Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
File: FTyehIfJi0U_l08gMX7OPXD01d0.mft (raw, json)
Hash identifier: 21cagOnRNLw9kSG2CfPciaXiQBwnFCRNRBEwfW4NOCc=
Subject key identifier: 64:80:4D:7E:CB:C6:21:0E:84:97:EB:D0:45:A7:FF:0F:38:84:C7:84
Authority key identifier: 15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
Certificate issuer: /CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Certificate serial: 019748FA0BA431E9349EEBC7531EA6C0DEBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
Manifest number: 0AB7
Signing time: Sat 07 Jun 2025 06:00:35 +0000
Manifest this update: Sat 07 Jun 2025 06:00:35 +0000
Manifest next update: Sun 08 Jun 2025 06:00:35 +0000
Files and hashes: 1: FAFOi_MWA5Fo0z_m3gqA-yNR33M.roa (hash: icR2KPf1nufIDLG/nPNr5vKSnrpkA3b1gplItzO6jeQ=)
2: FTyehIfJi0U_l08gMX7OPXD01d0.crl (hash: jjxvzpIHPmQfxcg4X17bhPNa1jl6WwdmRzrLaKSFjJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:0b:a4:31:e9:34:9e:eb:c7:53:1e:a6:c0:de:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Validity
Not Before: Jun 7 06:00:35 2025 GMT
Not After : Jun 8 06:00:35 2025 GMT
Subject: CN=64804d7ecbc6210e8497ebd045a7ff0f3884c784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bd:f9:00:27:e2:ce:2f:e2:7e:fd:2c:71:8a:
42:7f:16:a0:dc:27:8b:3d:1e:93:60:b0:b4:74:65:
4a:2d:7c:ef:3c:36:d6:54:d8:fc:ce:8f:a0:11:97:
86:31:8c:10:28:e3:68:3b:b7:00:c7:9d:b4:ea:88:
fb:9f:c1:df:b3:d6:15:58:93:cc:fe:fa:63:17:61:
1c:65:fc:3f:7e:de:d2:99:8a:91:98:97:0d:a5:ae:
50:4c:e9:26:36:1d:03:00:9e:a8:1b:ba:80:48:d9:
16:93:4f:af:79:4b:9c:04:35:98:03:a8:0b:97:0e:
d4:77:a1:fc:13:de:35:e9:c2:e2:95:7d:f1:ef:f4:
51:07:12:0b:bd:5f:4b:ca:1b:26:78:86:a5:25:47:
5f:7f:cf:51:69:b7:71:f5:37:9e:4b:b1:08:db:05:
59:42:f8:d0:72:ba:55:7f:e2:84:ee:cd:11:cc:d2:
62:b4:24:36:fb:03:c8:77:f7:3a:6e:03:be:b6:96:
86:98:20:35:bb:57:35:25:9f:10:92:8f:31:0a:59:
47:1f:ad:2a:e1:9e:da:dd:cc:27:d0:df:b1:b6:25:
20:9f:86:f2:c5:9f:ae:03:e4:23:a3:12:47:d1:46:
a6:35:92:38:8a:c0:46:02:46:9f:ac:49:78:12:ff:
57:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:80:4D:7E:CB:C6:21:0E:84:97:EB:D0:45:A7:FF:0F:38:84:C7:84
X509v3 Authority Key Identifier:
keyid:15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ff:8d:d4:61:11:db:cd:d0:3a:82:19:e7:58:a0:30:35:69:
4a:37:2b:15:ec:d9:07:52:14:7f:fe:f1:52:81:20:3a:77:8b:
26:8f:cd:91:bf:d3:58:14:8b:3c:5c:9e:71:34:73:82:f1:1b:
c9:3d:42:dd:b0:8e:0e:73:24:60:ae:3a:05:74:d2:72:fd:29:
69:c6:81:89:22:2e:68:cc:3e:42:55:79:42:d6:18:7a:27:2e:
38:e7:83:64:c8:0e:73:f9:fc:db:b6:6f:66:82:a6:68:30:dd:
66:dd:11:73:d7:91:d7:2c:e5:e0:7b:ba:9e:74:27:8d:f7:53:
a0:eb:05:64:f6:07:12:96:12:91:cc:50:01:08:df:12:af:7a:
48:4c:04:d4:59:0f:63:79:f4:38:7d:b4:37:6d:c6:c7:0a:d0:
da:0d:44:2f:35:01:7f:61:ff:93:17:f9:ff:2f:87:16:c4:b4:
24:7a:fb:57:19:a9:36:0d:40:56:12:0f:a5:66:14:e6:da:60:
6d:48:b9:99:6f:e0:2f:f0:ab:06:10:12:0d:38:90:f3:02:b0:
b2:4f:a0:95:81:dd:88:ca:11:b5:9d:75:ec:1c:90:ec:85:8d:
cf:3c:7c:2b:46:e5:1e:36:5d:3d:4f:47:f2:72:f7:4d:35:05:
96:4c:e8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:38:22 2025 by rpki-client