Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
File: 448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json)
Hash identifier: 5gDxmhLV7j2eJzya7k4wtsDwr6IwxUkPpT546O6lNns=
Subject key identifier: FB:7B:A0:91:83:BE:20:82:03:DF:75:F3:63:B8:B4:4F:D1:B7:0A:1A
Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
Certificate issuer: /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Certificate serial: 019769CF253FB3EB77E78052A5C1BEBB6374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 15:01:12 +0000
Manifest this update: Fri 13 Jun 2025 15:01:12 +0000
Manifest next update: Sat 14 Jun 2025 15:01:12 +0000
Files and hashes: 1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: sn/Qw/t8878MUNWud0UnX3z1yCuVcUDZTEbBHfcm/hw=)
2: cbASN3fk18Tj9McpzsqARVXR-pM.roa (hash: aAGlbD4TDLIdbw1wI2aN8qbwooD1yBpWxGj+IoRRzpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:25:3f:b3:eb:77:e7:80:52:a5:c1:be:bb:63:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Validity
Not Before: Jun 13 15:01:12 2025 GMT
Not After : Jun 14 15:01:12 2025 GMT
Subject: CN=fb7ba09183be208203df75f363b8b44fd1b70a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:6a:aa:f9:f1:58:db:1d:23:b6:c9:5c:b7:
ae:99:17:77:c1:1a:b3:9d:de:bc:ad:f1:c0:05:80:
2d:27:71:12:7c:f1:81:1f:4d:1a:f5:ed:63:0a:a5:
8e:84:4f:40:a7:8b:48:ee:bb:2b:8d:02:ae:a3:ca:
08:90:fd:1e:a4:c2:1a:6e:29:3d:58:96:3a:82:14:
55:74:5e:f9:5e:f7:36:1a:7c:15:83:34:58:2c:67:
26:17:dd:37:a8:c8:42:6d:92:c1:8c:99:26:d3:98:
75:02:a4:fb:f9:a0:24:be:65:40:fa:10:e0:8f:0b:
87:90:03:b8:c9:b9:07:27:40:79:bc:40:52:d9:e9:
d6:64:90:86:45:d9:84:ad:d3:bc:e9:b4:97:0a:6b:
80:8d:38:38:f2:ba:f4:66:97:84:03:ea:a4:68:2d:
cb:66:ea:bc:b8:99:bc:0d:e2:67:93:e7:88:e3:7e:
4e:b6:cb:2b:ae:7d:71:81:e0:c4:4f:a8:b1:62:53:
5e:09:52:d6:70:4d:fd:b7:37:9e:31:99:d4:2e:0b:
66:2e:a0:00:5e:69:16:bd:42:ec:f0:0a:ca:7d:8d:
64:bf:43:7f:e9:c4:9e:01:90:b0:ac:bf:e2:cf:5f:
5c:a5:52:53:8d:d5:c9:89:dd:3a:96:a4:d8:c3:42:
c1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7B:A0:91:83:BE:20:82:03:DF:75:F3:63:B8:B4:4F:D1:B7:0A:1A
X509v3 Authority Key Identifier:
keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7d:e9:e7:20:48:dd:be:55:11:99:69:3f:3e:64:51:a2:cc:
7d:f4:2a:ee:bf:51:95:78:bb:40:69:d2:78:22:09:98:0b:1f:
69:ed:cc:01:b5:32:41:4e:9c:9a:cf:a9:11:e2:f3:5a:73:f1:
b0:cd:ba:2c:08:1b:34:0d:49:dc:77:f5:0b:1c:39:7d:16:fe:
02:ff:a8:8a:7f:b1:37:93:a4:8b:ef:6d:ac:92:ff:49:6d:06:
ff:2f:7b:63:77:7a:30:ea:8b:fe:1b:96:8b:f0:3d:14:78:fc:
3f:44:31:a7:29:18:c5:e7:af:92:d2:f5:7c:23:7d:7a:84:dc:
e8:00:9c:fd:9b:08:5b:e6:c0:c4:81:22:88:b9:24:2a:e2:f8:
cc:ff:96:59:73:50:40:a7:36:b4:ba:4a:fd:56:34:4c:b6:e0:
cd:af:bb:82:ef:4e:f3:59:23:92:fa:5e:d2:39:eb:ae:af:d4:
23:9c:d4:58:dc:74:6b:80:14:ba:3d:a6:62:f1:9f:39:95:50:
ff:45:bb:e9:f6:44:80:dd:67:9d:c0:b7:40:03:0d:6a:89:91:
13:73:6e:f4:b4:16:af:5b:35:92:be:df:d1:1b:01:f0:cc:fb:
69:de:2c:55:b4:ea:10:17:20:d2:cd:ca:13:e9:a3:94:f9:a2:
69:c2:3f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:54:19 2025 by rpki-client