Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
File: fzP8QNLgMzu8e96rK9hZlUMBwPE.mft (raw, json)
Hash identifier: IvRP8YHhV1xPBwD1Bb3dWJ/DH3W4USOHLOuaZtRIxBA=
Subject key identifier: B9:18:86:28:4B:5C:CB:74:DE:18:3C:68:56:A7:C3:8A:54:FE:52:9E
Authority key identifier: 7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
Certificate issuer: /CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Certificate serial: 0197684E651DDCC7F523D6AF4E179D624E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
Manifest number: 04D5
Signing time: Fri 13 Jun 2025 08:00:57 +0000
Manifest this update: Fri 13 Jun 2025 08:00:57 +0000
Manifest next update: Sat 14 Jun 2025 08:00:57 +0000
Files and hashes: 1: fzP8QNLgMzu8e96rK9hZlUMBwPE.crl (hash: emZ4n6VvD2btVknrk/l69kICeFHIyDu7Wlibb8oR6vU=)
2: ur3dSSpuEwtDhi5m-xYjQ9J-ZlQ.roa (hash: cwXAi1sfFPfN04wsw1nczJfstzqjCt7igbtZqfyu1Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:65:1d:dc:c7:f5:23:d6:af:4e:17:9d:62:4e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Validity
Not Before: Jun 13 08:00:57 2025 GMT
Not After : Jun 14 08:00:57 2025 GMT
Subject: CN=b91886284b5ccb74de183c6856a7c38a54fe529e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:76:36:ee:66:56:11:eb:d6:1d:9a:51:4c:
ff:ae:09:5c:38:37:6f:5a:0d:b0:bd:76:a0:e4:ea:
61:29:b3:42:bf:7f:d9:75:f8:9c:10:f7:db:7e:b4:
ee:84:af:34:76:6b:65:67:af:64:b8:40:0c:4a:fd:
5b:3e:ee:41:b2:af:57:e2:f7:29:c8:46:4f:10:ce:
cb:9b:a8:b9:1b:eb:c9:07:24:fc:82:65:4e:bd:bc:
13:86:cd:6c:29:80:93:4c:db:75:49:6e:55:f4:4b:
56:dd:d4:81:30:01:e7:f4:44:92:51:6f:c3:45:f4:
e8:b5:67:b9:3c:a0:ef:4f:5b:0f:11:e8:e8:13:86:
3c:fc:a4:a8:1a:5f:7f:12:26:a5:35:66:43:63:93:
2d:99:08:ed:09:c9:1e:ca:17:bc:3f:74:c1:42:53:
70:a8:99:14:8f:6b:62:f4:06:c5:72:81:e1:87:13:
a7:b3:cf:66:f2:e4:d8:19:05:11:2b:01:84:91:b4:
f5:bd:1c:d2:0f:81:88:a8:dd:49:4e:ff:85:e9:d7:
35:c5:5c:6b:20:ae:d7:c2:45:44:6d:e1:a3:9b:e9:
df:c6:05:37:33:b2:94:2b:76:65:da:91:ac:d2:0c:
87:89:fc:ac:1f:a1:25:83:72:17:4e:7e:b7:08:38:
d8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:18:86:28:4B:5C:CB:74:DE:18:3C:68:56:A7:C3:8A:54:FE:52:9E
X509v3 Authority Key Identifier:
keyid:7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e2:af:47:89:dd:b0:d6:c7:29:43:f2:3d:ba:3f:fd:04:d2:
7c:b5:ca:72:50:1a:6a:aa:de:2e:3d:aa:26:cb:71:c3:c2:d2:
7e:3b:ab:7d:6a:8a:e5:9c:f0:73:5e:b9:fb:5b:7d:09:92:73:
83:56:6f:79:88:0e:f0:f2:66:5f:2a:67:48:cc:37:d4:e8:99:
f8:79:8b:35:6f:4b:04:5c:b2:9f:48:d5:9b:81:37:96:1a:7d:
ef:94:d7:e6:cf:ff:5c:6e:a4:19:38:c2:84:8a:81:d4:8f:e5:
4c:63:6c:fb:aa:92:b1:39:8b:bd:75:34:c7:b2:5b:c3:d6:01:
9d:c0:29:d4:bf:79:55:44:e0:11:52:47:05:d2:bb:fb:5c:0e:
61:5b:c0:8b:b9:1b:43:20:8e:df:10:bc:91:33:2c:03:cf:33:
b4:24:39:6c:55:20:76:03:bd:08:a7:5e:63:02:bc:45:4e:4e:
b3:7f:f3:61:27:24:72:e0:63:4d:21:19:64:04:ec:df:c3:37:
9e:c9:76:42:4e:39:10:1d:97:48:1b:2e:cf:4f:34:5b:d8:33:
59:24:52:58:d0:12:6c:26:0a:5a:08:5a:9c:16:98:98:29:b2:
34:9f:99:1e:81:9a:15:04:0b:23:e8:72:b5:ae:b3:c6:02:77:
10:36:b3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:33:39 2025 by rpki-client