Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: 8b7xlp2dMHorApPGwDrvAWI/L9k+IJoh1DsjjQw9lfg=
Subject key identifier: EE:EC:0C:F2:49:BB:45:4F:48:04:7A:02:34:F6:05:DB:78:37:CB:8B
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 019776AEAA5FE282D75A4F6EF63C1DEAAF86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 0F4E
Signing time: Mon 16 Jun 2025 03:00:47 +0000
Manifest this update: Mon 16 Jun 2025 03:00:47 +0000
Manifest next update: Tue 17 Jun 2025 03:00:47 +0000
Files and hashes: 1: TvMim_aEtrCLLOp0ZZIFYAVC2o4.roa (hash: /xE4OxOvjCCoCUdeNOdzw/FvM+bpWmIZ3XvVFCX7TVc=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: A7qNwiKKkMUJ17qummYSOOgMWHCenMLMY3D5Rep1GYI=)
3: qi04sQ8qQVwMXdQXve2GNvg8f-0.roa (hash: fLJ+x7i0b6ZT7hHF332I64JRm3fDb0LUQmOcJ/RhLx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:ae:aa:5f:e2:82:d7:5a:4f:6e:f6:3c:1d:ea:af:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Jun 16 03:00:47 2025 GMT
Not After : Jun 17 03:00:47 2025 GMT
Subject: CN=eeec0cf249bb454f48047a0234f605db7837cb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:76:d2:ef:8c:20:ef:cf:8d:6a:37:22:51:b5:
a5:44:f3:73:ba:ad:79:2d:92:7e:3a:a8:2a:44:22:
4d:63:a7:59:f7:fa:d0:e4:d1:ab:3a:59:8d:00:8d:
72:87:56:f4:5e:54:cf:97:dc:46:5b:3b:9d:f8:b2:
ea:81:ff:f7:93:e2:a9:68:09:7b:75:b4:99:4c:06:
3c:1b:7c:a2:a5:c9:bb:3e:64:49:2e:a8:62:d7:a0:
38:55:35:d5:6b:9f:55:88:f8:b2:6c:a6:7f:9c:16:
dd:45:9e:92:18:72:08:ef:79:a7:e6:7e:5b:98:ab:
e0:09:fc:76:29:49:df:89:6e:54:8c:47:56:0e:fd:
50:ec:66:d4:9b:e5:e4:b3:21:5e:40:4f:6a:68:11:
33:bb:af:e3:68:10:56:a0:e7:aa:c3:42:7f:cc:96:
43:98:a4:70:a0:83:31:e6:8e:06:0d:a7:34:65:fc:
42:9a:d2:70:c2:9d:68:14:fa:c1:3c:9e:10:28:4d:
2c:99:c6:3e:09:22:dd:97:86:c7:0c:ab:c9:f3:e4:
6b:a2:0f:f0:03:f0:60:ac:de:a8:a7:1d:39:00:61:
fe:75:ed:c7:73:75:d5:e7:8d:17:39:53:fc:bf:79:
58:ec:7c:28:8d:72:8f:a4:60:bb:b8:3c:38:a6:45:
65:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EC:0C:F2:49:BB:45:4F:48:04:7A:02:34:F6:05:DB:78:37:CB:8B
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a0:42:69:c9:f5:cd:dd:36:30:2c:c1:25:5b:ab:80:2e:90:
1d:19:4e:97:af:82:6c:a0:dc:18:d8:93:f5:c5:9f:40:d7:46:
8f:9b:bb:39:c4:d6:fd:e8:58:ec:8b:b1:61:a2:37:c0:8f:4d:
38:9b:4d:47:8d:62:fe:d4:df:3e:f6:35:45:77:92:67:6e:aa:
fe:cd:d8:62:85:96:5e:9f:82:e5:61:b3:4e:ad:3c:a7:4e:18:
d2:ed:cd:9c:a4:fc:90:af:29:d4:3b:a3:97:54:5b:7f:27:c5:
ad:c6:12:45:96:ba:6a:0c:8d:9f:50:f0:01:c1:98:31:0d:71:
20:2e:59:81:97:b8:5d:b6:d4:5b:2f:ac:0b:f6:2c:f8:96:28:
2b:53:e2:a1:a2:61:44:0d:d1:e6:a6:47:73:8f:53:bb:fd:95:
7d:09:a1:09:98:27:ad:ab:96:fc:dd:6d:f9:1b:39:c2:cd:86:
c0:7b:bd:8c:fa:2a:fc:53:0a:04:77:7c:6c:05:a0:7a:f3:f4:
9c:8f:2b:4e:cf:dd:30:77:7b:69:12:53:54:88:7b:e1:e4:d9:
df:f3:42:eb:b4:f0:a5:5d:1d:91:98:44:13:f5:70:1e:d0:f6:
7d:e1:8c:9f:3c:03:e6:9a:b2:23:43:ad:fc:f5:2c:2e:10:e1:
47:4c:50:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:29:07 2025 by rpki-client