Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
File: RFc3PhpobWtZ7oXcN4mdBlMThuU.mft (raw, json)
Hash identifier: ETqqCuIsxDxc0jHAyilo0lxEXN2IMn+kKHbMrq+YKH0=
Subject key identifier: FA:54:E1:5D:ED:FC:91:94:F9:4E:8C:78:59:73:A3:65:EC:22:92:AD
Authority key identifier: 44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
Certificate issuer: /CN=4457373e1a686d6b59ee85dc37899d06531386e5
Certificate serial: 0197722D20D093D2B1A31FE45F955438549D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
Manifest number: 0311
Signing time: Sun 15 Jun 2025 06:00:49 +0000
Manifest this update: Sun 15 Jun 2025 06:00:49 +0000
Manifest next update: Mon 16 Jun 2025 06:00:49 +0000
Files and hashes: 1: RFc3PhpobWtZ7oXcN4mdBlMThuU.crl (hash: 3tSMnfuxOPgqdirp0yoHly+HcI2xYtRFCQPVNqT+IjU=)
2: XMirD3qG50TrikmGR0PujWf3jjs.roa (hash: iR/AZzWdddK7a5E0N2BfP3yz4LyY5Uji67zQAihWnBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2d:20:d0:93:d2:b1:a3:1f:e4:5f:95:54:38:54:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4457373e1a686d6b59ee85dc37899d06531386e5
Validity
Not Before: Jun 15 06:00:49 2025 GMT
Not After : Jun 16 06:00:49 2025 GMT
Subject: CN=fa54e15dedfc9194f94e8c785973a365ec2292ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:8a:ac:7a:00:26:5a:15:d0:85:4b:9e:56:
89:7d:d9:77:56:07:5f:de:52:7d:70:1a:ad:fd:08:
6b:62:e0:64:e7:21:25:4f:eb:6d:a2:12:75:ea:ba:
47:40:b6:ee:a0:f0:c1:68:53:d6:64:ec:3b:09:13:
5e:c9:70:99:11:eb:ae:61:34:06:76:bf:12:0a:36:
c3:59:7a:1a:40:4c:1d:ea:00:cc:3e:58:07:4f:0e:
ca:18:00:27:8d:14:fd:19:c0:eb:fe:b9:81:07:97:
56:2f:ac:a9:6c:bd:ea:69:5c:46:76:36:ad:9d:6a:
21:b3:41:78:e4:67:f6:07:df:f5:73:f7:70:93:ef:
00:60:cd:5e:ca:46:a2:3e:07:1c:1c:b9:bf:c9:ef:
63:4c:ce:09:40:98:6b:95:51:f1:1d:d9:bc:a9:fb:
14:b8:70:59:ae:eb:b4:fc:de:0b:04:47:e3:74:ff:
a1:ea:4b:eb:18:84:b9:3c:69:04:29:45:ff:59:43:
d9:01:09:49:8e:cd:1f:1a:b3:7e:d4:65:69:08:dd:
1e:8e:0e:5d:dc:9e:02:9b:c5:13:c3:60:18:3f:29:
a0:f7:c5:b5:53:26:f4:7b:a5:e8:e0:da:5b:e9:5d:
bf:6f:9d:7f:a8:d8:ce:48:96:58:bb:a4:76:ff:99:
8a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:54:E1:5D:ED:FC:91:94:F9:4E:8C:78:59:73:A3:65:EC:22:92:AD
X509v3 Authority Key Identifier:
keyid:44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:20:97:ec:93:8b:43:aa:5e:10:7d:9c:2a:ab:6e:36:45:5f:
3d:0a:60:55:1b:b1:f6:23:1d:e7:a6:c3:ec:b9:b7:8e:7d:31:
47:e8:34:6a:14:cd:29:ad:c1:46:2f:06:26:71:4b:ac:2e:35:
25:d2:82:39:b8:61:66:ee:2d:52:93:32:64:8b:8b:20:81:14:
84:c9:d2:d2:12:95:7c:78:71:4c:90:5b:32:3a:a7:65:87:74:
f2:8a:a7:e4:db:88:82:91:bb:6b:75:42:df:08:3a:99:43:dc:
86:bc:f2:67:af:ad:e0:7f:dd:2f:f6:c6:a7:a2:44:e8:fe:3d:
65:84:fe:49:25:22:aa:16:9c:18:da:3f:e1:29:b3:dd:e6:e0:
d1:19:73:e7:33:ee:ff:b3:7d:b3:f1:20:e4:16:e4:4f:f1:c3:
b8:2f:6a:76:1d:15:83:f1:6a:c9:09:16:2e:d7:0c:ba:73:e9:
39:37:35:ad:7c:3a:6e:6e:c0:16:1f:2f:d8:9e:32:a3:c0:af:
39:3e:4e:fd:55:2f:54:79:d8:ce:fc:d6:7a:42:f2:33:8f:53:
a6:a8:b0:d2:17:23:a0:64:79:bd:6d:22:26:d0:ad:00:96:cc:
7f:98:c7:66:74:f7:b2:75:ab:bc:2c:72:ef:f7:6e:35:f4:82:
87:fa:d0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:11:09 2025 by rpki-client