Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
File: cF3hUpBmZK56yfIIesTQBoWl1_A.mft (raw, json)
Hash identifier: iwoH3f4uPXSz50dRRrqKaCTRY+n8v6naO6Xd/zM/+Tg=
Subject key identifier: 42:33:3B:D8:CE:AE:6E:18:1A:E2:4F:41:27:C0:EF:02:F7:ED:A8:93
Authority key identifier: 70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0
Certificate issuer: /CN=705de152906664ae7ac9f2087ac4d00685a5d7f0
Certificate serial: 01976C620B708D00ECCF4FC20D3ED3660D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 03:00:54 +0000
Manifest this update: Sat 14 Jun 2025 03:00:54 +0000
Manifest next update: Sun 15 Jun 2025 03:00:54 +0000
Files and hashes: 1: TKoxALo9u8PRYJQQjNMDBzOManE.roa (hash: e6LRQQhGn2Pm43QUsi5AMgfehOrdW1tISUFnEIiJny4=)
2: cF3hUpBmZK56yfIIesTQBoWl1_A.crl (hash: X1fvjU/ph5520Ly7WKJTmUJMiDJ5W0JS3k/RmP5UQY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:0b:70:8d:00:ec:cf:4f:c2:0d:3e:d3:66:0d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705de152906664ae7ac9f2087ac4d00685a5d7f0
Validity
Not Before: Jun 14 03:00:54 2025 GMT
Not After : Jun 15 03:00:54 2025 GMT
Subject: CN=42333bd8ceae6e181ae24f4127c0ef02f7eda893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:81:52:13:94:7a:ec:5b:dd:14:97:b6:47:0c:
17:d9:68:17:58:9b:06:80:6a:28:c5:f1:39:25:0a:
52:97:26:7a:05:a5:a5:03:71:d8:5a:c9:95:f2:b6:
65:be:3d:7d:9c:27:c5:63:b4:bb:eb:b5:8f:3e:7b:
8d:42:4f:72:26:1c:d5:e3:37:4c:fa:ee:09:cb:79:
f9:c4:c0:82:d5:32:68:ab:e7:86:0c:d4:42:45:ce:
3c:16:f2:a6:42:61:ad:89:fc:2d:8f:5f:a9:3d:b8:
bc:06:b1:f3:69:5b:10:fb:83:32:d7:ba:49:f6:b0:
db:b6:a8:4f:72:49:82:a7:1f:ea:06:8c:f5:c6:41:
e5:a6:f1:5d:08:2c:7c:a4:c1:74:03:f3:58:d5:ce:
5b:62:79:21:df:3b:e9:ff:9b:87:46:ec:28:9e:7e:
27:1a:98:ce:42:e9:cc:70:67:73:91:1c:ff:79:b7:
7e:aa:ea:0b:62:08:06:20:44:1f:78:12:bc:02:e1:
41:80:54:fb:d0:bd:95:a3:88:b0:41:f5:65:21:93:
79:0f:15:ec:8c:ac:61:66:d1:60:88:9f:84:a0:2c:
aa:62:8f:8d:5a:01:4c:d7:25:4d:50:d5:05:b1:2d:
4e:17:90:d5:ec:3b:cc:bd:9f:41:88:31:de:98:6f:
e7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:33:3B:D8:CE:AE:6E:18:1A:E2:4F:41:27:C0:EF:02:F7:ED:A8:93
X509v3 Authority Key Identifier:
keyid:70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4c:2f:c2:ce:30:44:00:3c:7b:96:7c:b4:2f:40:4a:a5:b8:
01:8f:75:2b:79:fc:32:70:5d:c1:d1:84:15:39:dd:30:ed:7d:
ce:58:94:1b:da:07:9a:9e:bf:78:8f:26:d3:2b:f1:f8:2f:40:
ab:bb:70:8b:7f:68:54:81:ee:21:5f:6d:9a:ca:56:65:44:2f:
ff:66:33:b6:96:32:a2:88:81:51:69:cd:cb:80:d4:dd:bb:9a:
5c:92:51:87:1d:32:dd:11:2e:bc:6d:f2:fa:c9:31:18:59:c8:
92:fc:28:a1:af:9e:46:a5:fd:4d:c6:a7:a8:fd:3b:c0:b5:09:
82:02:43:6f:c8:a0:49:e7:73:9e:12:6a:66:a6:0e:8b:03:db:
fe:0e:f8:88:d7:9a:73:77:ad:f8:8a:43:84:a8:b2:0c:b9:29:
34:cf:4b:5d:3c:8a:8c:f3:5c:25:9b:60:5f:c9:c2:59:8c:7b:
b7:10:fa:f4:4e:95:e8:9e:80:64:ad:f5:0d:cd:df:25:71:fb:
54:64:d0:79:5d:41:07:59:c0:4b:d8:f4:da:5a:87:05:1b:57:
50:6e:2d:44:55:39:4f:b1:a7:6b:05:cb:9e:2b:e5:c3:f7:70:
c6:94:0b:75:39:17:e4:01:72:32:18:a7:ef:86:73:db:61:9b:
25:32:23:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:30:09 2025 by rpki-client