Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
File: FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft (raw, json)
Hash identifier: 8nLe4WwhL5ymahyHdFr5uSRDQydipRnUUptrqzEUH50=
Subject key identifier: A9:24:DA:7C:99:34:0A:E0:AD:D7:2E:5B:15:2B:26:E7:13:2E:78:D1
Authority key identifier: 14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
Certificate issuer: /CN=1495c6f815c70ef1910d37493963445af918ab59
Certificate serial: 01975F81C1BCD3ABE1AD00EE144EB97DFED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
Manifest number: 1588
Signing time: Wed 11 Jun 2025 15:00:28 +0000
Manifest this update: Wed 11 Jun 2025 15:00:28 +0000
Manifest next update: Thu 12 Jun 2025 15:00:28 +0000
Files and hashes: 1: FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl (hash: KFNT4rznE/5VYfOSJbyBjix7DZkRQnP5WVdSCxK2HMA=)
2: pS03aj6wmU86Zu9PqgpTPjvPCgM.roa (hash: aUGGuBTytMASII0PgxjFCUwQN+XTGnbhLsjxVU+JfJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:81:c1:bc:d3:ab:e1:ad:00:ee:14:4e:b9:7d:fe:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1495c6f815c70ef1910d37493963445af918ab59
Validity
Not Before: Jun 11 15:00:28 2025 GMT
Not After : Jun 12 15:00:28 2025 GMT
Subject: CN=a924da7c99340ae0add72e5b152b26e7132e78d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:3b:a5:6e:16:d2:2e:e5:d3:2d:dd:d3:42:b8:
05:4c:45:b2:cd:d9:11:66:af:c6:c4:6d:09:23:fa:
0e:cb:b0:a0:df:e3:5c:b6:ca:a3:28:37:a2:2d:69:
87:54:9d:10:0c:ec:3f:a4:3d:e8:b1:29:08:fb:94:
2e:8c:73:8f:42:46:59:51:1e:e8:60:6a:a7:33:01:
a5:a3:3e:1f:87:b0:ba:ec:d9:11:15:53:f6:6f:ba:
99:f6:df:2c:24:97:ea:82:75:db:e5:09:b9:34:60:
3f:2f:6b:00:b7:dc:09:87:62:2a:1a:bb:06:e3:11:
81:bb:66:bb:dd:7a:a1:90:9a:42:ce:6e:49:2c:2c:
e6:d0:22:37:02:57:7d:61:f6:ba:1e:01:06:51:b2:
3c:88:cf:61:2d:2c:24:38:a8:9a:23:53:1b:d5:c8:
93:9e:3c:f4:e5:f3:92:68:6b:51:1d:d9:0c:52:ca:
7c:82:0e:66:bb:3d:12:eb:e5:bc:4c:43:85:7d:1a:
4d:55:67:ce:8b:10:ba:3b:37:5e:dd:2f:aa:52:09:
03:01:3d:af:85:5e:c2:76:ca:6f:3c:10:7d:3f:aa:
22:48:97:10:b8:d1:c9:42:84:a1:46:c3:5b:c1:ae:
14:7b:4c:f1:e9:e1:9a:2f:50:ba:1c:57:49:fc:ee:
d1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:24:DA:7C:99:34:0A:E0:AD:D7:2E:5B:15:2B:26:E7:13:2E:78:D1
X509v3 Authority Key Identifier:
keyid:14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d2:d2:85:fc:24:9e:e9:c8:db:1c:4f:f4:31:35:8f:49:55:
