Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
File: FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft (raw, json)
Hash identifier: yb3tuIrlD/uxIIur0gHIIOyWlEAGMDh/Qw9wkiSswwc=
Subject key identifier: 76:6C:DE:6A:47:C4:A6:70:8F:12:C7:F1:CF:64:78:7D:85:19:0F:91
Authority key identifier: 14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
Certificate issuer: /CN=1495c6f815c70ef1910d37493963445af918ab59
Certificate serial: 01976929FD353657D631F6A7F162CE1A909F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 12:00:48 +0000
Manifest this update: Fri 13 Jun 2025 12:00:48 +0000
Manifest next update: Sat 14 Jun 2025 12:00:48 +0000
Files and hashes: 1: FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl (hash: HHUBR6pDcL1LkumVeH5A7DNZxuZ6B7oeR1s4+aE+Gus=)
2: pS03aj6wmU86Zu9PqgpTPjvPCgM.roa (hash: aUGGuBTytMASII0PgxjFCUwQN+XTGnbhLsjxVU+JfJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:fd:35:36:57:d6:31:f6:a7:f1:62:ce:1a:90:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1495c6f815c70ef1910d37493963445af918ab59
Validity
Not Before: Jun 13 12:00:48 2025 GMT
Not After : Jun 14 12:00:48 2025 GMT
Subject: CN=766cde6a47c4a6708f12c7f1cf64787d85190f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b8:73:ed:22:cd:5d:32:01:b9:b5:d4:a1:7e:
e8:8a:6f:e8:b5:00:85:ce:2c:39:d4:df:d6:3a:47:
f0:fa:73:06:d3:38:59:54:bc:f9:da:62:a8:9b:e1:
6a:94:fb:e5:70:a7:25:07:0e:b6:3b:4b:7d:d4:dd:
14:f9:96:83:25:bc:41:dc:6c:36:89:39:b5:c5:a5:
8e:de:57:66:79:72:ee:75:dd:b8:c3:2c:aa:bc:9e:
44:ab:0a:dc:96:4b:a5:aa:f3:00:ff:e8:c7:f9:aa:
70:a7:fb:98:42:f6:a5:ed:2b:f0:b5:2a:20:40:f2:
33:33:05:83:e2:f5:d0:c2:89:d1:85:bf:c1:fd:55:
93:2d:36:85:03:0a:1c:cb:74:c6:f0:f7:c7:25:18:
cc:9c:ed:b1:67:25:f0:2b:64:f1:d9:5f:ad:b6:ad:
c9:61:02:c8:b0:dd:03:75:29:07:11:5f:e7:7c:ae:
5d:2d:b7:55:07:b5:91:34:fc:f6:ab:01:5e:c8:98:
18:3a:0f:cb:7b:f2:02:16:3a:e0:c8:d2:a7:b1:a0:
9f:46:d7:7b:af:e0:8c:0b:9b:fc:cd:11:fd:c7:fb:
e0:3c:84:cc:cf:31:73:c4:c4:5d:d7:82:94:b2:1b:
4b:3f:c2:67:04:5e:1f:bd:fc:41:06:12:f4:f0:45:
40:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6C:DE:6A:47:C4:A6:70:8F:12:C7:F1:CF:64:78:7D:85:19:0F:91
X509v3 Authority Key Identifier:
keyid:14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f7:96:6d:43:04:57:13:26:20:4f:f8:8c:7e:f1:ce:7d:39:
69:20:24:0c:f5:15:c1:01:28:b0:b9:e1:34:55:6b:72:ad:9f:
