Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
File: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json)
Hash identifier: 79w4Uuacb34hPow6RIbM+RAx0AG4DO4D5v9ethorjtU=
Subject key identifier: A6:84:47:D9:D1:9B:2D:48:23:D6:1D:49:48:E0:E1:50:7A:E6:0A:13
Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
Certificate issuer: /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Certificate serial: 019774F6F8721601688C2707C12ABFFD32B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
Manifest number: 1523
Signing time: Sun 15 Jun 2025 19:00:31 +0000
Manifest this update: Sun 15 Jun 2025 19:00:31 +0000
Manifest next update: Mon 16 Jun 2025 19:00:31 +0000
Files and hashes: 1: T65vqqQCj0Js7DJ85sBppVKxPcU.roa (hash: FL22UNhyCGLfnbVMSxPZxrBCfuIiaLb00z7Ca3ye/lo=)
2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: W9WEM8bfGB1LpxtcSz6GutVCoHPMNagRQBxZ5mba0Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f6:f8:72:16:01:68:8c:27:07:c1:2a:bf:fd:32:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Validity
Not Before: Jun 15 19:00:31 2025 GMT
Not After : Jun 16 19:00:31 2025 GMT
Subject: CN=a68447d9d19b2d4823d61d4948e0e1507ae60a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2a:ee:2d:dd:24:e1:72:99:ff:d2:7b:db:3d:
81:f0:05:27:4a:1b:a7:19:16:2a:c8:be:bb:6c:bc:
c1:2f:cd:3f:2b:30:b8:25:fe:e1:3d:31:76:1d:2d:
eb:17:5a:98:13:90:8a:14:6c:9a:86:55:b5:65:3c:
e4:11:96:b5:5a:0a:2b:ed:14:ff:c4:aa:69:68:9a:
e9:a4:7e:b4:db:f2:97:1c:0e:db:72:24:ef:a3:f4:
de:7d:19:d8:16:35:9a:4e:52:d1:2f:2e:3e:f4:ad:
9c:80:27:90:53:7c:a9:51:00:dd:2c:66:74:d2:26:
93:d4:e3:96:1e:a8:de:a8:b5:10:3f:2e:9e:d2:bb:
e8:34:6e:fc:d7:07:e8:5f:e5:8a:d1:e6:f4:33:10:
2e:35:a3:b4:60:d0:c7:70:a1:15:81:4b:2b:8e:a8:
01:ca:b3:37:17:14:79:da:da:d6:cb:40:c7:30:2b:
95:f8:c9:08:39:69:a6:a8:09:69:8f:36:f2:f8:87:
49:83:a9:f0:f2:4d:b0:51:db:1a:ee:c2:43:25:53:
f2:c2:f1:a7:2c:04:ce:92:46:d2:9b:85:76:7f:ef:
12:6f:7c:51:38:b7:e3:e7:c2:81:32:a4:e2:b3:c0:
fa:d9:6f:00:ff:24:d9:67:8c:53:0b:70:99:67:82:
e3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:84:47:D9:D1:9B:2D:48:23:D6:1D:49:48:E0:E1:50:7A:E6:0A:13
X509v3 Authority Key Identifier:
keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c1:00:72:f7:ec:a6:1b:ec:0a:d9:6e:a1:19:78:74:94:ad:
96:d8:51:92:e8:d9:5d:b2:20:60:09:5f:5f:8d:65:d1:a8:62:
3f:4e:db:84:d1:31:c3:68:c5:d8:0f:0d:a3:f3:fe:25:8c:9b:
0d:7c:a6:53:26:a4:23:c8:13:86:fd:09:6e:1f:78:e4:8e:d0:
e3:bb:24:e8:50:e3:be:ac:f4:4c:1c:e7:21:f3:5b:e7:d5:b2:
cd:97:28:1d:88:03:59:30:29:29:15:bd:a6:ba:37:dc:33:cc:
d3:4c:e8:a0:f7:1d:18:33:bd:52:7f:c5:c7:14:44:68:b4:ca:
86:73:16:41:40:e9:ed:4e:a0:b1:2c:7e:e7:f3:af:cb:8d:38:
20:c6:ce:92:a7:62:79:21:34:71:ee:74:25:c0:ea:c6:ef:19:
f5:03:a0:46:e4:85:a4:c8:f4:f7:fb:9a:d1:13:45:85:77:56:
41:de:a2:cd:e8:ec:44:1a:c9:7b:ea:8b:7b:58:08:1d:dc:4f:
ce:b5:30:ee:e4:6a:98:c4:f7:86:c2:62:ef:51:ef:50:44:19:
df:6c:30:74:81:f3:bf:d4:7f:c3:6f:c7:a6:5e:f9:3d:12:09:
30:d4:8f:51:8a:18:f6:a3:e9:27:78:b6:22:85:cb:a1:60:f8:
36:51:64:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:56:43 2025 by rpki-client