Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
File: f_sBFcSs3dG0rcQHN4Byas_AGvk.mft (raw, json)
Hash identifier: b5Swb+MW2NTJhSPA+WVKLMVlqFOhjaFneF/dRV5xlhM=
Subject key identifier: A3:06:35:CC:D9:B4:EF:2D:57:C3:7C:3B:E0:5F:99:5A:43:24:86:57
Authority key identifier: 7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
Certificate issuer: /CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Certificate serial: 01976BBCBC92A23FB5454122D1CA7249BCD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
Manifest number: 0A97
Signing time: Sat 14 Jun 2025 00:00:20 +0000
Manifest this update: Sat 14 Jun 2025 00:00:20 +0000
Manifest next update: Sun 15 Jun 2025 00:00:20 +0000
Files and hashes: 1: PYkAjVi-cL8YN88rzZYetquYlEI.roa (hash: Bkzz/gNbGNuCgszV6UDZARXya+u9kc2E711f4IbffiA=)
2: f_sBFcSs3dG0rcQHN4Byas_AGvk.crl (hash: VBFgGipvT6nJvyNvTqQe3lXhmjGEcORc//svzegNmSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:bc:92:a2:3f:b5:45:41:22:d1:ca:72:49:bc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Validity
Not Before: Jun 14 00:00:20 2025 GMT
Not After : Jun 15 00:00:20 2025 GMT
Subject: CN=a30635ccd9b4ef2d57c37c3be05f995a43248657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fa:88:e9:8b:95:68:09:96:64:f8:37:8c:42:
b9:93:a0:a3:d2:1e:5c:3e:7c:15:0d:a1:0f:4a:56:
4d:53:57:d6:83:b1:b7:70:94:77:0d:a1:ba:e7:e7:
7b:ee:31:44:e5:9a:26:3d:3e:28:b9:f8:e2:bd:1b:
6b:70:34:7a:7d:db:e8:cb:d7:ce:83:10:44:94:f6:
d6:0e:79:1a:33:36:dc:f5:b5:2d:6d:7d:4a:10:25:
57:c2:b3:10:ad:03:08:f7:e9:31:33:1a:f4:de:f4:
f7:9b:1b:9c:c5:46:c9:b2:2e:af:fd:33:aa:2a:d2:
20:5f:a4:58:6d:8e:96:ce:81:c3:23:7c:a4:c0:6b:
38:61:21:e2:cf:b3:d9:1a:cc:49:1f:9e:95:b5:b5:
95:9b:81:84:d5:9b:8d:48:7d:0c:17:fd:f9:bf:c1:
65:8b:bd:f1:a0:d9:df:8b:4d:2c:94:d3:0f:bb:a8:
61:7a:a7:5d:35:53:da:40:d5:a2:25:70:f0:93:3c:
0d:56:04:a3:83:4f:b8:c2:9f:e0:4f:f3:00:21:eb:
b0:11:7a:20:ff:fa:45:cd:00:18:26:38:49:b4:0e:
d7:b2:fe:f3:ca:55:90:10:cb:fc:59:5a:eb:5d:12:
7c:92:03:54:f1:ff:02:2d:ba:1b:90:aa:c7:cc:32:
5c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:06:35:CC:D9:B4:EF:2D:57:C3:7C:3B:E0:5F:99:5A:43:24:86:57
X509v3 Authority Key Identifier:
keyid:7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:32:2a:8f:f0:ff:bb:a4:46:9c:22:04:35:8a:7e:a9:69:33:
0b:e7:1c:f8:b1:10:a1:e6:bc:61:82:4d:84:1e:ed:13:c8:40:
1b:00:28:ff:1e:0f:12:65:3b:40:58:32:61:94:e9:fc:5e:fd:
df:66:fa:79:7e:96:1b:2d:ec:50:ff:e6:3a:ca:ce:df:99:ce:
ca:02:5c:52:7c:36:d9:4a:59:f0:79:01:6d:a9:7e:5c:48:2b:
ba:93:5c:9e:ae:21:f3:2c:2a:b6:9b:59:1a:16:40:1d:5d:ff:
be:8f:72:f9:96:7f:43:1d:d9:fc:6c:db:52:e5:e8:12:75:d5:
e1:94:4d:81:8c:f4:2b:32:81:55:56:ba:13:22:48:5f:14:89:
0b:a8:ff:c7:52:48:b4:d9:3b:67:16:a2:43:0e:9f:6d:a8:59:
68:a0:65:ef:72:55:bc:67:71:e1:83:fa:c4:cf:e3:e2:92:d8:
92:ab:ae:39:54:2d:83:d5:bb:46:fa:93:da:c7:fa:67:c4:b5:
bc:a6:ee:2c:f1:fd:c7:7e:92:d2:c6:15:63:ae:b6:22:fa:20:
e7:b7:3b:d4:e9:3d:5b:81:68:25:24:33:cf:90:79:de:38:d7:
71:a4:79:96:83:db:10:21:1b:f4:f1:ce:b8:74:6e:ca:66:00:
da:a0:ac:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:24:57 2025 by rpki-client