca:37:0d:17:53:
fd:bf:d7:95:b9:ad:ca:cb:59:c5:8d:29:59:9c:02:
0e:da:a8:60:b7:9f:36:53:83:44:27:3e:a1:0c:fd:
3b:42:e6:dc:51:85:7a:a6:09:59:d6:6d:5d:a8:fa:
ed:12:9d:93:f4:99:55:59:02:d4:71:e2:46:26:b7:
f6:37:ed:67:5e:d8:86:ca:7a:37:aa:7e:02:92:9c:
ac:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7C:18:56:03:6E:5F:40:33:CC:44:0C:89:3C:3C:4D:BA:10:6D:80
X509v3 Authority Key Identifier:
keyid:44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:98:2a:f3:9f:90:c4:47:96:63:c3:10:7f:0e:f2:4c:38:b2:
cc:a8:42:cd:0c:60:0d:0a:fa:24:68:88:0d:4a:4e:78:66:8f:
5c:ec:4d:73:38:58:61:a9:d8:00:46:0b:d4:93:44:d6:8d:ee:
1d:56:13:75:f7:72:b6:4b:ed:72:3c:3d:8b:f9:e4:89:23:03:
2a:7a:be:28:e2:5e:81:1b:dd:8b:1f:14:96:03:fc:8a:d2:e2:
22:d6:84:bc:16:0f:09:67:5f:53:f7:53:ef:99:b5:d5:77:1f:
8d:bc:c7:da:87:42:3c:50:17:50:29:09:90:a5:9f:cf:8c:b7:
d2:6c:a6:12:36:c7:7c:92:4e:bb:f1:ab:04:9d:10:a9:36:c0:
91:0e:be:71:de:bb:fc:2a:50:a4:42:c9:e9:5d:f1:a5:42:5d:
c2:11:83:74:6c:28:9b:25:0f:22:69:3b:4b:10:9b:fc:48:e5:
d2:05:ef:d6:31:1c:23:7f:1f:c3:5c:8d:de:a7:b2:e1:b9:9b:
8a:b2:3d:bf:a2:b6:ba:c9:db:7c:22:0e:87:79:a8:fc:ab:c9:
b4:a6:7b:6c:a6:6e:26:bc:9e:31:8a:c0:67:d3:7b:1e:31:0e:
cd:59:bb:02:e8:6d:27:13:ca:43:50:a1:81:30:e6:53:ac:d1:
33:e1:5c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:32:05 2025 by rpki-client