2f:e9:a1:c8:0a:39:74:08:e3:b0:40:77:2e:16:c8:7c:21:80:
34:a0:fe:2e:97:df:25:72:e6:f7:1d:65:01:61:c8:a4:82:72:
6e:a6:a1:7d:18:95:e3:12:9a:c7:a3:7b:13:4d:db:d4:e9:54:
c6:45:13:79:62:c4:0f:07:72:57:cd:a1:11:64:88:12:ef:d5:
bb:c3:26:eb:04:bd:74:26:84:2b:c2:54:d4:45:a9:c3:ef:dc:
c0:1f:11:69:ea:4c:b1:6d:0b:46:5e:a5:1a:0e:bc:2b:6a:8b:
3e:50:09:d7:ee:48:e7:bd:c1:a8:bf:b2:9b:fd:54:18:3a:e1:
78:c4:55:d8:ad:93:1c:5e:4a:5e:3c:b0:9d:f2:48:34:e5:55:
be:b5:0f:c8:ed:46:2b:24:dc:b6:3e:ea:1f:f2:c3:fe:23:36:
42:ce:a5:e5:a2:67:e9:b1:a0:09:54:20:7f:17:03:12:af:33:
a3:bb:28:a2:c8:7b:c6:77:9c:da:48:da:85:ce:e7:f1:7d:e5:
7b:67:a8:db:1f:bb:21:68:a5:5b:69:00:65:0a:49:52:c8:45:
2c:42:0d:33:88:52:9a:32:bd:e7:32:10:6f:ee:2f:38:f6:44:
91:12:e6:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdfgcG806vhrQDuFE65ff7QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OTVjNmY4MTVjNzBlZjE5MTBkMzc0OTM5NjM0NDVhZjkx
OGFiNTkwHhcNMjUwNjExMTUwMDI4WhcNMjUwNjEyMTUwMDI4WjAzMTEwLwYDVQQD
EyhhOTI0ZGE3Yzk5MzQwYWUwYWRkNzJlNWIxNTJiMjZlNzEzMmU3OGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+TulbhbSLuXTLd3TQrgFTEWyzdkR
Zq/GxG0JI/oOy7Cg3+NctsqjKDeiLWmHVJ0QDOw/pD3osSkI+5QujHOPQkZZUR7o
YGqnMwGloz4fh7C67NkRFVP2b7qZ9t8sJJfqgnXb5Qm5NGA/L2sAt9wJh2IqGrsG
4xGBu2a73XqhkJpCzm5JLCzm0CI3Ald9Yfa6HgEGUbI8iM9hLSwkOKiaI1Mb1ciT
njz05fOSaGtRHdkMUsp8gg5muz0S6+W8TEOFfRpNVWfOixC6Ozde3S+qUgkDAT2v
hV7CdspvPBB9P6oiSJcQuNHJQoShRsNbwa4Ue0zx6eGaL1C6HFdJ/O7RewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkk2nyZNArgrdcuWxUrJucTLnjRMB8GA1UdIwQY
MBaAFBSVxvgVxw7xkQ03STljRFr5GKtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkpYRy1CWEhEdkdSRFRkSk9XTkVXdmtZcTFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zZWZkYTUtYmU4Zi00ODZkLWIwOGYt
MjUwMDQyMDM2NmZiLzEvRkpYRy1CWEhEdkdSRFRkSk9XTkVXdmtZcTFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zZWZkYTUtYmU4Zi00ODZkLWIwOGYtMjUwMDQyMDM2NmZi
LzEvRkpYRy1CWEhEdkdSRFRkSk9XTkVXdmtZcTFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddLShfwk
nunI2xxP9DE1j0lVL+mhyAo5dAjjsEB3LhbIfCGANKD+LpffJXLm9x1lAWHIpIJy
bqahfRiV4xKax6N7E03b1OlUxkUTeWLEDwdyV82hEWSIEu/Vu8Mm6wS9dCaEK8JU
1EWpw+/cwB8RaepMsW0LRl6lGg68K2qLPlAJ1+5I573BqL+ym/1UGDrheMRV2K2T
HF5KXjywnfJINOVVvrUPyO1GKyTctj7qH/LD/iM2Qs6l5aJn6bGgCVQgfxcDEq8z
o7soosh7xnec2kjahc7n8X3le2eo2x+7IWilW2kAZQpJUshFLEINM4hSmjK95zIQ
b+4vOPZEkRLmXA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 21:57:37 2025 by rpki-client