Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
File: Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft (raw, json)
Hash identifier: ptsKmPfecYHItroALgiGFUGaHwLUTdjVR8nliMCLMO4=
Subject key identifier: DB:64:DF:5A:50:23:BD:BB:BA:E1:12:02:AC:F1:05:28:6E:55:81:E9
Authority key identifier: 16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98
Certificate issuer: /CN=1627b80681f5b48e126898295983e0df29971b98
Certificate serial: 0197711AD588986A0777E9A5AFA28CD35732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
Manifest number: 0F8B
Signing time: Sun 15 Jun 2025 01:01:13 +0000
Manifest this update: Sun 15 Jun 2025 01:01:13 +0000
Manifest next update: Mon 16 Jun 2025 01:01:13 +0000
Files and hashes: 1: Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl (hash: LLnTMBOvJRC1T6OBZ7qGovwTj+az/yrltk9DCE/Vq0w=)
2: _AGKWozlzWCnt0EVUV_nIRjWGDc.roa (hash: u4jnpeyvwfIgkyOL/DVIQbqgyc9sUOLPqmAM+WUWM1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:d5:88:98:6a:07:77:e9:a5:af:a2:8c:d3:57:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1627b80681f5b48e126898295983e0df29971b98
Validity
Not Before: Jun 15 01:01:13 2025 GMT
Not After : Jun 16 01:01:13 2025 GMT
Subject: CN=db64df5a5023bdbbbae11202acf105286e5581e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:75:9a:c9:1e:a0:33:b9:b2:9a:f0:85:de:a3:
1a:79:79:c8:7d:96:91:f5:b3:30:90:5a:d5:35:89:
78:03:09:ee:53:0c:8e:4e:c7:bd:6e:23:08:d6:29:
12:46:35:53:74:c4:61:ce:4e:1a:c2:63:25:13:dd:
4d:e9:83:98:9a:8e:96:92:16:8a:f6:81:59:c1:26:
f2:1a:a9:6e:ba:77:e4:74:4d:30:44:7a:97:0f:18:
6b:7e:e4:54:48:34:99:89:61:a2:62:80:71:18:16:
d8:f5:d1:b7:0f:e7:87:75:8c:52:fc:16:44:4c:6a:
79:f5:9f:85:1e:8d:1e:2b:51:96:a3:7c:7f:bf:e2:
a8:3a:a5:96:1c:81:d1:0f:fd:66:19:7c:20:5e:43:
01:d5:47:c7:25:a2:55:90:e2:0b:d2:0b:a9:86:64:
82:b1:f0:2c:18:55:e5:7f:e4:f9:dc:3d:25:db:61:
02:49:7d:be:04:a3:37:44:c1:c9:22:8f:f7:03:4e:
7f:ab:0d:57:4a:e6:33:49:b6:63:3b:ee:3e:81:a2:
82:2b:5e:da:cb:15:d1:0a:c9:9b:62:13:b2:7f:dc:
0f:ea:0f:df:f7:10:6b:c6:9f:36:43:e9:94:ff:f5:
a9:7c:d8:f2:10:eb:17:36:dc:71:48:d2:76:aa:6b:
88:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:64:DF:5A:50:23:BD:BB:BA:E1:12:02:AC:F1:05:28:6E:55:81:E9
X509v3 Authority Key Identifier:
keyid:16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:56:e6:97:f2:47:8f:ed:25:7c:14:fe:b4:39:2b:8d:eb:e4:
ef:d6:d4:33:b1:a3:1d:40:e9:16:da:c5:b4:84:3d:fa:35:21:
70:75:3c:74:54:f6:7f:a0:dc:a6:f7:e7:ba:8d:c9:71:49:a2:
02:7b:66:ed:7f:8e:35:31:09:24:86:3e:02:a8:d3:c7:ff:99:
57:80:d5:6e:38:2d:33:99:3a:88:42:9e:a5:b8:1c:0f:1c:22:
1b:a4:08:81:6f:54:d8:2d:42:1b:6b:2f:4b:28:99:96:71:46:
82:fd:51:38:f6:42:d7:49:5f:87:d6:2f:ca:3a:ee:dd:90:4b:
a6:d2:ff:1d:69:fb:c4:f2:4d:46:5b:1c:37:3e:97:da:b0:32:
61:ce:bd:85:d1:02:20:9b:88:86:da:b2:94:66:00:6f:a8:65:
52:9a:a2:be:3a:4e:a4:ed:3c:cb:bb:48:08:30:74:3d:7e:aa:
9d:5a:2b:8d:7a:ac:25:74:7b:2c:6d:b6:a2:be:37:28:bc:03:
e9:f1:26:89:28:2f:fc:3b:58:d5:b4:5b:46:6a:73:1a:e5:6b:
64:09:af:51:59:b8:0e:b3:f4:1b:0c:70:d1:d9:f7:3d:a1:ce:
d3:4d:52:5a:91:b6:c2:e8:ec:b2:52:9e:ab:45:02:5f:5d:98:
42:77:7c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:49:08 2025 by rpki-client