Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
File: frsTAxu1qUujKTO0JdyRUBYclSg.mft (raw, json)
Hash identifier: AyMZoMlARNUZ3VaMDKIRSirg3F125SJkUIB1VyqRXk8=
Subject key identifier: 49:F8:E8:EF:C5:6F:97:5B:D0:21:5D:58:D7:C5:5B:0D:3B:26:7E:89
Authority key identifier: 7E:BB:13:03:1B:B5:A9:4B:A3:29:33:B4:25:DC:91:50:16:1C:95:28
Certificate issuer: /CN=7ebb13031bb5a94ba32933b425dc9150161c9528
Certificate serial: 01976960EF119FF41B895BB176B8F4813BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
Manifest number: 01F1
Signing time: Fri 13 Jun 2025 13:00:49 +0000
Manifest this update: Fri 13 Jun 2025 13:00:49 +0000
Manifest next update: Sat 14 Jun 2025 13:00:49 +0000
Files and hashes: 1: 1GrjD_MVlSSqPSOTstmSZn6OW-8.roa (hash: 0bCgzOJOxNfXuOJ/KwofBbHHt3oNngCqpnJt0zyGNL8=)
2: frsTAxu1qUujKTO0JdyRUBYclSg.crl (hash: cEN+3cg+OeWAXMB4YFbhd5Kf+d8FDabj546b1UE5fBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:ef:11:9f:f4:1b:89:5b:b1:76:b8:f4:81:3b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebb13031bb5a94ba32933b425dc9150161c9528
Validity
Not Before: Jun 13 13:00:49 2025 GMT
Not After : Jun 14 13:00:49 2025 GMT
Subject: CN=49f8e8efc56f975bd0215d58d7c55b0d3b267e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:bc:99:61:62:c2:10:3f:d5:be:03:5a:42:
8e:ef:76:51:ae:35:81:b6:c3:75:21:d7:dd:67:02:
8c:68:42:9e:4e:ac:fe:a3:20:29:3b:46:8e:6e:fd:
8c:b6:48:a4:a4:06:b3:4d:3f:bb:c6:e5:e1:73:60:
a9:20:b0:95:ff:34:37:a9:ee:4b:32:5a:3e:08:de:
10:a7:d5:3f:7c:8e:f3:82:c0:81:74:61:a1:03:46:
1a:ce:da:f2:e3:0f:95:d7:60:cb:78:72:f2:78:96:
a4:76:ed:ea:33:d0:79:4d:59:65:03:a0:9b:16:21:
8d:a0:b7:90:c9:eb:40:85:4f:f2:02:4c:92:f0:49:
e7:79:76:f6:51:8b:2f:18:2a:a8:cf:5a:8c:e5:75:
43:d2:b7:2c:23:77:78:af:70:c5:64:b9:1c:14:3b:
74:e8:2b:17:6c:78:c0:70:f6:0e:1f:13:cc:3a:43:
83:dd:de:31:95:78:44:97:05:16:75:ae:8c:69:13:
02:66:6d:99:a2:f0:f1:3b:e0:a2:d9:aa:b2:d3:c5:
f7:f2:74:4f:31:19:6c:5b:41:f2:cd:a2:5c:d6:45:
49:bc:09:52:5c:4b:ae:6b:03:6d:0c:60:31:c7:35:
e4:72:66:24:d7:64:f2:56:3c:61:15:65:33:f0:51:
9f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F8:E8:EF:C5:6F:97:5B:D0:21:5D:58:D7:C5:5B:0D:3B:26:7E:89
X509v3 Authority Key Identifier:
keyid:7E:BB:13:03:1B:B5:A9:4B:A3:29:33:B4:25:DC:91:50:16:1C:95:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a6:0a:d3:3a:c6:7e:20:8d:a2:e7:fc:29:75:14:97:a3:af:
24:f0:de:98:8e:70:5e:90:a8:84:3d:d6:e0:10:7a:35:6f:a5:
c7:64:76:cb:b5:85:98:d6:01:92:b0:37:80:9e:63:cf:dc:71:
26:74:e0:b9:6a:fb:e0:22:1f:49:c1:5d:fd:5f:5a:a0:c6:ad:
f3:03:0e:4b:d1:50:d1:b6:a3:a1:81:62:30:ac:d0:5b:35:56:
98:20:60:b7:8a:9d:71:d0:8f:3f:28:59:3a:ca:86:81:51:36:
99:13:8c:d2:fd:93:87:ab:0d:a3:4d:be:78:3a:2e:ab:56:a0:
d0:73:e5:17:52:b6:cc:14:df:41:1c:a7:32:d0:67:64:f1:5d:
ee:ac:35:4a:44:2d:50:34:60:77:fd:b9:f7:13:2c:4f:61:9f:
df:7a:60:64:65:72:26:da:6f:14:47:ff:04:b2:87:55:87:25:
39:81:dd:78:de:77:7a:da:18:ca:6c:73:8c:f0:9c:d9:a8:95:
33:d4:81:ac:6b:4a:b0:75:a0:e1:d3:7d:58:69:75:dc:de:16:
75:03:39:b4:ab:c0:33:8d:fa:c9:9a:9b:69:ce:7a:66:f9:78:
28:bc:52:89:58:4a:c1:07:f7:32:95:76:fc:c2:31:9d:4f:73:
ed:31:63:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:48 2025 by rpki-client