Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
File: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft (raw, json)
Hash identifier: QcOTvZPUa3imuyKaFDb2zVvz0CB32h2IBlw6f+Lb38k=
Subject key identifier: 7B:7F:FA:F2:0F:58:30:FE:29:44:25:65:13:46:8F:2F:37:49:E8:A1
Authority key identifier: 14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
Certificate issuer: /CN=14c66a786e6ef31674bec6833c78aebec1633972
Certificate serial: 019749D60BFF265BCF5B6E3E6A1C3D7C9410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 10:00:53 +0000
Manifest this update: Sat 07 Jun 2025 10:00:53 +0000
Manifest next update: Sun 08 Jun 2025 10:00:53 +0000
Files and hashes: 1: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl (hash: BnBz/4spCx9K+gREFjYi05/D8FIHKzYfakv5/uRJl+U=)
2: TSGJBwmUH6zzcSk5BJxtW8RE4eo.roa (hash: GDRdYgmwqR/8cmIcSo9mtVpLWe+BPUg+Ymiy8VwGofg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:0b:ff:26:5b:cf:5b:6e:3e:6a:1c:3d:7c:94:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c66a786e6ef31674bec6833c78aebec1633972
Validity
Not Before: Jun 7 10:00:53 2025 GMT
Not After : Jun 8 10:00:53 2025 GMT
Subject: CN=7b7ffaf20f5830fe2944256513468f2f3749e8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:83:7e:58:da:be:4f:ac:7d:a6:55:1c:71:
ba:78:e5:2d:56:42:44:8b:a9:ba:b7:7a:f7:af:d6:
b5:c5:93:1d:df:ba:16:88:88:5f:e4:c6:c6:9f:30:
65:26:a8:49:82:29:d7:87:d9:a9:bb:49:a5:99:86:
a0:e2:ac:26:1e:d7:aa:92:55:26:5a:9a:6b:13:e0:
7c:85:7e:71:b0:cf:f0:b9:fb:99:c6:3d:0e:1b:fc:
05:2e:26:e2:d8:18:df:22:b3:cc:4a:48:0b:4a:ca:
7f:77:7e:dd:57:f3:91:b4:e4:d4:82:e3:d4:2f:05:
09:fb:4c:58:52:86:8b:3a:fb:cd:fa:f7:8c:6e:71:
14:96:a3:19:cc:d3:6a:3a:25:72:47:48:75:b7:2e:
45:05:52:69:a0:d6:31:40:04:37:06:02:df:2d:93:
66:65:fa:60:3f:30:29:c4:80:f4:a0:2e:f0:d3:7c:
a9:a2:32:a1:02:64:38:4a:b9:ac:d2:00:6d:45:af:
bf:e9:ef:e0:20:14:1b:c5:95:9b:24:2c:09:68:b5:
59:15:7a:44:32:85:ef:cd:fd:6a:f1:b0:ef:56:79:
c6:76:53:57:ed:ae:a1:1e:e6:86:da:c8:a9:c2:74:
60:e1:19:bd:dc:45:ac:f5:97:6d:7f:74:3d:b9:e6:
da:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7F:FA:F2:0F:58:30:FE:29:44:25:65:13:46:8F:2F:37:49:E8:A1
X509v3 Authority Key Identifier:
keyid:14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6f:4f:81:f0:a8:dc:c1:12:21:e6:2b:50:82:86:d7:e6:85:
39:af:b7:4b:e3:31:17:08:95:61:23:4f:f2:38:6d:d2:85:4b:
4f:70:50:0c:58:80:30:9d:fb:a9:64:cc:3a:b9:af:8d:06:02:
23:41:86:fd:83:96:e8:a3:6f:c0:92:c1:24:57:88:e1:99:f3:
49:4f:ee:84:e1:c1:2e:39:68:78:3c:d2:0f:4d:00:79:9f:04:
72:3f:26:08:30:59:3f:7c:49:16:c7:8c:de:d7:dd:59:34:55:
45:2d:00:27:c0:0e:33:21:d1:f3:ae:fe:39:5e:ef:1b:9a:5b:
12:30:ba:d5:85:50:c7:68:e0:3e:87:39:c1:a1:49:7f:17:39:
37:cc:71:8a:9d:32:4d:a6:b2:5c:4c:76:81:de:fb:2f:b9:de:
0b:f6:91:c8:f4:e7:0e:9d:91:33:b4:c0:21:1d:d1:91:4f:38:
e4:90:03:f4:19:c3:74:54:3c:32:6d:49:24:ef:01:3c:45:ff:
81:a7:fc:a4:ed:38:14:75:20:dd:cc:41:ec:cc:5b:79:70:23:
81:70:3d:d4:05:08:99:3e:de:cd:87:ab:77:1d:fc:d6:4b:dc:
12:c6:14:8c:2b:52:b1:39:18:9a:e8:d4:88:28:60:0c:81:c7:
8f:7f:8f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:44:08 2025 by rpki-client