Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
File: f_G4HP5quxGOl-AyW2Yur5hPL2o.mft (raw, json)
Hash identifier: 1pzVb2bO230s86gfN/eSbASIjGQ79gVN9uN6D+nNWDY=
Subject key identifier: FF:9C:F9:2D:2A:3A:6C:7A:2D:4B:3E:97:D8:F5:C3:24:CF:40:E1:C7
Authority key identifier: 7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
Certificate issuer: /CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Certificate serial: 01976E5077B87B1BEF8BEB471AC80F402A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
Manifest number: 0BFB
Signing time: Sat 14 Jun 2025 12:00:56 +0000
Manifest this update: Sat 14 Jun 2025 12:00:56 +0000
Manifest next update: Sun 15 Jun 2025 12:00:56 +0000
Files and hashes: 1: Ws0PzSlzciL_18ZyL-n7RNJX1Rc.roa (hash: Mhq4SXBV17W3XI37JWd2SZ0W3pU7Z4ZVwJBUNoboInU=)
2: cGNrX1MW3V5Pj8rPvvjXgsht_VU.roa (hash: r7fN/lwL4D0NMCG6ql+7DEym7FVBCcSQnDkJLbzAoCE=)
3: f_G4HP5quxGOl-AyW2Yur5hPL2o.crl (hash: qOcpoCGjwDlJAMSi8ApDJD1OU9VqCHMCm/XwdqXlk2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:77:b8:7b:1b:ef:8b:eb:47:1a:c8:0f:40:2a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Validity
Not Before: Jun 14 12:00:56 2025 GMT
Not After : Jun 15 12:00:56 2025 GMT
Subject: CN=ff9cf92d2a3a6c7a2d4b3e97d8f5c324cf40e1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:31:69:0a:d0:bb:90:6d:29:31:07:ef:44:d7:
64:81:a3:07:fc:df:1f:82:97:2b:c2:2d:c1:52:25:
d3:ac:3e:06:6a:9a:a3:de:ce:55:9f:91:7b:2f:21:
a2:67:7c:5a:e6:98:84:dd:12:ce:6d:7c:ef:2d:c9:
bd:36:81:e9:79:99:43:e8:66:ed:3a:96:bc:58:9b:
cb:e0:aa:c9:4c:6a:5f:ee:18:05:57:8c:7f:fd:bd:
7f:ec:43:6a:c9:6c:48:a8:78:fa:14:6f:c6:18:4f:
02:a5:ac:fc:38:8d:0c:10:4a:b6:83:f3:e9:40:e0:
ca:41:03:f5:dd:fd:ee:db:a0:33:ea:d6:19:99:f9:
5d:6f:79:12:78:16:c0:d4:08:d9:e4:e0:13:27:ba:
e6:39:7f:ac:fc:45:d5:ea:b3:20:ca:19:b5:7d:10:
04:ea:ee:22:ad:cf:5f:09:5a:94:77:65:46:45:2b:
d9:34:a8:45:80:65:df:7a:74:90:88:14:03:2a:61:
05:fe:21:66:5d:a1:4b:6c:35:78:17:ca:34:e2:6c:
6e:37:29:29:b7:dd:3f:6e:ce:00:fc:62:ab:d6:97:
1f:80:be:4c:52:b7:76:ab:b0:89:24:3f:4d:82:07:
46:fe:85:46:a4:cd:6f:3b:1b:cd:c5:ba:fa:d4:c5:
a4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9C:F9:2D:2A:3A:6C:7A:2D:4B:3E:97:D8:F5:C3:24:CF:40:E1:C7
X509v3 Authority Key Identifier:
keyid:7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:5e:15:2c:a2:f3:42:bd:5f:fa:f7:ac:46:98:71:ca:83:85:
7d:94:0e:63:f1:20:f6:21:38:34:27:18:f5:70:b4:ea:86:48:
02:eb:c4:03:dd:82:94:46:0a:b5:13:f0:cf:67:be:e9:f4:4a:
e5:01:b0:5d:69:6d:89:59:3c:e8:77:e2:14:f3:eb:21:78:56:
d0:d4:38:e9:51:95:94:cb:70:28:2e:3f:c9:6e:69:2e:eb:43:
3c:8a:45:fd:48:58:7b:62:ca:6a:fe:09:53:69:a5:c0:36:1e:
ac:ee:d6:3f:22:44:4d:1b:8c:27:a7:a2:b1:b8:f5:6b:cf:8d:
93:a0:58:16:da:7c:d5:27:66:7c:68:30:1e:2a:4e:cd:41:db:
9a:65:b1:a6:e9:47:5e:84:fc:60:4c:00:5a:5d:59:54:0e:b0:
fb:15:99:34:0a:11:dc:7c:0c:b5:e9:15:ce:71:c1:47:31:18:
9d:76:7f:8e:be:8d:a8:11:ff:60:00:23:f3:16:6c:7a:bf:1b:
d2:29:82:fd:fd:ab:c6:d0:e2:f2:43:09:ac:7b:49:80:27:c1:
ca:69:e3:e4:4c:2e:4e:20:bd:9c:e5:b5:98:95:23:1c:90:55:
80:c0:22:e8:99:bc:2e:e9:2e:1b:e0:99:1d:6a:36:62:59:04:
3e:76:10:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:50:49 2025 by rpki-client