Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
File: FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json)
Hash identifier: fTIgxT2aoAxtmiGNnTN+i9RaywV9ru4gK2Z5PVJ0IH0=
Subject key identifier: 20:1F:4E:25:06:8A:BD:33:62:A7:5A:53:83:9E:16:9E:C3:04:55:1B
Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
Certificate issuer: /CN=16655e5595f5a3c071c12b179db9279dc7db0913
Certificate serial: 01976DABD83B89378FE6AE75E9CDB75259B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
Manifest number: 0EA5
Signing time: Sat 14 Jun 2025 09:01:07 +0000
Manifest this update: Sat 14 Jun 2025 09:01:07 +0000
Manifest next update: Sun 15 Jun 2025 09:01:07 +0000
Files and hashes: 1: ECVhbk7HslDK7Yab6tRyfcUTM-w.roa (hash: Zu9vU6DdogZHy9494u0UUYh7x1SUMPG2Ju9mrOac5EY=)
2: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: PvbSQf0/lv9pwK3BX3e+3khhCWbirXjRyzJtSs6+eGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:d8:3b:89:37:8f:e6:ae:75:e9:cd:b7:52:59:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913
Validity
Not Before: Jun 14 09:01:07 2025 GMT
Not After : Jun 15 09:01:07 2025 GMT
Subject: CN=201f4e25068abd3362a75a53839e169ec304551b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c8:1f:be:fc:eb:2b:c2:40:14:82:1f:dd:97:
13:8d:7e:2f:d5:55:f9:41:48:17:a0:38:54:e8:2a:
06:ed:d4:3f:5f:b3:66:f8:22:ed:75:86:2e:db:6a:
d7:19:9b:7e:c7:f1:3f:1e:b6:21:76:24:a1:2e:0e:
89:5a:1d:64:4d:18:5e:f4:c3:2d:31:35:ce:99:5a:
25:0a:86:19:08:92:b9:71:e7:ec:a6:77:7c:7f:90:
8f:47:1d:b8:98:66:39:a3:99:73:cf:8f:a3:a4:7e:
76:d8:e8:bd:c1:2a:96:2c:f3:4c:30:fb:47:65:f8:
cd:94:03:2f:b3:a9:e6:0a:5a:02:e3:5b:55:16:ea:
8e:ba:a4:9b:37:43:ca:14:63:2b:03:f2:1f:30:df:
55:be:92:14:4b:0d:be:d9:8c:c6:f4:d1:e4:6d:51:
f4:59:ba:1b:9f:5f:fb:14:fe:f8:d7:8b:a5:03:85:
65:64:04:33:d1:b4:af:b3:4c:d0:69:c3:06:28:2a:
29:b5:63:d7:b8:20:60:04:b0:71:d1:f3:d6:77:fa:
77:8f:df:80:57:df:17:57:f5:c1:3e:33:9c:2e:67:
47:94:e6:51:4a:9e:8f:69:37:c0:b9:6b:78:53:5a:
9d:ad:c5:7e:45:2b:4c:89:f7:01:29:40:46:26:76:
b4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1F:4E:25:06:8A:BD:33:62:A7:5A:53:83:9E:16:9E:C3:04:55:1B
X509v3 Authority Key Identifier:
keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:70:fb:d4:d4:b0:11:26:ba:66:d2:26:bf:78:db:60:36:90:
b1:0f:79:9b:62:5e:d0:ba:d1:22:88:52:a5:88:b8:f0:f8:34:
ef:35:f5:7d:3d:84:ed:6d:f6:a4:8a:1b:dd:44:2a:47:65:1d:
a2:51:3a:48:9c:03:6b:d9:32:d5:c2:d2:64:62:bc:fb:9a:24:
ee:1f:ed:af:e1:85:f1:d9:3b:2b:07:2c:b8:bb:07:c3:db:89:
ce:11:12:15:e2:24:a8:6a:65:10:4c:3e:86:b4:ba:18:71:de:
05:53:6f:9d:e5:09:a6:e7:30:3f:84:45:4c:9a:a1:fa:f1:84:
04:12:39:a0:4e:55:5a:99:1b:21:df:ad:e4:6d:09:ba:f1:f4:
f7:56:25:1e:37:ab:da:82:67:2f:fe:ee:f2:fa:28:84:01:a1:
cb:0f:49:48:94:3a:fe:49:b6:f1:98:df:1e:77:1e:ca:c7:8c:
8c:d3:6f:10:ad:50:2b:54:53:41:98:40:f2:8c:4c:e8:82:19:
60:49:91:c1:7c:76:d5:a4:c9:5a:67:73:33:a5:63:91:ef:c3:
c0:45:cb:52:38:3f:52:c8:d3:4a:ba:0a:32:04:ba:76:00:2a:
3d:8b:0d:0b:b0:d6:ad:46:da:d8:9f:09:c9:86:fc:18:72:4d:
19:0f:6c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:19:13 2025 by rpki-client