
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
File: c-FXspGMrcqKWp-8Zul3YIpt9eE.mft (raw, json)
Hash identifier: epMWoUs0Sf5l8RstQBdyyjfk5AnQqB9pFEZ4Jtf0ih0=
Subject key identifier: 04:DC:03:F2:39:39:2C:C7:37:C4:39:AC:6A:A6:EF:D5:CB:3C:CF:9A
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Certificate issuer: /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial: 01976FD0F724256E171D1E15081164C1C9CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
Manifest number: 1599
Signing time: Sat 14 Jun 2025 19:00:55 +0000
Manifest this update: Sat 14 Jun 2025 19:00:55 +0000
Manifest next update: Sun 15 Jun 2025 19:00:55 +0000
Files and hashes: 1: 9Vc3AbW6vlZ_1l6ygzFXdiG_9DU.roa (hash: XyjyaFRHv8L+Xv8vUnenIR3U/Eb6y+TGYMaeT4tV8mY=)
2: F8Nk--QAXVfgvDbLL_6xQcd6OeY.roa (hash: B5PNCVqEZ3htMuoUo9SXwMTUf5kV2N6tfRSmohV4ztI=)
3: c-FXspGMrcqKWp-8Zul3YIpt9eE.crl (hash: hl0Mfdup0bET0klXiw4h9uYtq4SJAUGbd6kX0Ue9kwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:f7:24:25:6e:17:1d:1e:15:08:11:64:c1:c9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Validity
Not Before: Jun 14 19:00:55 2025 GMT
Not After : Jun 15 19:00:55 2025 GMT
Subject: CN=04dc03f239392cc737c439ac6aa6efd5cb3ccf9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:80:7f:f6:e9:d1:00:1e:c2:11:b1:6c:7f:
6d:14:6b:ca:88:25:d4:bc:75:f2:bc:7e:9e:4e:e3:
33:a1:2c:da:32:a0:fb:8f:99:33:da:49:18:e5:fa:
d5:5b:3c:ee:ed:27:b4:12:3b:69:02:a6:62:ad:8f:
ac:80:7b:2b:a4:37:b7:e0:90:dc:77:9a:ed:45:7d:
37:fb:51:fb:84:04:85:35:36:93:21:58:25:97:03:
64:0b:6c:5b:de:15:f0:f7:6d:40:d0:64:88:a4:7a:
a4:6d:ea:a8:1d:2f:45:7c:f1:0b:b9:14:d3:4b:c8:
39:79:4e:1f:1f:e8:6c:c7:e0:22:6a:5f:ce:f7:f0:
64:96:42:23:90:c3:46:da:70:83:ba:3e:a3:1b:63:
09:9c:76:a3:5f:df:05:2d:2b:fa:20:02:ce:e6:e6:
dd:58:54:7f:cc:99:bc:fa:e6:31:46:10:10:70:87:
69:2c:d9:7e:8d:85:68:0f:d3:ca:24:a2:12:ec:5a:
69:54:ea:8b:a7:7e:95:29:96:3d:17:13:47:2c:7e:
51:57:ac:87:f0:cb:de:ad:81:ef:b7:36:3e:37:1b:
f2:68:db:a0:7a:d6:08:50:08:7d:0f:6f:04:b1:ee:
1d:bd:f2:02:93:6c:4f:77:5d:a8:5b:04:00:d6:48:
ad:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DC:03:F2:39:39:2C:C7:37:C4:39:AC:6A:A6:EF:D5:CB:3C:CF:9A
X509v3 Authority Key Identifier:
keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f5:41:29:5a:1b:1d:c1:b4:fc:40:46:24:44:8d:77:12:51:
43:0d:41:40:18:e6:48:e1:1f:ca:d5:b2:78:1f:ae:33:f0:83:
fe:d2:97:bd:f8:f8:5a:30:3a:c9:5f:75:47:05:c8:54:9a:c2:
b2:e6:d5:29:40:55:6c:66:77:98:15:cb:1f:ac:e9:36:b5:de:
40:3d:1e:04:4d:b3:60:66:6d:a8:7d:36:d9:2f:d6:8b:20:7d:
8c:28:9f:a2:3a:be:70:4d:2c:de:55:78:43:34:34:ff:29:b1:
87:18:e6:a4:e3:89:76:68:8d:39:6b:ec:7f:7b:a8:c3:e5:0d:
f4:00:d6:b3:d8:62:78:50:d7:cc:a8:65:fc:09:40:4c:81:bf:
72:74:a5:22:90:3b:2d:44:79:24:d5:31:10:10:57:06:49:9d:
a2:d5:22:6a:69:1d:d4:20:19:2d:6c:4a:73:d4:4c:88:37:40:
80:b8:b7:e4:02:fb:70:ac:da:d2:5d:9d:76:94:d1:08:b3:1e:
27:44:45:91:06:38:73:1f:d3:91:8d:59:e2:c2:dc:c3:6f:60:
b2:96:2a:b3:f0:5c:65:91:39:e4:fe:63:31:c2:14:7c:0b:06:
e7:a9:b9:dd:a6:d6:38:1f:08:af:c1:eb:a2:8b:ef:1f:dd:18:
4f:12:ff:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:39:03 2025 by rpki-client