Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
File: FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft (raw, json)
Hash identifier: aQifFEjdgCmQ070GP+vx2xz9AvLl7L+6ezY0az941dM=
Subject key identifier: 72:88:BD:B4:2D:D8:B2:15:0D:C4:9C:E6:DB:28:D5:AB:37:16:35:89
Authority key identifier: 15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59
Certificate issuer: /CN=159d30b70b9a83cb8ed5501f554a7feca382f959
Certificate serial: 019762F0EED52758F5918E12B41FD21E10A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
Manifest number: 074F
Signing time: Thu 12 Jun 2025 07:00:46 +0000
Manifest this update: Thu 12 Jun 2025 07:00:46 +0000
Manifest next update: Fri 13 Jun 2025 07:00:46 +0000
Files and hashes: 1: Dio0fKwjaz8mgVWvDfl4tq6lDf4.roa (hash: pj+y9YgulsDhHROR3sIL55OAwSn4ndZYjqojLyj44RM=)
2: FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl (hash: 8NWZQWXHpJ+s/KvGjCYGmHorzKweWUs0Q8K1DYqUId8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:f0:ee:d5:27:58:f5:91:8e:12:b4:1f:d2:1e:10:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159d30b70b9a83cb8ed5501f554a7feca382f959
Validity
Not Before: Jun 12 07:00:46 2025 GMT
Not After : Jun 13 07:00:46 2025 GMT
Subject: CN=7288bdb42dd8b2150dc49ce6db28d5ab37163589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:64:f4:45:b4:dc:80:eb:38:d7:61:62:c2:
bb:9f:f3:92:ea:02:67:ff:81:39:72:5a:64:be:f2:
1e:2a:09:82:c0:e5:26:15:a9:8a:65:9e:04:61:10:
8c:cb:e8:8b:06:29:98:a0:ad:b8:e9:dd:68:6b:b2:
9c:88:43:b0:4d:17:94:55:f6:1f:f8:0f:ce:07:9a:
c4:82:35:b0:e3:53:43:fa:f6:44:df:31:9b:bd:be:
59:57:dc:d8:f2:b8:65:a0:0e:d9:55:1e:ee:f9:89:
d1:2a:bb:56:06:f1:07:4f:bf:99:ca:04:3a:89:26:
ca:2d:c5:8c:fb:f7:ec:01:64:c1:25:09:b9:26:95:
e5:38:ab:3f:ee:ba:85:41:6c:96:85:5e:8b:a0:41:
d8:25:bd:c4:57:15:14:52:da:21:40:64:ca:f4:dc:
22:6b:0e:a0:13:53:c2:fb:70:d6:ea:0d:70:aa:01:
0f:09:3b:6b:9c:3e:3c:66:fe:a6:b5:1e:d9:3c:0f:
aa:fe:48:6c:4f:83:56:2e:b7:bc:c5:77:e6:42:c9:
3b:18:6c:ca:c1:c6:94:49:d7:43:b0:83:80:d7:56:
34:c9:1b:a9:04:5d:7d:26:b2:a8:ee:d7:c2:12:5d:
1d:b6:c8:f2:ad:17:6f:15:62:32:ea:71:5f:ca:f0:
77:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:88:BD:B4:2D:D8:B2:15:0D:C4:9C:E6:DB:28:D5:AB:37:16:35:89
X509v3 Authority Key Identifier:
keyid:15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e4:7e:40:cc:40:7d:63:44:94:27:16:a5:fd:84:7e:00:2a:
48:21:99:34:fa:d7:47:45:53:af:1b:c3:66:df:3d:13:36:7b:
2a:2b:fd:19:2f:cb:8e:96:93:bc:f9:08:78:8d:33:a4:8a:15:
4c:67:0f:54:14:5a:d7:0e:bf:14:f8:71:9a:b3:28:db:5b:6f:
57:79:91:2d:65:2e:1d:0d:24:e4:1d:b9:72:68:77:90:75:e8:
8c:27:ea:c0:07:63:84:09:54:40:bd:b0:7c:ff:02:db:b1:ce:
9f:4d:62:c8:d5:6c:af:d6:d4:2d:2c:51:79:5a:c8:16:05:0e:
19:a1:1d:a5:52:c2:92:27:ce:57:d7:bd:88:3b:ed:22:ae:8e:
70:08:f1:0a:5d:9b:3d:7a:60:bc:4d:ca:dc:56:3c:b1:b8:f0:
e8:ed:76:9c:ef:70:76:bb:b0:e0:ed:af:a1:86:93:96:62:a0:
e5:15:c1:38:5f:c9:b6:a6:f2:e1:2e:89:77:40:a9:29:d7:24:
9f:2d:88:f0:ac:97:49:d1:ce:38:b9:6e:99:93:94:19:de:e7:
72:d8:75:15:17:d8:53:59:61:ba:72:71:33:c2:aa:55:5c:6b:
da:51:d1:ee:8f:72:a6:f6:7c:86:03:55:f8:87:7e:a1:7d:72:
f1:7b:fd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 11:45:38 2025 by rpki-client