Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier: sfHP5c+112VlhBTGKicqtyvigdETOrgAVBzkvJV4QQo=
Subject key identifier: FB:CD:61:06:78:54:A6:EB:D9:72:A5:E2:B9:09:C9:68:B2:59:65:FA
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 0197816909B677AD6EA37A636C923A7696B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number: 152B
Signing time: Wed 18 Jun 2025 05:00:33 +0000
Manifest this update: Wed 18 Jun 2025 05:00:33 +0000
Manifest next update: Thu 19 Jun 2025 05:00:33 +0000
Files and hashes: 1: 9dTi4wdiI3Tu8z52gakpEQiMUok.roa (hash: 4zYsVsn8fJnXPhGX6xQByXU2W5bf/FC7mJXJpk5+gzY=)
2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: zuQOxR+ARm0N44zLpFoSI+NqYTURQsYx3bVWEcsKGIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:69:09:b6:77:ad:6e:a3:7a:63:6c:92:3a:76:96:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: Jun 18 05:00:33 2025 GMT
Not After : Jun 19 05:00:33 2025 GMT
Subject: CN=fbcd61067854a6ebd972a5e2b909c968b25965fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:96:c1:16:ff:3b:c8:31:8b:62:d9:1d:de:
96:c6:7a:81:78:34:52:7e:c7:2f:26:c3:7c:4e:d9:
16:53:c2:51:cf:50:c7:d4:89:36:f6:d1:36:63:16:
57:4f:f4:a9:3d:f4:82:f7:14:3e:75:04:35:33:19:
64:cf:37:78:f1:d0:3e:9d:2b:21:40:8f:37:17:ee:
e1:69:3c:d0:d6:5a:89:15:71:fb:ca:b9:db:f4:fe:
50:24:f3:24:56:e3:17:37:f4:7d:14:ce:70:dc:49:
70:d7:39:85:fa:26:dc:5f:85:ef:77:5e:2c:6f:e7:
c1:98:f6:06:44:25:a7:81:0b:30:35:8e:72:78:f0:
44:a9:64:dc:77:36:70:e5:9e:d2:79:3f:ac:c2:a2:
fa:5c:0c:d4:ba:3f:67:b3:3a:6e:78:4e:49:26:db:
87:2d:ee:3e:13:4e:18:6b:e6:c6:3c:47:4e:e9:e3:
11:f2:97:87:63:3a:c2:e1:5d:79:c9:52:82:2a:d8:
45:32:aa:f6:ff:ec:97:56:c7:77:31:21:89:9d:ca:
08:df:7d:da:5b:9a:2e:b2:22:99:c5:43:ee:3c:9b:
b6:2f:5f:7d:6f:84:f1:b9:cc:8a:fc:b5:37:88:e3:
7d:d2:f7:01:f6:19:83:8b:90:96:8a:4c:fc:0c:7b:
e9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CD:61:06:78:54:A6:EB:D9:72:A5:E2:B9:09:C9:68:B2:59:65:FA
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:e0:15:1b:27:76:37:05:d7:35:8c:4a:a3:55:96:fd:ee:1f:
25:74:26:b9:c5:3f:4e:aa:0f:61:14:34:b4:af:28:df:1a:64:
54:75:12:31:da:ff:5f:cb:a4:06:61:c2:47:5d:62:eb:f2:e6:
5f:c9:52:4f:53:41:79:b0:49:7e:5a:88:2c:6f:49:3c:f7:89:
7c:fa:59:35:d2:cb:55:37:da:da:8f:1c:1e:51:91:c5:c1:e7:
42:c5:aa:84:5e:4f:bd:bb:8f:5a:a4:e6:b0:9b:00:9e:e3:83:
4a:6b:d3:4a:46:8a:f2:dc:be:62:d3:b8:19:bd:df:2b:09:bb:
da:75:70:bd:68:6f:ba:e6:ab:e1:58:1a:06:26:c1:b6:29:36:
bc:a7:2d:e1:96:1b:75:8b:d0:36:07:57:11:cd:de:8c:9a:18:
52:4b:75:2a:fc:ce:2e:b5:d0:3f:d0:04:43:f8:a1:cc:78:71:
f0:ee:6d:cb:99:4a:3e:25:f4:23:a3:4a:c8:69:3e:5a:aa:0d:
69:2f:fd:0f:64:fa:65:c6:d4:f7:ab:42:cf:1c:63:bf:4e:63:
27:8b:09:50:62:55:5d:8a:fa:e5:10:e1:a9:92:f8:fb:29:47:
38:eb:aa:b4:bf:d6:d8:bf:6c:f3:8a:21:77:62:1a:cc:ae:4d:
2a:0a:d3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 14:33:55 2025 by rpki-client