Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
File: fdUdwQKkl1GOFgkeZegFwkOO8ls.mft (raw, json)
Hash identifier: GCTb7CYNRXz2dM8LGYMHwLAPUdoYtF5grgG5GcdImcc=
Subject key identifier: 84:93:B6:44:32:F9:69:00:C0:2D:A2:87:49:C5:B2:24:A8:31:75:93
Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
Certificate issuer: /CN=7dd51dc102a497518e16091e65e805c2438ef25b
Certificate serial: 01976DAB5AD9913DC13CEF9CB577A7260CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
Manifest number: 06A1
Signing time: Sat 14 Jun 2025 09:00:35 +0000
Manifest this update: Sat 14 Jun 2025 09:00:35 +0000
Manifest next update: Sun 15 Jun 2025 09:00:35 +0000
Files and hashes: 1: TbMjDWj4JjSbzv98od3kf6H3oLQ.roa (hash: 6tue5GmhUL7N95x2Z4BFABU7q9BYKT3YDkCK4sofjnc=)
2: fdUdwQKkl1GOFgkeZegFwkOO8ls.crl (hash: XrC6jov5/AzASWsJC19VcscqfWwC7BVrfwAlkd0R9w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:5a:d9:91:3d:c1:3c:ef:9c:b5:77:a7:26:0c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b
Validity
Not Before: Jun 14 09:00:35 2025 GMT
Not After : Jun 15 09:00:35 2025 GMT
Subject: CN=8493b64432f96900c02da28749c5b224a8317593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:72:78:00:09:a3:d4:ba:dd:79:6e:a3:37:9e:
84:ac:04:38:05:8b:4e:a9:87:48:b9:41:6b:23:fd:
3b:cc:1a:02:03:a5:e5:c3:36:d0:73:04:91:df:3c:
f8:71:8a:e0:7a:e2:bc:77:b0:7a:d2:65:f9:8d:2c:
c1:23:18:3f:cc:58:e9:4b:53:18:84:97:6c:c1:e0:
85:d3:78:05:bf:c6:10:69:91:78:75:ce:83:7c:47:
52:ae:45:cf:6d:0b:c4:ed:92:9a:4c:70:b5:3e:7b:
60:30:65:f8:5a:84:64:51:0c:2c:81:af:74:32:8a:
05:45:0f:87:e3:53:75:bf:3e:60:82:0d:73:73:58:
7c:95:8c:d7:b7:a9:03:95:07:fa:c4:95:d9:c6:a3:
e1:9b:ed:b9:cf:fb:09:4e:70:71:7d:76:7e:9d:78:
9f:c2:a7:d9:43:66:a6:f1:5a:f4:58:71:74:70:33:
df:6b:19:32:97:2f:27:1c:77:e5:1e:87:d9:18:c5:
37:1d:a2:fe:67:b4:ce:8f:d9:05:b7:d9:ca:bb:db:
6f:a9:c4:90:0b:b0:8e:0a:5f:ed:81:6a:da:00:e7:
02:39:92:08:dd:86:bc:bc:80:9b:53:e7:63:39:4b:
04:78:b8:73:86:07:1a:ba:ac:d1:63:e3:3e:74:19:
2f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:93:B6:44:32:F9:69:00:C0:2D:A2:87:49:C5:B2:24:A8:31:75:93
X509v3 Authority Key Identifier:
keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8f:4a:48:55:cb:44:3e:42:66:67:26:b3:71:f2:78:47:7b:
3c:fc:09:1a:2f:57:24:75:98:9f:1a:86:2c:be:6a:27:97:90:
62:1d:49:df:f4:fa:75:f2:f1:9a:46:be:83:e4:e7:1c:84:93:
b0:87:dd:17:a0:1c:d0:e9:dc:08:5c:1a:c9:64:1b:c8:32:bb:
b0:39:0d:b0:4f:6f:96:6b:5d:52:cd:b8:7a:fd:97:83:d0:be:
be:ea:8d:17:29:9e:36:b2:72:f7:2d:27:bd:40:3b:7a:fb:b9:
5a:b0:9e:47:f9:a1:22:06:ee:98:1b:21:1a:06:8a:e3:53:40:
25:da:2d:ca:50:92:60:6e:b2:f0:b3:f4:93:77:51:d5:19:7a:
4d:2f:eb:5a:bf:7a:0b:11:c4:8d:19:54:a7:d1:db:d9:86:80:
df:23:8b:c7:b3:09:de:3a:0c:ea:a3:bc:03:f1:10:1a:c7:33:
07:f5:e4:b3:bf:46:b9:9b:d8:b7:8e:13:9f:e3:df:09:83:bd:
ad:e8:2f:e6:ce:23:b8:ab:d1:1c:a5:2c:f9:3f:42:a9:f5:d7:
e1:42:ac:e3:f8:54:83:e9:af:57:6d:28:53:dc:ac:f2:68:90:
04:3b:24:65:c2:6d:e3:ee:62:ad:30:d8:f2:39:91:66:91:3c:
da:c4:d5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:16:40 2025 by rpki-client