Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json)
Hash identifier: s4p3H3s2TJE2VpB9HfIEFFozf0JtYYYKXKDWBlU8rPw=
Subject key identifier: E5:26:B5:88:C1:BC:04:01:49:63:8A:47:E4:3C:3E:9B:9E:45:17:D3
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 01977075BC97561C8D4F5A94C8506D664743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
Manifest number: 0FB8
Signing time: Sat 14 Jun 2025 22:00:53 +0000
Manifest this update: Sat 14 Jun 2025 22:00:53 +0000
Manifest next update: Sun 15 Jun 2025 22:00:53 +0000
Files and hashes: 1: f-4yu6sDyBHuoUp0ijzfgQJpE8U.roa (hash: I5XhYKmiwTTC0KZ/h+71MELDdEucvcsXapf63tq8JL0=)
2: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: zCBe+oOlmvW8D5qgSEP5yycwXxjKUi5j7XTda8glq5E=)
3: xNMYEYWeSRysGA1egNd5UYXQ2iE.roa (hash: mNuWxiNJNgSqM1Q6Fj113QLftCPa1zUr2fYNqR8cc3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:bc:97:56:1c:8d:4f:5a:94:c8:50:6d:66:47:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Jun 14 22:00:53 2025 GMT
Not After : Jun 15 22:00:53 2025 GMT
Subject: CN=e526b588c1bc040149638a47e43c3e9b9e4517d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:a8:34:ca:6a:70:f8:49:a9:c5:9e:9b:44:
3b:82:f0:8e:cc:1f:c6:22:65:f6:dd:2e:c3:25:92:
41:fd:c6:bb:6f:de:7d:44:e6:54:72:38:f9:ae:15:
2f:58:71:eb:19:c9:c6:81:49:0e:44:71:4d:44:45:
b1:9b:62:9e:12:33:88:2c:ec:fa:fd:c5:1e:1c:d4:
58:55:80:bd:fa:01:62:4c:ea:33:da:da:33:cb:d2:
f0:32:c3:30:aa:0e:c8:69:49:6e:59:5d:ec:ae:98:
73:b9:b8:65:58:9a:ee:ba:b4:26:d7:cd:4c:4c:2b:
b7:05:fc:68:a4:ad:43:43:94:2e:9b:d5:18:cc:f5:
1d:7d:55:c5:46:31:61:a1:f7:8f:6b:34:3d:ee:68:
bd:b3:da:3d:cc:56:c4:eb:f5:21:7b:4f:11:e5:21:
69:72:eb:84:e3:e1:c7:f8:a3:11:e6:6f:9e:32:8c:
de:e9:fb:da:7f:68:1e:d3:10:ff:86:2c:3f:53:9c:
d6:3a:b5:bb:20:12:f6:ea:01:49:aa:94:6b:5a:3c:
d7:48:71:fa:76:e3:01:dd:97:41:0a:ed:ee:72:05:
b1:da:f1:30:13:f7:a6:27:3b:37:52:21:20:ab:12:
40:b2:04:46:6f:ed:c9:8a:c5:59:0f:a7:7c:4e:bb:
02:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:26:B5:88:C1:BC:04:01:49:63:8A:47:E4:3C:3E:9B:9E:45:17:D3
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:fb:ed:5b:ce:c7:d6:d5:99:15:77:08:f5:b6:3b:f7:42:73:
89:c9:be:b9:fb:ec:34:1d:bb:af:58:5c:dc:4e:2e:95:0d:91:
54:91:c6:85:2c:55:17:84:84:62:58:55:84:11:71:5f:08:d1:
b6:00:d6:a1:f3:83:fc:d4:00:7b:0a:a8:0c:00:21:4b:1f:06:
ff:19:0f:e2:35:1c:b7:24:5c:fb:60:55:66:a1:77:4c:11:7d:
c6:54:b9:eb:56:0a:db:0e:36:d3:f3:9a:b6:4a:de:c2:45:40:
b2:94:60:ef:a8:38:6a:9f:5a:2e:bc:dc:b5:87:fc:57:51:d8:
71:05:59:cb:09:61:e0:4a:11:84:a0:f0:5c:b4:1a:8d:f8:74:
ed:98:54:dd:04:6b:cc:34:cc:e1:9e:b7:de:59:c3:a6:fd:d5:
af:60:ed:51:fd:f7:97:b5:50:38:7b:83:f7:9d:42:ba:9c:2d:
96:6c:11:ee:cc:c0:5b:4e:1d:66:85:4e:32:0e:10:24:e3:d7:
41:f2:e0:01:4f:c8:09:a7:fa:5d:1b:14:6f:34:fa:26:51:74:
ec:19:0d:a5:db:df:6a:8a:24:34:0a:25:5a:43:51:8f:77:3f:
7e:5b:93:6d:0a:52:74:99:7a:00:0c:d0:27:0a:4d:7f:d2:0d:
69:c9:6c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:45:13 2025 by rpki-client