Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
File: F263G9VVdvRXY7retnbtWZkNOWo.mft (raw, json)
Hash identifier: 2X2GiMzrn/SfhFCWH3XvMMRmWBLi4joAX2WXgyHl/ns=
Subject key identifier: 4A:5E:C9:80:DB:DE:25:5B:A1:D4:7C:30:0E:67:51:ED:8B:43:AF:D7
Authority key identifier: 17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A
Certificate issuer: /CN=176eb71bd55576f45763badeb676ed59990d396a
Certificate serial: 019772D1D371701993FD230A20327032FD24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
Manifest number: 0CA2
Signing time: Sun 15 Jun 2025 09:00:42 +0000
Manifest this update: Sun 15 Jun 2025 09:00:42 +0000
Manifest next update: Mon 16 Jun 2025 09:00:42 +0000
Files and hashes: 1: F263G9VVdvRXY7retnbtWZkNOWo.crl (hash: tc7z0HAFQcfPZ9u4pvTnM16/zL+WQh7pr3hzLZWRipE=)
2: kQBDlI9AJTPDOANcbfub1qPVjs0.roa (hash: ws3dJ8ac8FYqQSPBpJu2ZxPrhp444gx9gUkFmi10lLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:d1:d3:71:70:19:93:fd:23:0a:20:32:70:32:fd:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=176eb71bd55576f45763badeb676ed59990d396a
Validity
Not Before: Jun 15 09:00:42 2025 GMT
Not After : Jun 16 09:00:42 2025 GMT
Subject: CN=4a5ec980dbde255ba1d47c300e6751ed8b43afd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:60:38:9f:3d:4a:c9:e3:6f:b1:1d:4c:e1:84:
29:8b:82:57:bc:fc:f3:c9:dc:6e:69:28:be:c1:30:
f0:a4:fb:60:f4:47:1d:58:6c:ad:4d:96:af:91:73:
0c:85:1c:41:f9:19:39:cf:53:20:80:d7:04:67:0b:
66:83:91:1e:00:66:ba:bc:a4:b8:53:a7:05:35:c5:
2d:8b:b7:78:2a:7a:7f:24:d8:49:65:52:3d:7f:3d:
7c:6b:ca:40:5e:3c:3a:d6:17:e2:2d:12:c5:e3:24:
ae:d0:dd:4d:9f:1f:8c:6e:6e:c8:96:91:0d:1e:2e:
45:4e:0a:9d:b1:7e:f7:71:25:c7:a0:a4:4d:e4:1d:
46:17:ec:1c:3c:c4:a9:dc:42:da:dd:0b:75:48:6d:
1b:35:23:c7:c7:4b:00:93:10:38:c0:2b:0e:78:92:
9e:a7:92:68:10:0c:33:58:a5:79:aa:ef:51:fb:28:
63:18:6e:09:ac:28:6a:42:f3:f3:a9:03:ad:cf:dd:
47:b0:a7:9b:32:c4:8e:5e:05:26:b5:3e:8e:ee:4e:
f5:36:2b:fe:7c:6a:3e:57:22:26:c3:1b:c9:e8:f3:
b4:3f:ed:97:67:5b:99:b4:5d:97:9e:71:8d:00:6f:
96:a2:fa:4c:51:4b:e3:6d:32:bd:2d:09:1b:b7:d4:
99:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5E:C9:80:DB:DE:25:5B:A1:D4:7C:30:0E:67:51:ED:8B:43:AF:D7
X509v3 Authority Key Identifier:
keyid:17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d8:2e:f6:7c:3e:d6:e5:45:c1:3d:e5:61:6a:31:8d:63:68:
cf:a6:07:78:bb:c9:33:67:87:47:45:d4:c4:48:05:77:6c:40:
ee:59:76:2c:44:91:d3:71:8f:bc:c4:e8:e1:20:72:0a:2c:9b:
2b:68:24:cb:5d:9d:38:21:d0:83:69:ca:01:60:65:27:ff:84:
b8:63:27:ce:2a:11:d5:28:8f:a3:b1:05:56:b4:e1:82:35:8d:
49:f3:72:38:18:ba:b9:07:99:50:0e:1f:a1:30:2d:ee:b4:11:
df:54:9e:cd:5f:e4:03:4f:3e:72:1a:a4:d1:a5:da:bc:2b:ab:
3e:5f:31:ce:94:ae:5b:8f:c6:ce:e5:ea:11:6d:93:75:27:df:
04:45:39:66:65:7d:e9:17:45:4d:c7:0b:d4:eb:ba:15:48:1d:
d6:92:68:22:d4:0e:e9:95:02:ac:13:e4:fd:7b:e4:31:39:c4:
38:46:94:a2:4b:ae:66:19:65:49:96:1f:05:c3:9a:cd:4a:bb:
fb:eb:34:8d:1c:db:23:04:73:09:b6:12:b1:1e:f7:ff:99:82:
1e:04:f8:55:5d:92:ed:07:92:7a:2e:95:7e:90:85:b8:48:3d:
12:2d:c3:26:99:eb:c9:64:58:16:df:68:01:12:56:c0:9c:75:
07:60:e5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:19:38 2025 by rpki-client