Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json)
Hash identifier: +Avyw1YxyHfS7DWTrg8mpO5RMi6F3wHE7I4qx6Uoozk=
Subject key identifier: 0B:BB:F1:48:67:70:6D:21:EC:F8:F8:28:B1:E1:C4:64:38:5A:26:AC
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial: 01984965090C3C685E4EA5F5C00BA879CF1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
Manifest number: 0EED
Signing time: Sun 27 Jul 2025 01:00:14 +0000
Manifest this update: Sun 27 Jul 2025 01:00:14 +0000
Manifest next update: Mon 28 Jul 2025 01:00:14 +0000
Files and hashes: 1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: bPaeYewI8EBEzn+jNPVmcoDVgVQxYWLfshxHys8vnG4=)
2: H8QVEiVhWpEoda9CGE6Oc3pdrL4.roa (hash: yuDUq5plzATZXFJtuu3iWGDCyprgTwUU8VCknElMZCk=)
3: _ct2jrxg6RKH3wrlYOdA7gv_y28.roa (hash: KvPeA3S14yjz3YBD7/OoXk/uguHv1hI5r36BeHgTkgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:09:0c:3c:68:5e:4e:a5:f5:c0:0b:a8:79:cf:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
Validity
Not Before: Jul 27 01:00:14 2025 GMT
Not After : Jul 28 01:00:14 2025 GMT
Subject: CN=0bbbf14867706d21ecf8f828b1e1c464385a26ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:08:11:cf:20:3b:18:4d:78:cf:1b:f5:9a:38:
d1:93:46:aa:87:9a:7e:81:7a:f8:76:d1:59:fa:fd:
a9:7e:2f:7d:92:b7:dc:97:ec:da:5c:00:ba:3f:3c:
ef:57:eb:42:38:85:c7:e6:5e:88:b4:14:98:ac:75:
26:7c:6c:e0:16:2c:40:0b:a5:b5:5c:5e:de:f6:d0:
58:c1:4d:ff:11:8d:0d:12:d8:76:7b:32:e3:88:46:
8c:a6:7c:13:87:6b:dd:70:58:6f:a7:e5:05:bb:b3:
48:15:fa:f9:c5:f5:67:7a:76:96:54:ca:bc:89:f1:
b3:62:3a:98:03:4b:f6:24:29:00:79:aa:b8:13:9d:
76:98:74:31:63:1a:f6:ba:56:d2:b2:1d:80:5f:02:
24:1f:b1:8c:aa:f0:bc:b0:f9:9a:c1:53:1e:13:0c:
c2:d0:83:e1:9c:a9:a8:1f:6c:98:1b:12:d6:9b:f7:
78:7b:17:b1:40:12:18:9a:5f:5a:65:0b:a2:d6:85:
09:8a:47:09:0c:ea:ab:d4:fa:67:8f:27:14:01:f0:
64:1c:06:05:29:b0:79:ba:32:f8:13:53:5e:29:e3:
fe:fa:49:f9:52:ff:78:12:53:bb:eb:12:bd:22:8a:
4b:60:84:03:88:df:cd:89:27:d8:76:49:6b:41:14:
26:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BB:F1:48:67:70:6D:21:EC:F8:F8:28:B1:E1:C4:64:38:5A:26:AC
X509v3 Authority Key Identifier:
keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:42:bd:1d:27:17:5d:63:00:61:e4:a5:b8:83:29:57:c5:00:
e8:c1:00:cc:44:aa:20:f6:71:11:fc:7f:fb:b9:2d:90:7b:cc:
ef:55:ed:0a:ff:42:6e:d1:b2:01:2a:52:c0:fb:ef:f2:9c:3e:
c9:7b:dc:ef:41:61:e1:72:8f:ff:f0:d8:75:47:e1:8b:4c:4e:
c8:31:15:f8:e1:ac:da:d8:7c:f1:08:5b:b3:af:49:e8:c6:45:
73:4f:58:5b:97:f3:68:57:78:c2:47:00:b0:f8:97:83:4b:2b:
85:2a:17:70:e0:a6:a8:7b:65:20:51:fd:04:8d:f5:14:76:14:
6d:55:cc:e2:13:9a:3f:90:51:41:20:28:e5:ca:39:24:c3:62:
b4:3b:b7:49:2c:16:d8:fb:b6:28:f1:cc:2c:11:a3:b1:fe:a4:
21:9c:33:08:3a:ce:66:00:a0:9c:17:80:31:d7:70:d2:9b:15:
bb:fb:8a:23:0c:23:62:a3:0b:ff:bf:8f:0f:13:54:1d:f8:84:
5d:29:99:ba:e8:27:5c:2d:f0:4e:96:17:25:be:ca:15:f2:8b:
a8:6c:d3:0d:46:8d:df:b0:2d:0f:a5:cb:ea:34:cc:bf:c4:03:
fa:d2:56:83:77:c5:6d:41:ab:89:b2:83:90:7a:0d:49:c4:15:
94:b4:a9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:23:45 2025 by rpki-client