Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft
File: fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft (raw, json)
Hash identifier: M21lIy6s1xAfZeUJbslNb1J4uINdNw8URj+KMRkFeOI=
Subject key identifier: 90:DB:13:35:5D:9B:8D:04:4E:DA:2D:02:C2:78:3D:C2:03:09:42:86
Authority key identifier: 7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F
Certificate issuer: /CN=7c45672fc42bdd33e545338a7417e8171a04ee3f
Certificate serial: 01976F2BEA9E53B658DD4E9029B4D15C997A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft
Manifest number: 0A9D
Signing time: Sat 14 Jun 2025 16:00:38 +0000
Manifest this update: Sat 14 Jun 2025 16:00:38 +0000
Manifest next update: Sun 15 Jun 2025 16:00:38 +0000
Files and hashes: 1: RdszoR0XDemrxWZ7ZuzRpfNYzZk.roa (hash: YWnaBwFSvymmXHCPjERkvxYdDqJ7Cm5zkK0Huya48uA=)
2: fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl (hash: gw0/E9rRNYdwucAC9INp5mL4oDqAo45r3kPBwBsgjjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:ea:9e:53:b6:58:dd:4e:90:29:b4:d1:5c:99:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c45672fc42bdd33e545338a7417e8171a04ee3f
Validity
Not Before: Jun 14 16:00:38 2025 GMT
Not After : Jun 15 16:00:38 2025 GMT
Subject: CN=90db13355d9b8d044eda2d02c2783dc203094286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:a0:45:91:08:21:be:80:61:8e:b5:5d:8f:
4c:1f:97:a1:78:5a:c7:92:11:7c:6c:21:a4:be:56:
b2:ab:fa:ef:ce:05:43:59:21:17:b4:4a:fb:d3:0c:
0c:71:01:6d:62:f5:9d:1e:50:f6:56:92:41:9f:5a:
58:a1:34:0a:78:39:8e:84:98:9e:d0:81:e2:e8:57:
82:b6:9b:bf:d7:76:d0:cb:51:37:fc:3a:97:20:cc:
c4:89:33:48:e2:cc:8e:b7:43:bd:ee:3b:cd:e3:14:
6c:d4:7e:63:34:78:e2:7b:1a:62:d0:92:0c:14:bb:
9d:6f:16:4c:94:05:86:8b:4d:c4:d9:8e:6c:11:54:
86:90:39:5f:f8:fd:4f:5f:8a:2d:26:b7:42:ce:6a:
13:b2:81:e2:cd:5a:23:ff:5f:6d:7e:67:41:b9:f1:
f1:2d:79:1d:de:46:fc:78:c5:64:b6:7a:88:9e:fa:
0e:9a:39:af:fb:f9:fd:8d:6f:da:22:83:da:4e:70:
2a:ce:5b:73:26:dc:1e:7f:24:28:9b:d3:4d:0e:06:
d7:85:67:2c:9d:a1:7f:91:75:08:71:8d:b0:94:00:
34:fd:5a:62:d3:07:02:c6:f5:4f:d1:21:aa:b0:2c:
8f:b5:05:2c:e4:8a:59:a0:50:5e:0d:79:d0:13:0a:
b1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DB:13:35:5D:9B:8D:04:4E:DA:2D:02:C2:78:3D:C2:03:09:42:86
X509v3 Authority Key Identifier:
keyid:7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:9d:a4:1a:59:5c:62:f5:7c:74:79:27:e6:34:3b:59:80:20:
15:d4:6c:da:5a:60:0f:8b:f5:05:00:7e:53:ad:4e:e8:c2:16:
19:8e:02:06:6d:08:82:b3:eb:81:9d:85:4a:bb:7e:15:e9:12:
8f:cb:d9:34:ac:cf:f9:76:18:cb:12:4c:98:c9:7b:df:74:54:
aa:24:8c:6e:e5:77:ef:f0:1a:8f:88:9c:e3:23:c3:4c:02:51:
93:e0:4f:fe:b6:ed:aa:ba:50:a8:7e:42:65:41:84:69:31:0d:
37:f3:cb:66:25:56:4b:e9:34:f5:8d:04:46:9e:10:84:e3:55:
ec:11:80:c4:81:40:a1:5b:35:94:02:80:9a:d0:15:e8:f7:bb:
05:6e:8e:de:1a:f3:ba:d4:ff:8e:0e:f7:ae:7d:ba:f8:fb:3a:
5d:a8:c7:c1:66:3b:81:4a:72:e2:ad:a3:d0:35:96:a8:0b:41:
cc:35:8e:12:3b:87:53:9e:c2:f1:d0:a7:b0:3d:71:c1:c6:de:
ee:6d:53:ad:22:d0:f0:40:32:32:4a:9b:bc:2e:39:93:76:90:
47:41:30:cd:36:c2:47:b8:26:6a:7d:e1:fb:30:a1:ba:90:6d:
58:4c:66:bc:76:f4:57:84:3b:af:00:ef:9b:aa:a6:e5:44:5a:
d2:a2:56:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:12:48 2025 by rpki-client