Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
File: fvh727KV4chetLDjVmFTwiGEX4E.mft (raw, json)
Hash identifier: ennpou6km23biCr6MjLm+gh0vgjpo7KAlFS792GL17E=
Subject key identifier: 6D:25:6D:CD:3B:53:B4:8B:69:D9:FA:EF:76:EC:F2:B5:05:02:84:48
Authority key identifier: 7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81
Certificate issuer: /CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
Certificate serial: 019771F5B8864BD8D57E5FCC8C409A5CE5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
Manifest number: D9
Signing time: Sun 15 Jun 2025 05:00:18 +0000
Manifest this update: Sun 15 Jun 2025 05:00:18 +0000
Manifest next update: Mon 16 Jun 2025 05:00:18 +0000
Files and hashes: 1: XEatfg0Tk9Kl1lViBPnIbXw5FzE.roa (hash: G4U5UCTvd/mqwuDmGGvlZs+iLYiclpaGMY0aTsyHcfE=)
2: fvh727KV4chetLDjVmFTwiGEX4E.crl (hash: OSlbuMXma8oeL6sPrTcQu7HDu5UVBZfv4mOCwSHo1TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:b8:86:4b:d8:d5:7e:5f:cc:8c:40:9a:5c:e5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
Validity
Not Before: Jun 15 05:00:18 2025 GMT
Not After : Jun 16 05:00:18 2025 GMT
Subject: CN=6d256dcd3b53b48b69d9faef76ecf2b505028448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:a1:3c:1a:c2:df:d6:5b:64:83:6e:52:aa:
57:2a:cf:98:a9:7d:e6:61:c3:d1:40:36:af:78:b1:
62:43:7d:ca:17:f4:55:52:83:ee:8f:c7:89:ee:08:
ae:0f:24:83:b8:68:5a:4b:61:27:0d:fd:49:8f:fe:
73:15:a2:60:62:d6:0d:57:8d:01:32:f4:ff:89:0a:
b1:94:0f:dd:28:7a:61:22:dd:57:ba:41:39:06:41:
f7:8e:ac:b8:8f:c1:eb:71:a5:97:3f:6f:4c:50:6e:
ca:f4:4b:17:5c:c5:21:a8:56:14:e0:c1:86:86:0a:
98:0b:90:2b:2c:10:fa:75:84:bb:96:1e:ac:9b:f6:
cf:f4:17:94:a8:9c:ac:04:fa:a7:3d:51:41:a7:9e:
45:00:78:7f:42:6b:0b:6d:0c:ad:90:2c:b4:f0:1a:
40:6c:d0:15:2d:8a:52:40:f3:eb:65:66:4d:22:07:
cf:55:f6:e7:c7:7d:45:b5:04:aa:0a:dc:a8:ae:88:
d5:81:09:92:3a:cc:65:82:99:f2:ba:ad:9a:50:4e:
fb:e1:94:01:e6:96:30:cc:65:7b:a7:5e:c5:bf:17:
12:15:90:4a:2e:a5:07:33:5e:47:c7:b5:f8:c9:3d:
21:38:61:be:a3:60:83:a9:be:67:c1:87:34:ce:2c:
4b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:25:6D:CD:3B:53:B4:8B:69:D9:FA:EF:76:EC:F2:B5:05:02:84:48
X509v3 Authority Key Identifier:
keyid:7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ec:00:8a:bd:39:98:73:67:a6:61:2a:20:92:0d:34:1d:fc:
8e:28:ee:44:65:c2:df:e8:d9:8b:58:83:08:ea:d8:8f:5a:30:
31:8d:45:0a:21:48:6d:2d:0c:a8:86:24:98:ad:8d:c8:7c:b0:
1b:d0:5e:18:ee:22:9d:c3:a4:e0:f4:b8:75:72:89:ae:a8:26:
2d:23:28:4c:86:cc:33:af:98:04:19:c5:55:3c:6c:31:52:62:
93:09:93:7e:7a:f4:1d:fc:9a:54:c4:47:a1:70:f6:c4:22:2c:
67:eb:3d:0c:5d:0e:f0:ea:18:99:54:c8:39:35:a4:ec:fc:e1:
ce:5b:d4:c4:ac:de:b1:07:37:7f:18:c9:c1:09:bb:62:02:21:
76:b5:16:a7:d3:90:73:15:1c:a7:31:9d:e9:1b:83:4f:ee:5d:
59:b6:91:a7:2d:aa:e7:5b:57:39:2f:3e:d5:51:ae:e1:c2:5d:
b2:8e:91:9e:9d:9d:5f:5e:ba:eb:91:6f:d5:d6:46:d3:36:9f:
94:db:20:ea:16:4a:6c:4c:7c:57:97:c1:d7:28:3c:d3:04:5e:
b7:47:f3:d4:d4:32:0e:b0:24:c4:b8:da:02:8d:a4:1c:7a:55:
c7:28:fd:12:b1:9e:a3:3d:88:5f:4d:f3:92:74:82:eb:95:3a:
0d:ac:4f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:02:29 2025 by rpki-client