Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
File: F0ATLlBfeLrQES-RtVmGh5U1ysA.mft (raw, json)
Hash identifier: lxE/qd3VdV+5h0qulvZXqIEm8hMorlBncRtk0QCN8+4=
Subject key identifier: D5:8F:D5:BE:93:C0:17:64:6A:59:47:6A:7A:75:92:64:07:70:65:C6
Authority key identifier: 17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
Certificate issuer: /CN=1740132e505f78bad0112f91b55986879535cac0
Certificate serial: 0197718839224296DD793172BA2DE573FB4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
Manifest number: 0A3F
Signing time: Sun 15 Jun 2025 03:00:42 +0000
Manifest this update: Sun 15 Jun 2025 03:00:42 +0000
Manifest next update: Mon 16 Jun 2025 03:00:42 +0000
Files and hashes: 1: F0ATLlBfeLrQES-RtVmGh5U1ysA.crl (hash: yL0crRihWUxcw9QIFl/enObXhaV7Tkl2RWM80dyhNFc=)
2: oxrkuug8AeqnDXiePFRxFStRfUU.roa (hash: 162L3/TFgaGzm3cQaHpx46n6luZunWT9NHyefRNQMS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:39:22:42:96:dd:79:31:72:ba:2d:e5:73:fb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1740132e505f78bad0112f91b55986879535cac0
Validity
Not Before: Jun 15 03:00:42 2025 GMT
Not After : Jun 16 03:00:42 2025 GMT
Subject: CN=d58fd5be93c017646a59476a7a759264077065c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:da:8f:87:11:1b:a2:a5:f8:7e:62:42:be:
f0:45:15:f1:52:d7:f0:01:b2:31:e1:89:ee:23:50:
ca:80:0f:39:62:3e:ea:bf:3c:8a:2f:f9:3a:82:e4:
f1:cb:18:c9:ab:d6:51:9a:38:2c:43:21:5d:ee:40:
e6:b6:9d:76:ed:e2:73:27:4d:d8:60:52:2e:95:a2:
36:8f:2d:f8:70:9b:e0:55:f9:78:93:33:7e:21:91:
99:2d:9c:26:f9:39:ec:03:aa:24:c9:08:76:ed:29:
a3:ed:c1:90:9f:80:bf:9a:bc:90:ce:2b:14:a2:8d:
7f:7b:c0:c3:80:65:97:27:32:19:f1:4a:a0:71:74:
01:64:79:d5:3f:06:87:de:40:5d:d9:4d:c2:6a:e1:
d5:1c:87:20:fc:0a:dc:cd:bc:35:b9:6b:13:67:e1:
f3:59:ba:d0:49:58:9b:a5:53:87:46:30:ba:7c:7d:
93:24:3c:60:75:32:36:f8:8b:1b:32:a1:30:57:c1:
62:9a:fe:04:d8:7e:92:ed:ea:b6:b0:a5:da:19:95:
e2:b3:e8:e2:bf:51:37:c0:9f:86:08:bc:64:0b:2f:
b6:c5:00:ee:2f:7f:db:5b:ca:83:b9:df:83:4e:94:
cb:f0:75:ce:e1:84:d4:89:7e:ff:c8:9e:40:2d:a7:
5a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8F:D5:BE:93:C0:17:64:6A:59:47:6A:7A:75:92:64:07:70:65:C6
X509v3 Authority Key Identifier:
keyid:17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:17:76:56:f4:9e:69:f7:29:98:4e:91:e2:1a:35:d4:71:7f:
9b:73:9f:01:a5:14:12:8f:8a:55:81:cc:41:cc:57:40:3f:c8:
f4:5c:17:94:26:fe:4f:b2:24:56:f7:0a:c4:19:08:b0:b1:04:
e0:12:00:46:49:cf:c9:b6:11:6d:06:0b:42:20:42:26:fb:e6:
44:13:8b:cd:c7:6b:fe:68:d2:17:fb:0b:f0:c3:5d:fa:8d:30:
84:6f:f2:0e:06:d4:90:a5:1d:77:10:8d:fa:1b:0b:c3:0a:c5:
af:c5:ab:3a:43:73:45:22:6f:57:f3:84:74:34:98:2a:16:15:
4f:86:c5:dd:2e:a8:ec:92:9d:9a:8a:9f:1a:1f:ac:7b:3d:59:
c9:1f:99:8d:eb:4f:41:cd:a5:36:e7:d7:c6:e0:33:c1:12:78:
d9:e9:23:1b:77:85:38:c8:2c:f7:6b:00:3c:bc:16:87:6c:91:
7d:aa:a5:f5:29:0b:cb:2f:b6:78:70:dc:73:be:5a:39:b0:42:
3d:5e:d9:92:5c:7d:db:5f:16:48:04:8c:66:35:db:95:98:2b:
b2:38:1a:6e:97:6a:e8:c3:37:47:4a:f0:98:ae:64:ab:36:6d:
7a:3b:2e:0d:20:da:31:bc:54:6e:9d:24:c9:56:ac:a7:55:a5:
49:fa:eb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:41:24 2025 by rpki-client