Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
File: fZK2dHUnB1UTaoo8qALKEsisfnc.mft (raw, json)
Hash identifier: SQTwiBsFkanNl/eIaIA7wNay0IBCSSY8oy72k2ON7bU=
Subject key identifier: 43:94:3D:17:9C:1D:B3:8F:78:D1:28:0E:3B:5E:D6:55:1E:49:22:A8
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Certificate issuer: /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial: 01976997643B3A2B3EA05BB6BF8F231FF046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
Manifest number: 0CB4
Signing time: Fri 13 Jun 2025 14:00:18 +0000
Manifest this update: Fri 13 Jun 2025 14:00:18 +0000
Manifest next update: Sat 14 Jun 2025 14:00:18 +0000
Files and hashes: 1: 2CYNXB5qZHN7in7RGaGVmXvb7Xs.roa (hash: n74UAylTv760Shvrd+PI6ipCj4rV+2WaR3QnP3+8e6Y=)
2: fZK2dHUnB1UTaoo8qALKEsisfnc.crl (hash: +FsYRfWeLpZkuq/VlPO4osbhHVHygm0F1d11OmkC/cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:64:3b:3a:2b:3e:a0:5b:b6:bf:8f:23:1f:f0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Validity
Not Before: Jun 13 14:00:18 2025 GMT
Not After : Jun 14 14:00:18 2025 GMT
Subject: CN=43943d179c1db38f78d1280e3b5ed6551e4922a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:12:1f:d3:13:c1:15:70:4f:0f:f4:5a:72:
a0:a0:66:61:dc:71:c6:42:61:64:95:96:1f:20:1f:
a9:75:61:0c:05:90:c8:be:ed:6a:14:ed:a4:5c:9d:
d4:e0:2e:5d:bf:50:cd:17:8a:29:4f:ab:3a:5e:fa:
90:af:1d:eb:42:a1:53:48:43:b4:6b:83:a4:52:0e:
56:30:61:40:60:b2:b8:af:9c:16:a2:c6:85:57:26:
97:26:41:b7:70:a8:a3:af:7e:c8:0e:df:3d:76:fd:
17:3a:8f:b2:f0:b1:4d:e2:eb:ab:d6:c5:30:b9:fe:
ee:42:4f:25:c1:91:f0:c3:5b:90:0f:20:6f:8a:80:
82:e1:99:3e:1a:0b:e9:8a:62:16:4c:cd:67:aa:a9:
3d:3f:d1:39:d1:1e:0d:06:65:05:0c:d3:ab:c0:15:
d4:78:28:87:cb:8f:a9:a0:5a:de:7a:66:1a:b4:28:
fe:53:29:fd:8c:d5:ba:d1:1c:f0:d7:bb:13:bf:d3:
b5:a3:ae:19:5a:99:03:a2:6d:3b:d8:e5:83:8a:4a:
8e:fa:36:1b:4d:0e:4c:db:58:82:d2:75:4e:ce:78:
9b:48:e6:19:10:78:9f:65:d8:a2:4d:28:02:1b:3c:
75:81:b6:ac:bf:14:d7:51:04:d9:47:17:8a:17:5a:
7e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:94:3D:17:9C:1D:B3:8F:78:D1:28:0E:3B:5E:D6:55:1E:49:22:A8
X509v3 Authority Key Identifier:
keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:70:ca:8b:50:c2:48:57:3e:c9:98:33:2c:4e:d0:5d:e4:63:
35:65:e6:88:22:3a:2e:47:34:3f:b1:3c:5b:2f:b2:8f:17:f6:
a9:d2:13:20:aa:a4:64:fa:7b:a1:ba:4e:ba:f0:70:6b:3f:0a:
02:2a:c2:24:b1:75:8e:e3:70:77:61:4d:16:2a:e9:56:17:6c:
a3:ad:13:16:75:32:c4:9d:e4:40:e5:82:8a:ec:60:1e:3e:87:
7e:e3:18:fd:d3:33:79:8a:58:28:ec:80:3c:cf:90:8a:fe:95:
89:e6:55:01:13:85:04:61:fa:35:4a:8c:2f:18:47:7b:f9:fe:
6f:12:9f:08:51:f8:75:7d:9b:91:81:78:f1:16:44:0a:d5:55:
d0:84:3e:dd:7b:56:2f:5d:03:36:54:9f:46:cf:bf:85:bf:2e:
2a:b4:dc:f7:df:6f:5c:1e:34:80:f0:14:6f:28:3e:48:d7:52:
2a:a5:42:51:23:53:2c:cc:5c:b1:6b:f3:d3:3a:bd:85:d4:bc:
16:1b:9e:3f:f4:1e:87:4a:e8:37:af:d4:8d:b6:65:dc:ec:cc:
ce:8c:10:3d:7d:4b:a0:23:cd:d7:ab:32:df:33:77:66:9b:9c:
6d:b5:d3:77:b2:7a:ef:04:6e:25:a4:b7:e6:85:10:66:be:78:
e8:79:c7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:42 2025 by rpki-client