Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
File: fktU39QWEHdP5_JC1904c6ZYRzs.mft (raw, json)
Hash identifier: hrClHyAxb1r6noC+x1oGLdiUenWre03b+tH96I2gDAk=
Subject key identifier: C0:E9:3A:AD:10:4B:83:CF:84:E1:A7:44:AA:30:A1:27:6F:1B:1B:38
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Certificate issuer: /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial: 01976EBDE0192A784E0C37378294608AF208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
Manifest number: 13E5
Signing time: Sat 14 Jun 2025 14:00:26 +0000
Manifest this update: Sat 14 Jun 2025 14:00:26 +0000
Manifest next update: Sun 15 Jun 2025 14:00:26 +0000
Files and hashes: 1: YRfkigtRLNkJN8VNtKbb3fRiIKs.roa (hash: CvzEdkr6eZNRd+mAapP+a07GKzLUJC/WQEw0I1mUkjI=)
2: fktU39QWEHdP5_JC1904c6ZYRzs.crl (hash: y26E0DvL8GVxrIHFddsBEKadIuGSKwarjLdkJ0DRG5I=)
3: hhzUk5P34fAewxviCp7L4orLbt4.roa (hash: anfj4g1I4XRHIljE+q3F4S8rJ8XQNKffMq+11otVUbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:e0:19:2a:78:4e:0c:37:37:82:94:60:8a:f2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Validity
Not Before: Jun 14 14:00:26 2025 GMT
Not After : Jun 15 14:00:26 2025 GMT
Subject: CN=c0e93aad104b83cf84e1a744aa30a1276f1b1b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:62:7b:12:0c:12:f8:ce:f6:c3:1b:32:2a:
38:b8:c3:a2:b1:e0:50:05:a1:4f:b1:f7:9e:64:d0:
57:28:05:58:23:52:28:9e:3f:fd:a4:71:7b:41:65:
f3:ed:1a:35:77:94:b7:72:7a:45:e0:78:a4:f1:88:
d2:46:2f:55:7c:cb:cd:3b:75:53:bf:0c:da:91:ea:
ba:65:e4:7c:82:be:3e:03:30:76:a2:f2:55:f8:94:
3f:97:ed:03:6f:3e:3a:9a:8a:91:9c:98:4c:c3:41:
20:a9:f2:e6:d7:ba:b2:bb:da:90:89:2a:48:f3:8b:
62:61:d2:63:55:c3:b0:e8:6f:a5:74:e1:b1:5b:a0:
02:5b:f1:db:f8:66:cc:b3:dc:d7:8c:45:95:1d:23:
f4:19:b3:15:93:ff:de:ff:f5:01:a7:da:2d:3b:3c:
d8:01:9f:77:09:26:a6:d4:80:96:f9:c6:7d:92:25:
ba:1f:64:d4:0b:8f:28:66:81:89:9a:a7:42:75:20:
34:df:5e:02:4a:e9:0d:8c:a1:a5:58:06:20:83:c2:
5a:8a:35:d1:20:54:d3:02:1b:98:b1:98:3a:ba:7f:
bb:72:ac:42:93:45:fa:0d:06:30:f3:21:86:e9:af:
64:c2:fe:c8:17:07:ed:11:72:c0:3f:16:e3:59:92:
36:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E9:3A:AD:10:4B:83:CF:84:E1:A7:44:AA:30:A1:27:6F:1B:1B:38
X509v3 Authority Key Identifier:
keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:5b:1a:13:f9:12:5f:a9:26:23:0f:dc:b8:1d:13:f4:f3:30:
c7:ed:20:61:6d:dc:2a:ec:57:92:7a:89:54:84:8c:d3:70:60:
95:fc:dc:eb:be:62:3c:fc:9a:53:e4:c4:64:18:6a:13:3c:a3:
c0:25:66:bc:08:c3:64:c9:db:80:9a:05:d1:5c:4f:57:72:b3:
f9:ce:a4:f3:0c:8c:f0:16:35:18:99:8a:e2:b6:1c:2a:e8:f3:
7a:b1:26:14:d3:67:01:02:6d:bf:1b:16:57:c5:2c:a2:3f:3c:
da:74:98:1b:11:b1:21:b3:85:fe:ea:b8:2a:d6:0b:d9:8b:f2:
b0:65:47:f4:d3:84:39:93:b8:aa:8f:9e:3c:27:10:9d:6e:22:
22:19:69:0c:1b:b7:cd:fd:06:d6:07:cf:9a:14:b6:4f:ad:3f:
5e:b5:2e:d3:8a:b5:d8:a4:23:1d:e0:38:5f:5e:20:44:81:4d:
31:09:f9:88:28:dd:5a:84:02:9e:74:50:af:98:a9:22:df:c6:
07:4f:fe:58:82:75:b3:0e:9e:02:85:0f:d1:28:ea:bc:e0:5b:
7e:39:ad:17:33:a5:c2:16:cb:ed:05:58:21:7f:e9:90:54:20:
ac:6f:c2:c6:64:5d:42:a8:57:3c:ce:28:81:a4:41:79:92:22:
c0:75:5e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:27:30 2025 by rpki-client