Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
File: FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft (raw, json)
Hash identifier: jMHeA35QCsXdJ1aeA8xTqW8hNJQI7qtHvpp0cpY/Kps=
Subject key identifier: 5D:85:98:B0:D1:3E:9D:D0:34:92:A3:0C:CB:69:75:74:A6:68:97:BE
Authority key identifier: 14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
Certificate issuer: /CN=1495c6f815c70ef1910d37493963445af918ab59
Certificate serial: 01975D938519ADD624D0A539BADDF29A13F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
Manifest number: 1587
Signing time: Wed 11 Jun 2025 06:00:38 +0000
Manifest this update: Wed 11 Jun 2025 06:00:38 +0000
Manifest next update: Thu 12 Jun 2025 06:00:38 +0000
Files and hashes: 1: FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl (hash: QuW4eCLK2V5blFz1grPWyHugLAWjxr4SnQX0NFg8p7I=)
2: pS03aj6wmU86Zu9PqgpTPjvPCgM.roa (hash: aUGGuBTytMASII0PgxjFCUwQN+XTGnbhLsjxVU+JfJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:93:85:19:ad:d6:24:d0:a5:39:ba:dd:f2:9a:13:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1495c6f815c70ef1910d37493963445af918ab59
Validity
Not Before: Jun 11 06:00:38 2025 GMT
Not After : Jun 12 06:00:38 2025 GMT
Subject: CN=5d8598b0d13e9dd03492a30ccb697574a66897be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:24:63:0d:f2:9c:71:6b:f3:b9:7b:15:0e:8f:
15:83:96:ee:dd:a8:38:59:d9:62:91:a3:24:b7:28:
08:f2:d7:64:fa:e0:67:a0:6c:11:bd:28:0f:c8:f3:
a1:52:33:8d:03:21:69:9f:4d:c3:31:a9:e8:7b:6b:
35:b5:53:08:bb:9f:05:b3:44:7a:5d:55:97:db:c2:
fa:44:08:5e:bb:0f:0a:19:d0:5f:e0:b5:ff:9b:cf:
c1:d9:c3:5b:80:30:4d:51:f4:8a:be:22:93:53:49:
2c:04:7d:21:ad:f4:e8:35:31:1b:4a:6f:64:24:39:
82:2e:ec:8d:58:d7:c0:bb:b9:79:2b:73:5b:75:3b:
50:72:34:09:1a:79:61:dd:70:f2:fb:ce:a0:66:68:
33:e7:67:58:65:a7:2e:ec:4b:ca:41:e6:06:ba:9c:
39:b9:c3:0b:f1:7f:cf:7a:cb:db:64:60:4f:c4:a5:
02:bd:cf:15:ba:c0:c4:89:25:fe:3d:08:6b:83:28:
26:28:67:a7:a3:d0:b1:bf:bb:ab:ce:f8:39:1f:00:
59:bf:8a:31:8c:6e:1b:89:e2:37:55:2d:1e:38:e7:
de:9b:74:a0:0a:b5:67:e5:18:52:e8:40:78:e5:61:
da:ed:c1:d7:3c:82:ab:25:23:65:5c:b1:c8:68:85:
c3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:85:98:B0:D1:3E:9D:D0:34:92:A3:0C:CB:69:75:74:A6:68:97:BE
X509v3 Authority Key Identifier:
keyid:14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:31:d0:72:f2:1d:ac:e1:63:62:5b:d4:aa:bc:10:52:48:fb:
2d:2c:66:a6:0d:58:db:7e:77:5f:2b:ea:85:4b:6b:d8:01:21:
eb:b8:0a:7b:b8:ed:52:8c:a8:2a:e6:2e:67:f4:72:f2:3b:79:
a5:ce:23:39:6a:68:90:bf:ee:38:af:3d:b6:d7:1e:8e:db:8c:
7a:12:38:27:01:73:9f:92:9b:df:01:41:2f:03:9f:03:42:91:
95:41:0a:1e:98:a1:8b:11:e5:b8:36:7e:d9:55:f9:5e:6b:ea:
52:c7:aa:5d:e1:16:32:36:1f:f2:5e:3b:21:54:6c:e3:48:b0:
b2:ad:d3:f5:7e:19:ee:da:f0:bd:bd:12:9e:14:ab:f6:60:2f:
46:6f:4c:86:08:14:38:cd:b8:67:e2:cc:70:e9:db:a8:e9:fc:
92:10:3e:af:d2:8a:d1:37:bf:f4:96:57:04:2d:c7:20:5d:23:
a8:98:5f:4e:f3:5e:66:93:79:47:c2:67:e9:03:f3:76:c0:39:
02:99:15:0d:a7:1f:8e:f2:7b:ec:c5:60:04:d6:52:59:05:ce:
49:35:ed:60:c2:c8:84:7b:2b:a2:09:78:94:f4:d3:79:09:44:
db:3c:49:fa:b6:48:49:90:40:d7:89:5b:b4:4a:70:e9:54:d8:
94:ba:fc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:28:43 2025 by rpki-client