Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
File: rFPL63FQhLMioaFJyW4JxA7W2IM.mft (raw, json)
Hash identifier: t+0URh9yEfWxxCl1OE9MlqKWKRoSh01rVagVqMOXaG4=
Subject key identifier: A0:83:A8:58:D9:7E:95:49:0B:8F:63:47:87:4E:88:60:48:15:E0:71
Authority key identifier: AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83
Certificate issuer: /CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
Certificate serial: 0197700847A876D5607925B8055ADEFDB0E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
Manifest number: 11B7
Signing time: Sat 14 Jun 2025 20:01:20 +0000
Manifest this update: Sat 14 Jun 2025 20:01:20 +0000
Manifest next update: Sun 15 Jun 2025 20:01:20 +0000
Files and hashes: 1: Wfce3ZtHFc99tmFyN64Q-vZ2RpA.roa (hash: Y3X9Ri7kJ6o/ebs+JUXNiJ+ZA7lhHw1uv9ydtQHMGRI=)
2: rFPL63FQhLMioaFJyW4JxA7W2IM.crl (hash: pQhxgX1icE65hQSO7oshANiD6KL0+U0+wwyiNkbHbTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:08:47:a8:76:d5:60:79:25:b8:05:5a:de:fd:b0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
Validity
Not Before: Jun 14 20:01:20 2025 GMT
Not After : Jun 15 20:01:20 2025 GMT
Subject: CN=a083a858d97e95490b8f6347874e88604815e071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:03:31:4e:66:56:c6:70:3d:47:ea:a8:2e:
8a:d1:2a:f0:aa:ee:52:ee:e4:d3:13:02:a0:1c:cc:
20:18:63:f5:0b:73:38:dd:97:e7:b4:2f:0c:b6:07:
0c:13:91:96:81:fc:e7:3a:a6:09:cf:31:fc:ef:79:
4d:32:72:8a:43:5c:5a:ec:1b:7c:ac:86:96:f7:60:
64:89:85:24:a9:4d:ea:e1:9b:b4:47:64:a0:5a:59:
4f:59:f5:a7:5d:14:54:a4:e4:8f:67:4e:0c:d3:b0:
17:fe:e0:1d:d4:cd:d7:f3:cc:de:cf:5c:8a:0b:c8:
7d:60:f6:b3:e9:31:3c:32:74:0d:bd:81:0d:46:dd:
c7:b0:da:99:42:79:ab:31:a0:5e:4d:17:59:c6:0b:
67:31:a1:f3:74:7e:db:ed:6a:f7:d6:35:ac:ae:c4:
71:5d:d0:43:95:21:41:3b:3e:98:0a:0f:61:ee:92:
30:92:87:f5:d7:f2:2e:25:4e:9c:48:54:a7:73:0e:
9b:53:6e:d6:49:19:78:c1:44:f1:bb:e1:bd:2a:52:
fb:26:d8:c3:e9:bc:db:0f:0c:e5:2b:f7:7e:5e:a8:
e4:d4:08:a6:b9:34:37:6f:a5:47:aa:9a:5c:00:52:
c5:71:d3:9c:84:92:e7:8b:f6:7a:4b:5e:02:e0:f1:
c5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:83:A8:58:D9:7E:95:49:0B:8F:63:47:87:4E:88:60:48:15:E0:71
X509v3 Authority Key Identifier:
keyid:AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0f:71:f1:78:30:d1:21:a7:5d:24:eb:b5:25:24:3a:fc:f7:
d8:be:1f:29:e6:9e:f2:15:75:95:c6:e0:d2:58:a8:56:47:dc:
ae:8c:e8:fe:3d:4d:d1:26:8c:75:85:7f:2c:ba:38:93:73:ab:
f0:16:97:4d:7e:b5:cd:99:6b:99:df:fd:61:97:2d:75:f7:ef:
e6:fc:54:17:44:03:b2:df:10:aa:1d:1b:db:cc:96:82:42:bd:
1c:9a:6a:cf:72:7d:bc:bc:d3:a9:f0:d7:20:b1:9a:ac:d4:f7:
71:0e:80:12:77:fe:e8:fd:84:cf:23:74:f8:1c:2e:c3:ef:7c:
9f:46:8e:ab:8c:5d:52:b3:1f:42:e2:e1:9b:aa:cc:58:84:f9:
82:6d:22:b7:1e:00:f5:a0:33:61:5b:01:55:90:64:bc:1a:34:
e1:9c:d5:28:9d:57:78:a3:0b:f8:ff:d1:35:b4:b4:a1:52:b5:
b8:93:1a:10:d3:e3:8b:46:cc:ea:bc:d6:4c:e8:81:96:c9:e3:
bf:5b:e5:36:1d:42:08:ac:bb:ed:7f:f9:c4:30:6b:73:ea:7e:
ef:e2:9b:8f:2f:ab:01:e0:bf:d7:34:4d:fb:3f:dc:a9:b0:6c:
bf:e0:55:87:23:01:99:48:e4:a6:10:6e:87:9d:2f:bf:96:42:
d8:d7:57:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:43:37 2025 by rpki-client