Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
File: fgRhmrDxIJtw8QWYxplEvzTb8jI.mft (raw, json)
Hash identifier: ef9OMqOHL5gnneE5xcFQSDFkxNMdn2PnczBAz1HfDCU=
Subject key identifier: D9:32:B4:7D:2F:B3:4A:D9:F7:69:05:99:C0:6B:C9:F1:C5:77:59:4F
Authority key identifier: 7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
Certificate issuer: /CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Certificate serial: 019784A109CAC2AC97CD7F3C3D1380BE159B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
Manifest number: 12DA
Signing time: Wed 18 Jun 2025 20:00:35 +0000
Manifest this update: Wed 18 Jun 2025 20:00:35 +0000
Manifest next update: Thu 19 Jun 2025 20:00:35 +0000
Files and hashes: 1: 787yu0Xx7LAqYI4eV6FlvWwe4sU.roa (hash: 0rdw2IxnG2UduKLMx9SDd9m8DvhrTv12ADsR6eydjg0=)
2: V7t1MzfzXgW3Q66a3IOYRULIxX8.roa (hash: 9ljAarH2vMiPbFaBcASuSrcoh5ApRcxsoYC+Da4pdfQ=)
3: fgRhmrDxIJtw8QWYxplEvzTb8jI.crl (hash: DYQXa1qmqJefJ+2miE2hdiNsuy9HnZnoUl3MRoLOPSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:a1:09:ca:c2:ac:97:cd:7f:3c:3d:13:80:be:15:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Validity
Not Before: Jun 18 20:00:35 2025 GMT
Not After : Jun 19 20:00:35 2025 GMT
Subject: CN=d932b47d2fb34ad9f7690599c06bc9f1c577594f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5f:6f:b6:2c:ae:6f:7d:dd:71:6f:92:20:6f:
dc:0f:57:df:12:fe:64:e1:80:8b:b2:26:eb:52:56:
ff:e5:04:40:c7:5b:f6:ae:0f:08:79:5f:e9:a6:e4:
9b:89:c9:41:29:1d:b6:98:e8:5d:f3:47:0c:ab:1c:
3f:d8:3d:9d:a8:2c:92:b9:85:e0:47:01:de:d2:3a:
f2:b6:98:31:44:b2:78:46:a9:12:66:be:2e:b7:7e:
ca:a4:3f:8c:aa:47:ef:28:cf:25:35:74:64:b6:c3:
7e:df:df:cd:fb:6c:a1:e8:e0:dc:90:e3:46:11:09:
20:bd:a2:3e:b4:59:07:3d:56:32:b6:c9:6d:a7:28:
ce:b8:b7:46:6f:9a:8c:2b:21:f3:61:94:42:d1:f6:
80:b9:95:40:12:e2:bb:7f:62:34:eb:72:7f:c4:49:
80:5e:cf:2c:4b:c7:9e:2d:ed:33:3c:52:c5:0d:d6:
5e:75:39:ac:b5:14:8e:21:b3:aa:95:8e:4c:ca:31:
fb:7a:e3:d7:d8:fa:c5:bf:2e:34:dc:77:55:e4:b4:
0c:ba:4f:33:b6:21:10:40:95:08:d3:35:11:3d:d0:
1c:89:c8:4b:5c:a1:30:c3:06:bd:49:cd:ff:a5:18:
76:b7:01:c7:54:c1:2b:d6:d8:d8:16:67:8b:6e:28:
6b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:32:B4:7D:2F:B3:4A:D9:F7:69:05:99:C0:6B:C9:F1:C5:77:59:4F
X509v3 Authority Key Identifier:
keyid:7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6c:44:c3:0c:53:27:30:57:33:6d:54:3c:ab:7c:f4:f5:85:
c1:5f:2c:28:6d:3d:53:ab:89:03:ce:9e:1d:23:1e:ed:b9:24:
20:70:45:90:f0:70:c7:f2:59:bf:08:f2:d7:0d:67:ad:4b:db:
89:da:0e:60:1a:09:18:a5:64:84:ea:d4:b3:7f:c0:22:0f:1d:
3d:d5:4e:78:8b:84:e3:06:bf:a1:74:12:25:14:cf:cb:d7:99:
4f:d4:48:85:78:12:d5:ea:ba:2b:c3:bd:8c:15:cb:23:7a:70:
6d:89:9f:51:8d:b7:29:04:05:45:e9:18:1c:23:bd:36:e7:f3:
d8:ee:7d:c4:d1:87:a6:d2:2f:5d:cd:e9:e1:5b:ed:5e:be:41:
bf:ce:bb:76:40:fe:40:29:fe:84:c5:d3:ca:b2:2b:33:dc:59:
e2:d8:aa:cf:19:35:80:b4:32:78:83:fb:b9:ca:53:6e:ee:c1:
4b:8d:20:6f:4b:bf:98:53:c5:df:18:94:19:8b:a7:95:9d:00:
b4:da:d3:46:37:9b:32:73:a2:e1:a6:fb:0a:07:17:17:52:e1:
97:bd:f7:0c:4c:19:9b:b5:91:47:d1:c4:48:79:93:54:59:99:
ea:a2:76:63:b4:ab:f1:8c:42:3d:d7:98:52:b7:1e:c3:34:c1:
cd:1b:07:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 04:52:51 2025 by rpki-client