Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
File: fSoBIksdqGSAz-y8tsUt-YEpaOg.mft (raw, json)
Hash identifier: IwE2AZt8SXseSyrW+msx2J8dtWJVdTxpyhrCbmsXsGE=
Subject key identifier: C7:30:6C:72:C5:40:F3:68:D1:C5:39:C5:5E:CF:73:B1:86:5F:B9:ED
Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
Certificate issuer: /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Certificate serial: 019776AEC4D3B35FA0FA26987B2E71CCF463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
Manifest number: 0F3D
Signing time: Mon 16 Jun 2025 03:00:54 +0000
Manifest this update: Mon 16 Jun 2025 03:00:54 +0000
Manifest next update: Tue 17 Jun 2025 03:00:54 +0000
Files and hashes: 1: 3L4Ds4lPDiLLOvZ8T2NW6fHNbRs.roa (hash: NwLfkOcBti2VO8eJgA/iflwdsDMiN5aPUXSbDozw53I=)
2: Gg8qXyeg-gil2NOkr3thvUZqwIE.roa (hash: pEcvppDB8KUs5+dwI7YABXPT/TWvmUqee92Iz6LzfZk=)
3: fSoBIksdqGSAz-y8tsUt-YEpaOg.crl (hash: 2qhkeWv3CEk2i2nP4JLmLvaoa3iCKestTeP1gB60QM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:ae:c4:d3:b3:5f:a0:fa:26:98:7b:2e:71:cc:f4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Validity
Not Before: Jun 16 03:00:54 2025 GMT
Not After : Jun 17 03:00:54 2025 GMT
Subject: CN=c7306c72c540f368d1c539c55ecf73b1865fb9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:e4:1b:e0:64:c9:46:3d:df:4f:e3:61:51:
c3:c2:b2:6a:cd:7f:01:a1:8e:38:08:b9:b5:5f:ac:
cc:04:74:85:7b:a7:5f:85:f9:39:7c:f9:b6:c4:b9:
a7:82:70:91:0a:fb:83:65:36:1c:b0:be:c3:0a:45:
b2:b6:94:50:5d:19:47:6a:dd:e5:e4:13:31:9d:7d:
d0:be:74:7b:e3:a9:70:8f:96:63:45:17:c8:5e:85:
de:4c:53:2e:5c:79:62:11:e8:35:12:0a:e0:b6:28:
7a:ab:93:9e:18:13:4a:43:1b:88:d1:ca:25:07:6b:
9b:8e:bd:0f:09:bc:7c:19:30:0c:88:ec:f5:4e:5d:
33:ea:a0:94:17:25:db:97:30:c7:40:fe:99:6a:9e:
77:92:53:a4:7f:ec:f3:8c:59:ac:06:0a:2a:bc:70:
a8:e0:d3:07:03:c2:47:c7:27:3f:bb:40:3b:4e:12:
83:52:dc:a8:91:7b:6b:3c:29:02:69:01:b5:ca:f9:
0d:45:74:3f:69:32:41:8f:38:21:7f:7e:64:f4:07:
52:eb:19:3e:28:39:52:e0:3b:37:4f:59:b2:de:2b:
b5:6a:89:69:61:ee:f1:74:1d:c2:3a:56:6f:0c:94:
be:49:d4:60:6f:76:74:01:91:eb:ac:10:f3:35:6e:
7f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:30:6C:72:C5:40:F3:68:D1:C5:39:C5:5E:CF:73:B1:86:5F:B9:ED
X509v3 Authority Key Identifier:
keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c7:53:50:a7:d0:2e:a5:f8:36:ba:ac:e7:31:76:0b:fb:45:
01:34:50:e2:9c:de:65:0e:57:e4:36:0b:10:f9:d9:7e:2f:4f:
2e:4a:40:7f:fe:be:ef:85:1c:3b:73:48:97:e4:80:87:d2:7a:
e7:56:6f:29:74:3e:82:1b:a3:ce:98:ff:70:01:91:25:3c:2b:
27:63:45:8c:51:35:7d:e0:3f:60:2b:f5:e7:af:4e:ec:a5:58:
02:3c:1e:99:7a:d2:ca:b0:ac:3f:7f:a3:44:87:f1:c0:a0:fa:
b8:0a:27:01:94:83:c3:5b:2e:5b:1e:51:31:6f:ef:78:40:e2:
15:c4:9f:2b:b7:1c:51:14:ef:53:f8:ff:1f:fa:74:c3:df:55:
31:9b:ac:90:2a:d5:e6:f7:59:54:29:de:a1:32:28:17:b1:f5:
be:f1:8e:49:14:0f:b7:e6:52:a2:60:73:12:1b:64:07:9e:ec:
67:26:55:36:6b:53:30:e0:96:2e:13:91:c1:6c:d4:74:cc:8d:
c2:06:d5:a7:4f:1b:98:b9:13:43:7b:8c:91:76:93:a4:cc:59:
d4:b0:e2:4f:e7:48:92:97:d8:ae:e4:c4:39:bd:fd:72:7c:97:
89:39:03:01:48:f1:79:52:08:4c:d1:7c:71:8c:85:e2:1b:0b:
1d:b1:56:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:29:11 2025 by rpki-client