Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
File: FpfEbq-hDsXZB7sF43EjtpKrSUw.mft (raw, json)
Hash identifier: fcJaUTs7DGMn88DLVey2OcIj5wE7lrtx9wtk6GESOK8=
Subject key identifier: 6C:66:D9:61:2B:46:35:D1:DB:B6:82:11:FC:AE:F2:7A:C6:98:8C:BF
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 019751217D595402BF3772631A02947B4DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
Manifest number: 152E
Signing time: Sun 08 Jun 2025 20:00:38 +0000
Manifest this update: Sun 08 Jun 2025 20:00:38 +0000
Manifest next update: Mon 09 Jun 2025 20:00:38 +0000
Files and hashes: 1: FpfEbq-hDsXZB7sF43EjtpKrSUw.crl (hash: bE/psAPfv945k3w66GLr3yRapdAWf3VA0pW6U8BN5KU=)
2: XWiker2v7GIlhkuZZtR48lVm108.roa (hash: NhUbFkPuOTxAHiVlHIvGiCnLEnSRvJwEzL+UojBb8qg=)
3: zJ5MYEMzWfucEDGxLfmRzsaSeEg.roa (hash: 13et8HkfUmrO0+ptVe41OzMBwG62Ru5G13R9afNJkP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:7d:59:54:02:bf:37:72:63:1a:02:94:7b:4d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: Jun 8 20:00:38 2025 GMT
Not After : Jun 9 20:00:38 2025 GMT
Subject: CN=6c66d9612b4635d1dbb68211fcaef27ac6988cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:3c:7c:1c:3c:e0:77:98:47:7b:4b:0c:7f:
f8:ee:ed:40:97:3b:cd:f1:fd:18:75:7f:35:df:fc:
d0:9a:86:7a:2b:29:58:90:cf:78:37:a6:03:bf:f2:
0f:1e:de:a4:64:c9:69:f9:d0:6f:0e:cf:b8:b7:05:
5a:76:f3:b2:f3:c2:83:ad:a5:13:f3:ba:20:3d:d8:
e0:d2:b9:72:18:2c:bd:85:22:88:77:34:09:d8:60:
9e:9c:61:58:b6:2d:d1:89:c5:49:72:93:23:cc:ad:
2e:de:e3:8c:d7:f0:65:08:46:81:83:f3:f7:02:25:
74:6e:34:6b:18:d7:b3:70:d9:0f:d4:30:7c:20:d9:
39:b3:12:85:17:8f:cd:ce:07:e6:ba:1c:45:cb:82:
5d:05:98:72:eb:28:33:43:ce:bd:98:e1:f3:f2:70:
4e:e2:33:d6:f3:76:59:72:10:23:fa:10:35:e6:61:
35:5c:42:7b:f4:59:dc:db:34:be:a5:6b:43:73:67:
37:96:aa:e3:05:a6:d0:42:ef:f6:6d:67:5d:24:f8:
f5:be:78:a2:55:3f:48:99:e3:1d:c9:c9:b2:d7:e2:
fe:4f:aa:d5:a4:11:95:f7:09:f3:9e:7a:5d:b8:06:
45:57:4b:4f:3a:04:88:55:01:1b:cd:f2:3d:0f:25:
13:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:66:D9:61:2B:46:35:D1:DB:B6:82:11:FC:AE:F2:7A:C6:98:8C:BF
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b5:d6:90:09:ab:0d:c3:5a:ba:d5:10:4b:af:de:03:6e:ee:
94:9f:40:59:8b:50:b5:67:a8:a9:ea:4b:14:90:7b:f7:52:f2:
ce:98:c9:3d:d2:d3:f6:64:65:ec:23:61:8a:59:97:ef:da:16:
07:91:4e:4c:c4:6a:2d:5c:b3:22:ab:7d:a6:b7:cf:90:1f:9f:
cc:23:82:30:e2:3f:1a:06:c0:6c:50:68:72:99:5a:44:45:fb:
ed:10:52:22:f2:8a:d3:35:fb:f9:5c:3e:ed:3b:be:7c:ab:ec:
71:2b:20:97:6e:30:c9:4c:ce:e2:98:36:e3:39:f3:16:36:39:
19:2d:66:a5:d7:3c:0b:a2:90:24:d5:ef:2a:c5:f9:89:f6:65:
e7:db:5a:e7:3e:8d:c5:91:6d:0f:3e:36:25:0b:3f:f4:11:2d:
a4:85:08:8d:94:4c:3d:44:8d:00:13:57:ff:64:44:80:10:a5:
36:73:06:b6:77:b2:90:58:b5:c1:ec:28:03:f8:c2:c5:0b:3b:
cf:f4:bd:96:bd:a0:7f:36:91:fb:11:91:86:fb:31:b1:22:01:
7b:fe:92:e1:46:20:04:b9:53:f5:d5:39:e4:83:90:f5:09:d0:
ae:b3:9a:56:29:f1:91:ef:80:b1:ef:cd:73:db:b3:e3:a1:c7:
4d:72:7f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:01:15 2025 by rpki-client