Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
File: _FfXotV2YfbDxup2NsoP8jAMFG8.mft (raw, json)
Hash identifier: XelxH6Zm66/HqPttbytSg4WFaeLyudtsJsjqDuYP5kM=
Subject key identifier: 97:AD:A8:69:B9:81:D4:73:E7:7E:93:BE:AF:94:63:A4:70:C7:13:57
Authority key identifier: FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
Certificate issuer: /CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Certificate serial: 01976A05C385DD92C4CD1FAA205B08083745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 16:00:52 +0000
Manifest this update: Fri 13 Jun 2025 16:00:52 +0000
Manifest next update: Sat 14 Jun 2025 16:00:52 +0000
Files and hashes: 1: MLpmz1Ih74d3ai6mUgS3az1JAoA.roa (hash: wPq9cbkd3gHsPqU0L1CCMHdPpNtSvMWNQxLswqIps2I=)
2: _FfXotV2YfbDxup2NsoP8jAMFG8.crl (hash: e7p1DaLZUezQ9S3KcpuxpY3ledsNVWkwBFUkabc2h+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:c3:85:dd:92:c4:cd:1f:aa:20:5b:08:08:37:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Validity
Not Before: Jun 13 16:00:52 2025 GMT
Not After : Jun 14 16:00:52 2025 GMT
Subject: CN=97ada869b981d473e77e93beaf9463a470c71357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:eb:37:fd:13:95:ed:8f:13:d2:46:5e:9e:4b:
ec:5b:47:8d:73:00:ac:43:03:08:d5:09:b0:35:0e:
d2:6a:85:68:6f:1a:d4:71:60:22:09:3b:9b:9a:89:
16:ea:49:3e:5d:88:4c:20:07:0d:93:8b:ff:d7:25:
09:ed:ce:ae:ac:80:c4:70:75:30:eb:63:73:35:07:
2c:fe:89:ab:db:e1:fc:ca:1e:96:e5:8f:c3:5b:e7:
75:7a:70:77:5a:2d:70:a5:70:c6:c3:80:eb:d8:f0:
25:3e:b7:e7:d6:14:4f:df:82:0b:11:02:46:d9:f0:
8b:3e:6c:60:10:e2:62:3b:0d:4a:4c:6e:b2:c4:12:
54:30:71:9b:73:0e:da:3c:64:f1:28:07:aa:c3:59:
88:82:fb:3c:d2:4e:56:98:b9:40:f7:a4:92:00:66:
a7:c5:bc:76:38:10:17:df:16:68:79:4f:c0:1e:38:
0c:34:5f:90:75:70:f1:28:d6:06:47:41:9a:3e:c0:
91:d8:e3:fa:56:ed:89:c7:5c:69:ea:b6:cd:2a:d3:
8e:54:84:6b:08:3b:a0:11:b5:b1:e2:c6:16:8e:44:
d3:6a:11:ab:be:18:3a:29:7f:a9:52:e7:2d:ea:07:
ab:1d:0f:37:d4:ae:a3:8d:2a:ba:8d:df:88:b0:20:
71:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AD:A8:69:B9:81:D4:73:E7:7E:93:BE:AF:94:63:A4:70:C7:13:57
X509v3 Authority Key Identifier:
keyid:FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:9a:0a:40:1e:cf:c3:53:6e:f4:47:c4:00:26:1a:7f:2e:96:
9c:14:3f:27:2a:20:a5:2d:34:88:50:3d:52:dd:11:94:3c:18:
eb:04:65:68:6d:99:91:90:fc:76:f3:5e:b7:8d:cd:0d:ed:50:
a9:0e:4a:76:2a:f2:05:51:9f:89:bf:62:a9:47:84:18:37:e3:
41:7c:0e:af:7d:d0:45:47:d9:a0:b6:c7:33:16:64:e1:d7:75:
27:66:0e:c8:3a:14:2c:d2:50:29:82:80:01:38:e3:c9:25:fa:
14:e4:35:96:50:a1:d7:55:6a:dc:af:18:9b:4c:75:bb:a5:ff:
d7:6a:28:3e:0e:77:91:78:cf:c7:68:a3:4a:33:99:e9:03:b2:
4c:30:56:7a:b5:2c:e6:8d:c4:4e:5b:af:2a:38:06:ad:a7:ba:
55:a6:66:9e:9f:b7:b7:d0:7f:9a:e2:1a:d0:0c:78:c8:d6:53:
37:f0:77:00:89:60:78:03:4e:90:77:d3:1b:bf:ed:95:42:34:
10:f4:d3:72:e0:33:aa:38:23:c0:b9:5c:d4:1e:e6:ae:1f:74:
ea:12:cf:cc:ee:0a:da:e8:17:e1:6b:be:f5:f0:4f:a3:67:53:
60:ad:b2:78:85:09:5d:36:46:9e:79:db:a2:79:cf:42:b3:b2:
88:51:12:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:49 2025 by rpki-client