eb:ce:99:19:cd:49:e1:fb:be:71:77:93:20:d0:fc:aa:19:5e:
78:6b:17:e7:00:ef:17:fb:5d:03:05:83:4d:3b:63:5e:af:87:
15:9f:6d:c0:ee:a5:0d:e0:63:70:43:31:43:59:6e:a5:e4:2c:
bf:0b:c0:9c:ce:94:e9:6e:c7:e1:ea:a9:76:77:ca:52:9d:2f:
5d:31:1b:f0:8a:dd:25:e3:27:a5:3d:37:4c:45:11:57:25:42:
8b:7f:df:4c:20:e0:ca:26:1c:1c:52:b6:62:2c:1d:38:03:9a:
7b:59:f6:f7:25:ed:a9:0a:67:77:25:cf:88:33:7b:86:2f:22:
a3:5e:41:88:10:28:2d:e1:ef:93:9e:5d:86:91:04:2c:ab:00:
7c:7e:a7:f7:25:b3:9d:1b:f0:d0:09:89:f5:07:60:05:8c:82:
8e:f6:cd:65:f6:65:6a:94:a3:8b:2a:98:21:eb:68:17:6b:57:
d5:4c:40:7e:72:01:09:af:17:81:77:f7:86:26:f1:f1:44:b4:
ce:a1:6c:68:7d:0b:f1:f3:ef:9a:41:0e:b6:8b:22:63:2b:0e:
4a:58:8f:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKf01NlfWMfan8WLOGpCfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OTVjNmY4MTVjNzBlZjE5MTBkMzc0OTM5NjM0NDVhZjkx
OGFiNTkwHhcNMjUwNjEzMTIwMDQ4WhcNMjUwNjE0MTIwMDQ4WjAzMTEwLwYDVQQD
Eyg3NjZjZGU2YTQ3YzRhNjcwOGYxMmM3ZjFjZjY0Nzg3ZDg1MTkwZjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bhz7SLNXTIBubXUoX7oim/otQCF
ziw51N/WOkfw+nMG0zhZVLz52mKom+FqlPvlcKclBw62O0t91N0U+ZaDJbxB3Gw2
iTm1xaWO3ldmeXLudd24wyyqvJ5EqwrclkulqvMA/+jH+apwp/uYQval7SvwtSog
QPIzMwWD4vXQwonRhb/B/VWTLTaFAwocy3TG8PfHJRjMnO2xZyXwK2Tx2V+ttq3J
YQLIsN0DdSkHEV/nfK5dLbdVB7WRNPz2qwFeyJgYOg/Le/ICFjrgyNKnsaCfRtd7
r+CMC5v8zRH9x/vgPITMzzFzxMRd14KUshtLP8JnBF4fvfxBBhL08EVAEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZs3mpHxKZwjxLH8c9keH2FGQ+RMB8GA1UdIwQY
MBaAFBSVxvgVxw7xkQ03STljRFr5GKtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkpYRy1CWEhEdkdSRFRkSk9XTkVXdmtZcTFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zZWZkYTUtYmU4Zi00ODZkLWIwOGYt
MjUwMDQyMDM2NmZiLzEvRkpYRy1CWEhEdkdSRFRkSk9XTkVXdmtZcTFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zZWZkYTUtYmU4Zi00ODZkLWIwOGYtMjUwMDQyMDM2NmZi
LzEvRkpYRy1CWEhEdkdSRFRkSk9XTkVXdmtZcTFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPeWbUME
VxMmIE/4jH7xzn05aSAkDPUVwQEosLnhNFVrcq2f686ZGc1J4fu+cXeTIND8qhle
eGsX5wDvF/tdAwWDTTtjXq+HFZ9twO6lDeBjcEMxQ1lupeQsvwvAnM6U6W7H4eqp
dnfKUp0vXTEb8IrdJeMnpT03TEURVyVCi3/fTCDgyiYcHFK2YiwdOAOae1n29yXt
qQpndyXPiDN7hi8io15BiBAoLeHvk55dhpEELKsAfH6n9yWznRvw0AmJ9QdgBYyC
jvbNZfZlapSjiyqYIetoF2tX1UxAfnIBCa8XgXf3hibx8US0zqFsaH0L8fPvmkEO
tosiYysOSliPMQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 17:11:48 2025 by rpki-client