Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
File: sFRCxP_pwddh58VpNg6tBCQ4-QM.mft (raw, json)
Hash identifier: 2oLcLehlCVQFCbgXR5rawSlHC26/EQjYWwNHaXGkMw8=
Subject key identifier: AA:02:37:7A:F3:86:0C:CF:0E:30:CD:45:C6:02:EA:2B:F9:B7:B3:D8
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Certificate issuer: /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial: 019771F5D550FAEE006B3E25BC6C66F45CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
Manifest number: 1349
Signing time: Sun 15 Jun 2025 05:00:25 +0000
Manifest this update: Sun 15 Jun 2025 05:00:25 +0000
Manifest next update: Mon 16 Jun 2025 05:00:25 +0000
Files and hashes: 1: 2eKsq5jA6VcPDqKfgIi0E91JruI.roa (hash: qGG/9s4LOddy+BisdFXc5EQ3ZhAY8xD4+uBXz/g3pwU=)
2: 8v_aiBgvpLDJT4bE3zxJWwrf4Ao.roa (hash: wcB7NvMB7REyv6Xd72Vh3AOoxDTtyyThVZ07XtgTGL0=)
3: sFRCxP_pwddh58VpNg6tBCQ4-QM.crl (hash: qkFkJCkLxD4zALQVRA62wGijOwGgyAfpH/e2A1n1NP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:d5:50:fa:ee:00:6b:3e:25:bc:6c:66:f4:5c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
Validity
Not Before: Jun 15 05:00:25 2025 GMT
Not After : Jun 16 05:00:25 2025 GMT
Subject: CN=aa02377af3860ccf0e30cd45c602ea2bf9b7b3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4c:b7:b9:81:c0:88:2f:51:67:d5:b7:01:8f:
36:87:0f:dc:48:42:ff:71:d3:ef:d9:8e:c4:8e:e2:
6d:a5:3b:49:16:d4:64:e3:19:34:99:9c:83:bc:97:
7a:ee:3d:ae:d1:75:74:e5:a6:26:04:20:f5:bd:e8:
c8:38:06:25:0e:c2:cb:3e:14:ce:a5:59:0a:0e:15:
b1:02:ef:4c:15:70:d7:e0:98:b4:f6:52:8c:32:4c:
6a:e7:45:4a:8d:e6:d8:eb:d0:32:f6:a9:ae:ff:a8:
f6:3f:1b:eb:f0:2b:f6:39:84:61:5c:a2:b5:1f:a9:
7b:e1:eb:c8:9a:bb:5d:fc:19:53:83:28:38:09:20:
af:e7:fa:c2:66:cc:26:25:67:0d:24:8f:75:92:39:
66:7b:80:16:a6:f1:d5:dd:e6:c0:f4:71:58:be:c7:
3e:a7:94:f9:e4:96:62:90:17:12:99:4c:43:44:12:
69:99:4c:4d:92:21:b7:fc:9e:91:69:af:84:ce:84:
ba:7d:8b:be:96:92:e7:4b:2d:a4:3e:1d:0a:9e:00:
7a:ef:56:78:42:62:83:27:6f:7f:1e:89:bf:bb:2c:
a6:bf:6a:2a:bf:61:44:99:23:dd:8e:91:8d:e1:6e:
52:05:2e:81:38:18:b8:5e:9a:14:5a:5b:7a:4d:4c:
4f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:02:37:7A:F3:86:0C:CF:0E:30:CD:45:C6:02:EA:2B:F9:B7:B3:D8
X509v3 Authority Key Identifier:
keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2d:ae:da:dc:60:6b:74:cf:92:03:9d:6c:4e:b3:bc:73:20:
b3:aa:78:49:ee:4d:f4:2b:73:2d:e7:5f:96:28:1f:43:f5:39:
37:ca:41:25:a5:c9:8c:5d:9d:c5:62:f8:65:75:3d:9f:2a:9c:
49:66:a6:78:fa:e3:d4:f2:db:0a:60:7b:0b:39:2f:9f:05:fd:
0d:fd:24:60:41:20:5d:ea:22:70:b2:aa:e0:13:ce:33:67:05:
0e:8c:57:26:62:d9:94:c5:fd:b0:97:79:e8:a6:e6:a1:05:55:
c0:ce:2d:76:91:89:c2:d9:80:53:e2:72:bb:ec:7f:83:f4:b8:
72:78:1f:6e:6e:62:c9:63:19:09:f5:e1:e0:e1:ab:22:ac:c2:
67:ba:b6:ed:78:74:cf:6e:2e:d4:25:f6:30:fc:36:0c:51:d3:
16:b1:cf:b0:d2:ee:b8:3d:d4:58:67:15:26:8c:7c:e9:41:8f:
e0:f3:f0:81:ec:86:6a:9b:44:4d:4e:ce:0a:94:82:52:d1:87:
5b:47:99:c3:3d:35:7d:8b:0b:36:8d:da:84:ce:cb:bb:1a:59:
da:1b:fe:90:d8:fc:df:b5:2c:e1:d0:96:db:b2:c4:bf:1f:e3:
e4:66:6c:e9:88:ed:46:74:08:e4:92:a2:46:c4:02:ca:9a:77:
38:7d:9d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:24:07 2025 by rpki-client