Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
File: FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json)
Hash identifier: IAnXCeH+DA9HnlwSWjV/Sp3MqNzjptMYktuXmoLpJYM=
Subject key identifier: BA:00:FD:A6:25:6B:6D:B9:CF:CA:B2:6A:E3:FA:60:40:E7:C2:5B:5D
Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
Certificate issuer: /CN=16d15539c01121066eafe95be3401dfa44407785
Certificate serial: 01974DE99FB907DA354E5F962A01CC4F9F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
Manifest number: 069E
Signing time: Sun 08 Jun 2025 05:00:45 +0000
Manifest this update: Sun 08 Jun 2025 05:00:45 +0000
Manifest next update: Mon 09 Jun 2025 05:00:45 +0000
Files and hashes: 1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: Pd8w1kB8fcLWh1cJWdMC3rgm2k9vk4LPOKWlXn5bFZU=)
2: QOsoDDzE2ufJorNRF7vrLppBjZI.roa (hash: fHVneKRvI/gKsCi1tf45/HVfXiMRdMYJLFW5hZLpBag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:9f:b9:07:da:35:4e:5f:96:2a:01:cc:4f:9f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d15539c01121066eafe95be3401dfa44407785
Validity
Not Before: Jun 8 05:00:45 2025 GMT
Not After : Jun 9 05:00:45 2025 GMT
Subject: CN=ba00fda6256b6db9cfcab26ae3fa6040e7c25b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2b:f4:aa:44:c1:22:92:4f:e1:48:7d:a6:02:
11:13:a4:4c:e8:5b:7c:4c:1d:8a:96:7c:09:73:43:
6b:0e:c7:e7:52:f4:e3:0f:19:43:f6:43:e2:38:e0:
6e:bb:4e:e3:d4:cf:47:fe:52:9c:e5:e8:85:8c:3b:
eb:9f:f7:a2:c3:8d:1b:32:13:9f:10:f5:7c:57:70:
a0:04:64:f8:45:8e:5c:5e:83:8f:66:d6:ae:1b:8d:
1c:e9:1c:fd:02:d5:e7:50:03:14:60:da:f1:57:5b:
33:41:3b:ab:a1:d8:15:e2:02:6c:ae:ab:51:07:31:
54:26:aa:ae:1f:10:ad:90:18:18:7c:92:48:d4:21:
2c:eb:19:1c:2c:6b:3d:01:35:b8:4b:79:21:56:a0:
92:4c:98:b2:48:73:12:af:cb:25:25:45:0e:9d:36:
0f:8c:50:ee:de:d6:5b:5d:c2:e4:7f:4a:f2:63:cf:
17:b8:a7:9b:3b:a8:ad:56:01:1d:cb:fd:5d:0c:ba:
48:79:3b:3b:fc:de:80:fc:cf:66:c8:2f:e3:31:13:
63:09:58:12:03:c7:71:8c:7d:08:ae:ff:3a:71:cd:
28:00:28:f5:65:b7:71:1c:f7:b6:3a:e9:83:94:de:
fe:1f:1f:62:18:85:64:10:6b:85:1f:be:82:fe:a2:
35:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:00:FD:A6:25:6B:6D:B9:CF:CA:B2:6A:E3:FA:60:40:E7:C2:5B:5D
X509v3 Authority Key Identifier:
keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e7:28:1a:fe:f7:cf:89:4c:30:96:53:32:54:a1:c7:1c:07:
28:a5:bd:fb:0d:7b:da:5d:a1:d0:4a:57:fb:ff:91:25:fa:ae:
bd:b1:98:69:eb:20:07:c8:ab:97:a9:70:d5:e5:0c:1b:c3:d5:
32:dd:dd:be:49:f4:00:0b:43:1e:3c:e3:f0:01:55:75:03:14:
8b:1e:73:cc:c4:f7:07:62:f3:2e:19:f1:d7:84:5b:d6:36:11:
d6:69:1f:18:5d:1d:4a:75:c0:b8:43:00:6e:b4:ad:9d:1a:1d:
17:b3:07:23:ad:20:4b:66:58:f8:ae:52:e2:c6:92:60:c6:d1:
1d:2a:33:54:35:32:44:fd:96:4b:34:b0:fd:00:17:85:b6:37:
8b:03:a9:43:f1:34:72:35:1f:03:7d:bf:84:a4:98:a4:78:74:
ab:99:1a:ea:54:36:0b:3f:a4:4f:35:d1:df:78:f3:e3:35:41:
5e:ba:cd:13:e8:fa:c5:a4:24:7f:43:d5:46:2d:92:cd:dc:8f:
0b:b3:95:7c:65:22:cf:f9:28:21:82:60:34:1d:27:08:dd:54:
85:6e:fb:06:e7:d5:68:c1:57:65:42:10:cf:20:d6:3d:f7:04:
d9:cd:53:52:71:41:82:24:17:82:26:88:99:f4:b6:f3:33:f9:
fc:b6:da:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:41:37 2025 by rpki-client