Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
File: FqwWDambNJSla1R8aKjiwJGGkbU.mft (raw, json)
Hash identifier: KNjl3zF9j3Arb+2mBjS3ZLECkULmAyapWhMo+TMo40I=
Subject key identifier: 0B:49:EE:42:65:EE:5F:A2:50:7C:CB:53:1C:45:E7:C0:4A:36:01:19
Authority key identifier: 16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
Certificate issuer: /CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Certificate serial: 019749686B5422BC069989679223F72DB70D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
Manifest number: 10F5
Signing time: Sat 07 Jun 2025 08:01:09 +0000
Manifest this update: Sat 07 Jun 2025 08:01:09 +0000
Manifest next update: Sun 08 Jun 2025 08:01:09 +0000
Files and hashes: 1: FqwWDambNJSla1R8aKjiwJGGkbU.crl (hash: 53TqKhe+EGvncoQH653QO8KiyNUBYHeiE3I8vEEKoUA=)
2: H9dXCbHCAXGOrGOV28k8umzrLKQ.roa (hash: sDapbNuHEvC3TdmduqXaXIUkjYECPGi1w550P+lUprw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:6b:54:22:bc:06:99:89:67:92:23:f7:2d:b7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Validity
Not Before: Jun 7 08:01:09 2025 GMT
Not After : Jun 8 08:01:09 2025 GMT
Subject: CN=0b49ee4265ee5fa2507ccb531c45e7c04a360119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:10:fa:2f:d0:f4:4f:46:9c:5b:44:76:43:
95:35:65:f3:77:a4:71:75:7f:80:b2:07:c7:32:cf:
e7:8a:ae:0f:b1:f3:11:c9:2f:25:97:37:72:98:f1:
ff:0f:10:f1:ac:60:5c:be:c7:48:67:bb:8a:02:46:
a3:da:ac:6c:f1:c0:2f:0c:9a:96:fc:d3:29:63:17:
1f:f5:6d:b7:db:9c:0c:98:cc:f1:61:8b:38:69:52:
8f:89:55:22:3d:0d:46:14:32:aa:2b:c6:d9:8a:d8:
02:74:a6:9c:04:a1:39:07:eb:94:f3:9a:c6:70:47:
14:54:7d:87:9d:6a:03:3b:d8:05:21:38:8d:3e:4f:
69:79:bb:fd:c1:97:1c:62:3d:40:31:4b:49:9b:f7:
b0:03:d2:1e:28:b8:95:ac:62:f6:49:55:a3:4c:3e:
18:0a:b7:83:4f:e9:99:d2:5d:01:3f:c8:64:f8:0a:
8c:ca:22:2c:1a:fd:8b:90:5b:c0:43:3d:1b:4f:fd:
fb:aa:f6:f4:8c:5d:a0:90:9c:1a:aa:19:11:fa:1c:
b2:f9:53:1c:45:f5:3d:a0:79:5b:bb:66:bc:b2:75:
be:34:26:08:6c:cf:78:cf:c7:1c:af:f3:25:38:6b:
dc:a1:5c:8b:f0:2e:77:7e:d4:3b:9a:ba:cd:5c:12:
03:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:49:EE:42:65:EE:5F:A2:50:7C:CB:53:1C:45:E7:C0:4A:36:01:19
X509v3 Authority Key Identifier:
keyid:16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f0:9a:d8:08:c5:3a:bc:0a:d5:c1:dc:1b:36:46:81:b3:6b:
d6:54:62:e8:8c:9b:21:22:d9:1b:c8:35:7a:31:94:58:f0:c5:
a1:8e:e6:96:55:23:65:61:f7:69:7a:c7:6b:ac:37:91:ce:6a:
30:cc:a9:6e:5f:98:ac:51:cb:78:3c:e7:9e:42:7e:c6:67:b4:
b2:95:ac:c1:2b:cf:26:00:cf:a6:cb:c1:5e:3d:45:51:56:0d:
1b:9d:02:59:70:25:e7:99:15:2e:8e:fa:37:31:48:46:de:8f:
9d:6a:36:62:19:ab:fe:6d:8d:45:99:fb:6c:c3:9e:c9:16:f6:
e5:b8:0d:80:ae:60:93:fe:d6:66:01:77:b1:cc:12:4f:eb:96:
92:60:3f:0d:4e:a1:e5:e1:01:7a:cb:cc:cc:58:de:aa:cb:62:
02:2d:b3:d6:e5:70:d4:4c:4d:cd:c4:6c:87:83:32:e4:59:36:
59:da:96:a5:81:69:3e:3a:2a:5a:ea:46:3e:64:e8:99:b6:b8:
87:bc:57:4d:ca:c6:be:30:82:6d:54:fc:2d:79:a5:8e:c6:75:
a6:ac:9b:8f:9f:a9:9e:0a:aa:fb:53:ea:51:76:9c:48:f3:d1:
08:1f:09:67:e1:6e:e7:24:e9:a7:5a:ad:16:83:34:39:c6:f4:
69:6d:d4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:50:51 2025 by rpki-client