Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
File: FIa0oIrOYOZw7c2J-tslQBFWL1M.mft (raw, json)
Hash identifier: C2tGlHs9LXZ27cRfPTdk+eCEX1CqBdVx6GL2aB/9I+Y=
Subject key identifier: 33:F8:90:DE:23:93:2C:BB:3D:87:36:FC:49:40:64:8E:99:DC:24:CE
Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Certificate issuer: /CN=1486b4a08ace60e670edcd89fadb254011562f53
Certificate serial: 01974D44F2812605E83F9CFB84AD9A8CFE25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
Manifest number: 040D
Signing time: Sun 08 Jun 2025 02:00:53 +0000
Manifest this update: Sun 08 Jun 2025 02:00:53 +0000
Manifest next update: Mon 09 Jun 2025 02:00:53 +0000
Files and hashes: 1: 0hE7yQkOsQYY1LQEos4wbxzkfnM.roa (hash: 70ia36yz/7UQliy+dQ5lEepwXI+ufgIzVRbaE7lLztM=)
2: FIa0oIrOYOZw7c2J-tslQBFWL1M.crl (hash: C45659EtuqTNIZEOu4e7wKOcHRdiKhb3qA6KbImsNOg=)
3: YQdnp2VC261uNxqE4Oc-a1f9tGg.roa (hash: XivO/rYxkKb4OFfhsRiFIwL10Nr1ukhnz5M4clOZFnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:f2:81:26:05:e8:3f:9c:fb:84:ad:9a:8c:fe:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53
Validity
Not Before: Jun 8 02:00:53 2025 GMT
Not After : Jun 9 02:00:53 2025 GMT
Subject: CN=33f890de23932cbb3d8736fc4940648e99dc24ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:f8:14:9c:01:71:b3:bf:a8:cf:d8:b1:88:
26:03:55:58:80:c0:ad:e4:58:20:d2:be:3c:a1:bb:
77:ee:b2:98:0a:14:45:7c:85:f4:66:40:69:d6:d8:
fd:91:74:42:33:09:3b:6c:f6:f1:aa:41:cc:db:c4:
14:60:62:ca:d8:c5:d3:e2:f7:18:d7:73:b1:14:b2:
b9:94:c2:bb:6b:a5:95:2d:cd:54:ad:8c:ed:42:46:
d9:66:f4:ba:51:54:92:91:97:4e:60:b8:6c:c6:eb:
89:bd:7e:52:cd:af:11:5e:08:7b:e3:aa:a4:bc:b9:
0d:dc:71:57:88:14:6e:9a:dc:16:ff:a7:bc:f5:d4:
fa:85:54:dd:1e:1b:be:f7:c6:69:64:d9:b2:4b:93:
52:34:78:bf:f0:3f:bc:bc:f6:c6:a0:59:a5:19:10:
53:d7:98:98:eb:6d:98:0e:07:ff:08:a3:73:74:0d:
9c:73:99:44:be:78:7e:71:77:37:a4:d9:de:6d:8b:
c3:db:83:46:8e:2a:bb:ed:ab:f0:5a:a0:eb:2a:04:
15:b1:91:a8:d1:a8:0e:72:84:25:1e:4e:22:e6:9a:
e7:20:8c:64:31:84:23:64:4b:13:e3:38:54:71:6a:
1b:a8:61:b9:01:88:ce:ff:46:c7:67:e7:21:3a:62:
82:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F8:90:DE:23:93:2C:BB:3D:87:36:FC:49:40:64:8E:99:DC:24:CE
X509v3 Authority Key Identifier:
keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:8f:29:d6:87:04:28:2f:f9:1a:bb:bc:ef:d8:09:9e:1d:7f:
ec:4e:a3:0f:28:26:b6:6a:a0:97:58:8b:c3:62:33:92:83:0f:
58:da:ab:00:6c:96:09:b9:42:5e:47:29:70:3b:b0:17:9c:cb:
4b:61:6f:c8:8e:e0:cb:e1:54:0d:1c:f3:5e:c3:1f:84:ec:42:
ec:73:43:bc:48:68:c9:b7:ea:c7:52:7b:e6:c3:af:1c:de:4a:
63:5d:f1:e5:a7:66:09:9c:9a:30:44:d2:59:fa:ad:74:dd:77:
a3:49:cb:58:f3:08:b7:eb:40:56:80:46:ee:89:c7:e1:7b:60:
dd:4b:a9:86:db:d2:3e:0f:8b:5b:82:a5:23:c4:bf:56:90:8e:
d9:05:93:20:82:2f:1d:b3:9a:bc:b7:f4:b5:cd:79:67:bd:a3:
0b:dc:50:e7:1f:28:d2:dc:04:61:7c:65:fd:05:a2:9a:54:90:
b3:28:96:2c:97:c1:72:c9:9a:a4:26:6b:d2:4e:66:33:b0:7d:
ea:0d:a0:6c:1e:df:36:0e:25:36:b5:5e:10:11:9d:8e:d4:b5:
de:b9:10:40:fd:c2:ae:bb:10:90:ed:7e:78:e0:8e:17:0f:28:
8f:c7:7d:05:a0:5e:d5:e5:02:0f:fa:9b:d8:50:af:6b:b9:55:
9a:94:7b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:42:22 2025 by rpki-client