Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
File: fKBMxn75bZAi89C_xR6ttKS2PuY.mft (raw, json)
Hash identifier: OKOFm+0Ji1ZBlO8DZ05XzKgQv7xCvroC95oL3mCSito=
Subject key identifier: 7E:25:9E:C4:F0:8B:42:C2:6D:0A:69:52:4A:12:37:38:9D:27:F6:1F
Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Certificate serial: 01976C2B6A1D85C54DB7A7170B7A96FD8BDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 02:01:13 +0000
Manifest this update: Sat 14 Jun 2025 02:01:13 +0000
Manifest next update: Sun 15 Jun 2025 02:01:13 +0000
Files and hashes: 1: 4ekqJ0ShOsudm3NjqB8EzsLIznQ.roa (hash: bsmaITtT/q9ZrtwjMFlkhST+mxUMFa59Ikk72Us4Vtc=)
2: IVNXij-StlwFeQNzqAVOIR_s5UY.roa (hash: SitPl6cMloLrlgSBvA7o7zdkDMuevHChw+flrI14V8E=)
3: fKBMxn75bZAi89C_xR6ttKS2PuY.crl (hash: UMrWYtLSJ5FnAslSe3wZZZ1QYMXSRgT9XGo/n0BnWM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:6a:1d:85:c5:4d:b7:a7:17:0b:7a:96:fd:8b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Validity
Not Before: Jun 14 02:01:13 2025 GMT
Not After : Jun 15 02:01:13 2025 GMT
Subject: CN=7e259ec4f08b42c26d0a69524a1237389d27f61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:de:a7:6b:83:eb:b7:11:3e:d0:bd:b0:6b:
6f:1e:eb:c5:66:58:74:ce:ac:3e:f2:d5:ef:69:7a:
ba:20:4f:4e:75:e9:9e:53:5c:19:59:a9:76:b3:3c:
03:08:5a:76:50:6a:fa:b8:9e:cd:b0:bc:5f:79:8a:
26:60:c2:dc:2e:54:b2:c3:00:d6:dc:fe:6b:27:2d:
14:b4:6f:11:2e:60:c3:7e:bd:76:07:14:67:ed:e5:
34:e5:b4:cd:4a:a3:f6:bd:cf:54:29:76:88:4c:f0:
ce:1a:fc:b1:73:b7:0a:07:e8:9a:12:94:a5:c1:38:
7a:87:59:49:db:18:c7:df:61:5e:e0:f1:15:67:93:
61:a7:76:60:01:61:f0:9b:d4:0a:a8:b3:e2:65:0c:
bc:3e:cd:5a:4b:f9:f5:9d:75:21:d8:a6:21:92:fa:
88:74:c4:aa:bd:49:d0:3d:7b:4f:a5:f3:2b:e8:f5:
07:34:58:6d:d2:6d:eb:11:c3:45:0a:d7:71:82:ad:
5f:e5:8f:eb:d7:d4:6c:67:91:fb:45:04:9b:aa:c0:
9a:d7:89:25:4f:98:67:ca:a0:d9:fc:9a:a5:72:76:
fb:27:19:6c:f0:64:4e:6e:d0:7e:6a:ab:c0:14:e3:
a7:3b:b8:3c:c7:b2:08:c9:3c:60:f4:f8:06:ab:f5:
af:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:25:9E:C4:F0:8B:42:C2:6D:0A:69:52:4A:12:37:38:9D:27:F6:1F
X509v3 Authority Key Identifier:
keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c0:8d:ef:71:cd:db:04:4e:5a:99:4b:2b:25:c6:c7:56:be:
96:6a:ea:ec:c1:58:2a:f0:53:63:93:c3:46:a5:6a:22:d1:86:
5b:83:04:42:09:20:32:b1:46:e7:5a:01:0a:c7:00:68:9b:06:
d6:d4:cc:6f:e3:99:88:f3:fe:fd:c2:39:46:0c:fb:ae:d7:ad:
1d:2f:38:66:58:76:5d:32:d5:83:fa:d4:38:04:81:f5:30:38:
d1:ba:25:86:df:6d:ed:94:6f:ba:fc:1e:fb:b1:08:54:a5:f5:
96:25:e0:57:1a:48:f3:f5:88:ad:47:c9:33:91:e5:db:c1:a7:
20:2b:eb:b8:cb:63:10:78:1b:ff:28:c1:49:f3:9e:be:b1:b4:
be:9b:73:ac:ac:fd:e8:ff:fb:2a:b9:84:48:22:51:58:17:1d:
96:fb:59:79:3c:b4:52:23:f1:2a:8e:db:fb:79:95:7a:b3:97:
eb:06:05:5d:60:22:65:7d:b5:12:f7:52:d4:bd:e3:d7:b1:92:
4f:c7:55:1e:b8:62:77:d5:85:9b:ef:f3:33:8f:fe:34:c7:c9:
c0:84:34:af:97:ef:50:93:cf:d3:57:62:72:64:6c:8f:8c:15:
14:86:fa:24:81:db:19:ab:66:d7:14:3a:e5:a5:8b:75:0d:d4:
38:9c:12:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:21:07 2025 by rpki-client