Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
File: fQL6LFuiiSBF581Qpa39VNbbuMI.mft (raw, json)
Hash identifier: p+xKoHdJlC8I49XKfZyjgjtjQL4f0bu44raGylR8J4U=
Subject key identifier: 98:2A:21:B7:38:A3:A6:52:06:BD:59:41:8E:32:4E:EA:E1:2B:7C:3C
Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
Certificate issuer: /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Certificate serial: 019777C1992BAF94E26C50BCE0024671BF99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
Manifest number: 1472
Signing time: Mon 16 Jun 2025 08:01:05 +0000
Manifest this update: Mon 16 Jun 2025 08:01:05 +0000
Manifest next update: Tue 17 Jun 2025 08:01:05 +0000
Files and hashes: 1: D0FtQbvZQzXxktB27DUgaEKlwyA.roa (hash: TJTUE8/n7jdIuoCoqw/ggE/DDwa5ne0vVYVe1eoGnag=)
2: RNOXkvXJ_ycI8OmwcuHSmaLAtH4.roa (hash: LUqOAenIf0vYCqR2aBBDyfZ5SWi7hY4GyrNgtlhdeZw=)
3: fQL6LFuiiSBF581Qpa39VNbbuMI.crl (hash: UvF4op+eIJ+kTT698bXOrOr3ZjH9nGSgciNTWETzoK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:99:2b:af:94:e2:6c:50:bc:e0:02:46:71:bf:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Validity
Not Before: Jun 16 08:01:05 2025 GMT
Not After : Jun 17 08:01:05 2025 GMT
Subject: CN=982a21b738a3a65206bd59418e324eeae12b7c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:64:42:4e:d2:ad:80:93:9e:1e:28:21:b5:
a2:3a:d8:dd:33:d7:36:64:a7:96:c0:4e:92:c7:4a:
d1:d3:6c:36:87:e7:17:d8:15:43:a1:83:64:89:a5:
78:45:84:59:f6:64:04:c6:18:ec:da:4d:b6:df:82:
9b:23:1f:00:5b:e5:bb:47:80:c5:2e:09:7b:1a:4e:
91:74:d2:37:9a:e3:f7:89:ed:1c:27:25:03:60:e0:
f6:c2:40:e3:5b:15:2e:34:6b:63:a2:61:ec:07:ff:
fd:5a:32:03:2d:65:08:23:4b:b4:a7:c1:27:7a:67:
23:2d:77:91:66:e5:03:1d:73:13:fe:7b:bd:77:82:
d6:8c:11:bd:5f:66:ab:f4:ca:b9:6c:e9:d6:c5:58:
24:33:28:fa:ad:e6:ab:b9:37:0d:46:52:de:08:d0:
2b:a0:19:ec:13:d5:88:1f:da:e4:93:5e:2d:43:d3:
05:a7:d1:a4:27:0d:0b:77:1f:4c:fa:cb:d2:61:60:
d7:81:a0:a0:4f:3e:41:14:9b:fc:1e:b4:ae:28:ed:
ee:3b:88:ce:75:fb:4e:f3:3c:94:68:0a:9c:1c:45:
59:1f:a7:69:18:e2:15:ee:93:b9:38:fe:ee:51:2b:
13:06:2e:fe:a9:48:52:54:11:98:af:4d:f8:53:ad:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2A:21:B7:38:A3:A6:52:06:BD:59:41:8E:32:4E:EA:E1:2B:7C:3C
X509v3 Authority Key Identifier:
keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9f:e5:5b:d4:30:74:26:40:04:db:48:f6:91:ae:3b:46:a9:
56:0f:12:89:52:46:17:cb:df:8a:bb:f1:ac:33:27:e3:58:64:
ae:25:31:60:d3:c0:50:84:1f:08:1a:b0:53:3d:7f:89:21:21:
58:f1:74:92:0c:84:2a:94:ff:0a:2c:a1:84:98:6c:59:8b:86:
cb:e5:21:91:9d:d3:53:d2:55:7c:de:b9:c3:80:ca:ee:6d:f4:
8c:57:c5:24:b0:8a:85:df:36:5c:23:dd:24:27:6a:0a:44:e0:
82:70:a5:a4:43:30:01:8c:44:0f:c8:94:92:d1:70:00:5b:fa:
df:16:e5:74:8c:dd:a2:83:06:ba:cf:a8:7c:98:6c:5b:7c:a8:
4c:c2:2c:74:35:27:45:9d:3c:b1:7b:80:dc:ea:dc:be:03:d6:
7b:a9:a3:be:88:0a:7f:0b:c2:45:8a:d9:2a:16:40:66:84:39:
3e:3f:c5:e6:32:18:6e:65:e4:80:e6:af:81:67:7e:53:0c:40:
20:23:2e:15:fd:3f:4a:fd:4a:39:38:ea:5c:dc:bf:68:47:fe:
88:c4:66:e8:33:df:65:c9:bc:13:4b:91:47:12:d6:bd:45:b1:
78:ec:3e:1c:3e:1f:1a:66:19:54:75:fa:e1:b7:03:a1:77:53:
21:46:37:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:37:04 2025 by rpki-client