Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.mft
File: FgWNKEMMTknmGlivT9em9lbt_Z4.mft (raw, json)
Hash identifier: DodAOJvqBSW7WFV/yJMiFFxVxqhSnNUT9DVmW3msZjE=
Subject key identifier: A4:9B:41:87:3F:35:DE:1B:A6:5C:09:D1:FF:BE:41:D2:57:54:63:AE
Authority key identifier: 16:05:8D:28:43:0C:4E:49:E6:1A:58:AF:4F:D7:A6:F6:56:ED:FD:9E
Certificate issuer: /CN=16058d28430c4e49e61a58af4fd7a6f656edfd9e
Certificate serial: 0197CFBD32432BAE319DED3C16CDEE5796CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgWNKEMMTknmGlivT9em9lbt_Z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.mft
Manifest number: 10CA
Signing time: Thu 03 Jul 2025 10:02:52 +0000
Manifest this update: Thu 03 Jul 2025 10:02:52 +0000
Manifest next update: Fri 04 Jul 2025 10:02:52 +0000
Files and hashes: 1: FgWNKEMMTknmGlivT9em9lbt_Z4.crl (hash: tGVCIN4omCMFlZOz/CJUELU0aOHmU6l4GfrPufoAQxw=)
2: sHwtxq6vNU_20TTJKVKHNMboy68.roa (hash: e+pIPXszPmA0jYLK/3ZYIDt9j7uU5CIIUFy94OjzT34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgWNKEMMTknmGlivT9em9lbt_Z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 10:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:bd:32:43:2b:ae:31:9d:ed:3c:16:cd:ee:57:96:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16058d28430c4e49e61a58af4fd7a6f656edfd9e
Validity
Not Before: Jul 3 10:02:52 2025 GMT
Not After : Jul 4 10:02:52 2025 GMT
Subject: CN=a49b41873f35de1ba65c09d1ffbe41d2575463ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ed:ba:db:69:6d:70:1d:be:7f:c4:55:37:2e:
0b:23:85:c6:ad:cf:71:20:58:ec:b3:23:03:b6:45:
b4:c0:2c:d1:9d:cb:ad:1e:e6:c1:c7:c5:88:09:ac:
9b:58:33:ac:88:79:b6:92:c0:39:69:bd:a6:15:06:
fb:e7:02:e4:60:7e:94:f0:9c:1b:18:77:44:f2:95:
b0:c0:b3:53:43:c2:b3:1d:d2:61:2a:33:ae:b1:86:
b4:90:38:f8:18:47:60:24:d2:2a:a6:f6:1a:42:fa:
21:c3:67:d3:06:e7:e4:5e:e2:e9:ac:60:db:a0:ec:
63:c2:68:09:94:87:dd:c3:b1:8c:f3:24:92:0a:4f:
30:d0:f8:f2:b6:6a:6a:4e:5a:7f:2b:f1:32:8f:7f:
5c:28:73:c4:43:a5:14:ff:20:88:2e:e1:7b:05:e2:
00:fd:03:d1:9a:1b:9b:7f:65:f8:a8:3d:d6:76:49:
4c:05:1e:c7:79:54:7b:de:b4:5c:50:e6:22:88:bc:
6b:7a:ca:28:9b:98:be:db:0b:cf:96:31:55:3f:ea:
80:57:21:80:1e:ad:af:37:6b:48:9d:2d:72:04:59:
9b:24:a5:09:14:4a:f4:8c:07:16:74:e3:a1:80:71:
49:f4:0e:3f:e5:d9:45:03:6a:90:99:e2:ea:60:54:
e3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9B:41:87:3F:35:DE:1B:A6:5C:09:D1:FF:BE:41:D2:57:54:63:AE
X509v3 Authority Key Identifier:
keyid:16:05:8D:28:43:0C:4E:49:E6:1A:58:AF:4F:D7:A6:F6:56:ED:FD:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgWNKEMMTknmGlivT9em9lbt_Z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e6:93:ec:71:e7:75:b6:e2:dc:64:90:f3:41:d0:eb:0a:ab:
34:c0:45:34:4b:ce:0d:e6:38:c5:03:d3:4f:f9:21:d6:2f:8d:
e4:f6:5a:83:bb:de:ad:97:80:42:df:d9:ee:6e:be:af:bd:57:
c9:24:ea:cb:32:ef:9d:95:62:cd:a5:1e:81:df:86:d2:f7:03:
2c:d9:c2:37:5e:1f:b7:be:3f:ff:50:df:6a:0d:ad:74:6f:ee:
b5:f7:e6:34:c8:1d:5e:d4:89:b3:65:4e:7b:97:50:32:c6:78:
bc:0d:d8:1f:98:7a:5c:07:b0:0b:4a:43:a3:69:e2:97:5c:67:
c3:2e:d9:eb:48:b6:b5:a9:6c:8b:97:b3:55:8a:ab:54:a5:8f:
9c:86:19:b3:1e:59:6e:18:83:2d:7f:e1:7c:1b:fe:b6:96:f7:
91:87:aa:2a:9d:f5:5a:ea:9b:cd:61:c0:85:d2:5f:85:1b:2f:
9c:05:3c:ae:b1:21:fb:6d:df:30:ad:e5:84:8e:aa:57:f6:30:
23:38:51:16:b6:ae:46:fb:a6:7d:db:89:de:70:28:3b:5a:cb:
58:c4:fd:d4:f2:fa:b3:88:1e:f6:ac:7d:a1:64:68:dd:b5:cf:
96:13:90:5d:5d:f1:08:79:54:02:a8:76:97:2e:02:81:19:34:
ea:7e:ce:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 19:17:15 2025 by rpki-client