Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: 9D35AHDFVou9AlLRJh1Yfe2k4DrwlvzA0caS8DkOnq4=
Subject key identifier: D0:1E:4C:25:F6:09:07:76:3E:04:87:55:3C:BA:BD:27:52:EA:4B:BA
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 019768BBADF70089BFF2992752E947AA29B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 08EE
Signing time: Fri 13 Jun 2025 10:00:19 +0000
Manifest this update: Fri 13 Jun 2025 10:00:19 +0000
Manifest next update: Sat 14 Jun 2025 10:00:19 +0000
Files and hashes: 1: 7gpeu0S7hXZ8riAsKwy1ohmGU98.roa (hash: yLiQ4BEaMhFQdskxNlE7aRv3rWf0cLts9Xjd3ePJwJ8=)
2: Be7hWobHeXIDcEV-DcvLVcoAOIA.roa (hash: BaLaak1kH9hW9zdiezS80huivnGVBMTLdsyXEFD6uzM=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: YqwTsGYuQjHH/dTkG0cjVPrOpxqKIV60evoebFUm/Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:ad:f7:00:89:bf:f2:99:27:52:e9:47:aa:29:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Jun 13 10:00:19 2025 GMT
Not After : Jun 14 10:00:19 2025 GMT
Subject: CN=d01e4c25f60907763e0487553cbabd2752ea4bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:9b:6f:dd:3f:a8:19:06:34:9d:9c:0c:b3:
a1:fb:af:42:99:75:f4:f3:00:fa:d8:e3:93:ea:22:
5b:83:d4:ce:04:a7:a6:67:06:b3:aa:12:77:db:ac:
60:07:00:f9:10:2b:37:9c:c3:c3:2f:cf:e0:69:b3:
00:78:f7:17:7c:b5:01:46:9e:8e:cd:02:4a:e6:e7:
f8:3b:5a:60:1d:b9:14:4c:ef:36:4b:29:17:b7:24:
40:11:38:33:1c:a2:c6:94:3f:c5:81:71:81:52:b0:
76:c7:4f:8c:a2:d6:87:45:fe:25:20:de:88:dc:bb:
59:17:32:f4:5c:05:7c:71:07:19:cf:2a:1e:a7:76:
27:78:df:c3:84:31:11:cd:39:71:0f:ef:3b:14:d0:
45:60:65:56:04:d0:b4:c2:37:a6:5d:e0:a7:c7:92:
95:0d:40:de:1d:f5:58:ad:dc:ce:c9:26:0d:72:0b:
2e:44:8a:55:9a:09:ba:aa:f0:d6:3e:9d:ab:41:63:
ef:72:a2:47:e3:bd:2a:4c:22:db:c2:d6:ab:40:bf:
e3:27:00:97:97:ad:e0:db:e1:d6:c2:86:3e:31:64:
ca:3e:0f:73:b8:25:a4:ba:0d:bb:77:27:5b:43:2a:
97:6d:f3:9a:14:6f:6a:c9:57:48:09:93:13:17:30:
ca:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1E:4C:25:F6:09:07:76:3E:04:87:55:3C:BA:BD:27:52:EA:4B:BA
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cb:73:2b:16:4c:f3:d2:2f:ab:4a:46:32:4a:8d:a9:c3:a6:
5e:19:15:1f:75:e5:9a:4e:1a:d8:82:51:2a:97:03:b6:f5:0a:
8e:67:6c:0d:01:70:e9:b4:f6:b8:30:2b:ba:b6:5a:b2:be:42:
5b:73:38:34:bb:09:e8:85:a3:c0:28:63:25:46:72:db:d4:97:
c2:e8:f8:e8:a9:48:cb:48:5b:df:06:06:bd:e0:03:17:4f:b0:
72:f8:70:47:75:2c:0b:7a:ef:22:e7:4b:70:15:0f:cb:ad:bc:
76:0a:f1:d9:09:08:9d:23:a2:08:f8:7e:29:15:9b:19:f8:93:
65:f5:f2:9b:e6:fe:14:f4:a7:d3:de:d6:af:09:bf:5f:35:17:
ac:40:2d:df:4c:11:5a:4c:1d:51:c7:dc:a3:51:c4:67:25:bc:
fc:73:63:17:6f:5f:79:43:4f:bb:0f:bd:ea:dd:72:d7:e4:eb:
63:6d:28:1e:b6:ed:cd:15:b2:a8:fd:ae:e2:0f:27:f2:a4:67:
be:d5:26:3c:f0:8d:8a:57:a4:7e:d2:e9:62:50:4d:06:20:ea:
c5:d3:7e:00:30:2b:4b:1d:18:3d:74:04:44:5e:d5:75:d6:2d:
d5:82:2c:a9:9c:43:6a:6c:7e:4b:eb:dc:e5:ff:e6:27:e7:8f:
d6:b9:c1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:01 2025 by rpki-client