Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
File: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft (raw, json)
Hash identifier: mu37Oy/ZBtH2hUfyEFL4mfp2TOlHgvakjPnk951JbIo=
Subject key identifier: 0E:A5:AC:62:44:1D:4E:C0:DA:CD:F7:7D:DE:2A:2B:A2:0E:11:70:E2
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial: 01976C61B9B8057CC278037D68338EDBA7DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
Manifest number: 09FD
Signing time: Sat 14 Jun 2025 03:00:33 +0000
Manifest this update: Sat 14 Jun 2025 03:00:33 +0000
Manifest next update: Sun 15 Jun 2025 03:00:33 +0000
Files and hashes: 1: ACD72rE-jioyxPH9RAuGb5mC6oU.roa (hash: QtFylWnulCc2yQBn+mtJTIcyYgVI68tUvXBBF4rKnVc=)
2: _4IIJhtFlJdrkjSOppTsaFBNkrg.roa (hash: r5hI609ZhZ4xyXvkrk1Z26XwV02QOdDJJ0CIfMyhg7s=)
3: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl (hash: i9t2s18ntXktg+nW2jSJ/pA2GBZD+y51Md4wiIiLtx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:b9:b8:05:7c:c2:78:03:7d:68:33:8e:db:a7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Validity
Not Before: Jun 14 03:00:33 2025 GMT
Not After : Jun 15 03:00:33 2025 GMT
Subject: CN=0ea5ac62441d4ec0dacdf77dde2a2ba20e1170e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:cd:9e:47:d4:97:bd:ce:56:6c:37:b5:8e:
fc:79:cd:f6:61:cd:01:b3:82:86:91:8f:86:ac:44:
6f:d7:87:9f:60:c4:17:fc:4f:3d:de:84:08:d7:7e:
79:f5:47:26:1e:8e:de:6d:2b:78:bf:3b:b7:a3:0f:
19:24:1c:fc:58:80:cb:fe:06:93:9b:59:ac:21:0c:
c4:14:a9:54:6a:36:40:82:b3:dc:0f:41:5e:80:9d:
3b:2d:10:c7:0c:57:e6:7e:a9:05:56:28:83:a9:9f:
b8:e9:75:2e:90:00:a7:bb:a8:7a:16:91:7a:07:1b:
d1:cf:0f:a0:44:31:54:b4:d0:88:a3:28:37:77:d7:
40:c2:82:6d:e3:25:4e:c8:6c:db:c4:33:9a:70:02:
1e:f3:03:ec:e8:d5:02:ab:3c:70:fb:a6:26:3e:f9:
7d:d8:b5:83:70:33:c0:a7:79:be:b7:c9:d0:7b:87:
67:5f:5f:32:ef:db:ec:a8:da:c2:fb:c0:9a:78:f8:
35:b5:45:17:1f:d9:79:a3:13:09:eb:ce:e8:d2:29:
27:89:76:8d:62:82:0f:af:3f:a6:bf:29:d6:41:13:
30:90:42:98:5f:c1:54:70:74:9b:51:9a:49:b1:a9:
c4:fe:fa:5b:a4:38:bc:c6:98:b2:f5:9b:0f:43:40:
2b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A5:AC:62:44:1D:4E:C0:DA:CD:F7:7D:DE:2A:2B:A2:0E:11:70:E2
X509v3 Authority Key Identifier:
keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:6c:d8:8b:3b:ef:ad:ce:a9:96:12:25:04:96:70:d7:72:f3:
78:51:5a:e7:b6:ca:8b:ee:05:24:5a:91:b8:21:26:71:91:34:
ff:d7:24:3c:f8:0c:5b:94:d0:85:a7:84:09:9d:6b:9b:05:21:
c1:9c:45:99:51:eb:69:34:94:78:8d:fa:da:ac:68:cb:79:e7:
c4:2e:fa:fa:c5:a5:90:19:db:ab:00:b8:62:47:c5:a8:07:48:
19:2f:fd:7d:e0:44:87:ba:f5:0f:05:92:08:07:53:ef:49:29:
b0:fd:c4:66:1f:0f:9c:fd:f2:f3:ac:8f:ee:e0:ee:8b:52:d9:
55:dc:13:26:e9:70:39:55:40:18:1d:f6:f4:c7:7a:7f:3b:04:
d8:be:69:1d:92:c0:2a:8c:98:8f:d4:8b:5b:c3:a3:47:86:72:
93:0c:1c:5b:e0:7d:34:60:04:7d:ef:c2:b8:58:7b:8d:6b:98:
24:f7:39:f1:27:bf:dd:50:bd:f0:1f:93:93:56:a9:d3:01:2b:
7e:50:66:c4:27:fd:8a:fc:1d:91:4d:14:0e:19:ec:b3:52:36:
f1:8e:c1:a3:33:69:8b:5d:7a:e4:8f:35:45:e0:a6:50:0a:04:
18:33:82:d4:e9:38:55:9d:ff:c8:00:e9:43:a8:02:c1:37:78:
56:b8:fd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:13:14 2025 by rpki-client