Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
File: FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft (raw, json)
Hash identifier: NZtoUUZ3Am+ruQkxDZ1sB3a3ibEJRwfZ9kmF01B5kmU=
Subject key identifier: 93:5F:11:BF:BD:A2:FA:53:DB:FC:73:12:E5:72:DC:25:AF:CB:EC:CB
Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
Certificate issuer: /CN=144b315ae0f24c891fca18456c66917792af165e
Certificate serial: 019754224D67B95E75A1CD8E8168CF004CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
Manifest number: 0EF7
Signing time: Mon 09 Jun 2025 10:00:23 +0000
Manifest this update: Mon 09 Jun 2025 10:00:23 +0000
Manifest next update: Tue 10 Jun 2025 10:00:23 +0000
Files and hashes: 1: EcUvIL1_Dl5amyDKnInMArIAHbc.roa (hash: nxHqW1T9MD+4BzwDEHiX10/m9t40K+dREd46a8WoUuw=)
2: FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl (hash: RATfpzUZJVccHZOKJ7Xfl/byr4w6oLQjLXd7QPoR8aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:4d:67:b9:5e:75:a1:cd:8e:81:68:cf:00:4c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144b315ae0f24c891fca18456c66917792af165e
Validity
Not Before: Jun 9 10:00:23 2025 GMT
Not After : Jun 10 10:00:23 2025 GMT
Subject: CN=935f11bfbda2fa53dbfc7312e572dc25afcbeccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4f:ba:c7:bf:a4:9c:a2:a2:e7:4f:04:88:72:
f8:be:de:df:09:db:a4:fa:b5:d9:ef:ea:56:3f:4b:
7c:54:98:09:b3:8e:7c:9b:80:68:cc:c9:aa:4b:1c:
b1:52:be:0f:36:98:34:fa:4e:23:df:f3:71:7a:84:
bb:84:6b:6c:a2:57:56:51:d2:57:1f:1d:12:35:b6:
f5:2d:7d:03:5f:ac:c7:f3:36:1d:71:08:d9:5e:1f:
60:4f:71:85:c0:ab:8f:27:87:72:11:b0:7b:f7:97:
b1:c7:ae:02:6c:a3:06:44:f5:34:dc:f4:d3:bc:2e:
3e:4b:4f:98:a5:22:6c:f0:31:47:5a:f4:ff:e4:5b:
c4:9e:4b:b7:bc:95:c7:50:b5:88:a3:bf:be:56:d0:
8c:6e:22:5a:6e:f1:33:02:26:f4:b4:44:46:a8:a3:
8d:78:97:dd:95:c4:73:5a:68:f5:a6:f3:9a:f7:31:
14:b4:4a:43:8d:aa:bf:e8:43:70:02:90:44:c8:aa:
e6:04:cd:a5:12:40:5d:ba:a6:59:6f:37:2c:e8:c8:
35:c6:c5:f1:4d:47:10:21:56:df:ab:e9:9a:74:53:
ff:86:41:80:02:d6:5a:fa:d5:c8:9c:70:8d:25:c8:
22:ac:5e:47:f2:88:38:af:bf:c6:db:1b:7c:89:67:
12:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5F:11:BF:BD:A2:FA:53:DB:FC:73:12:E5:72:DC:25:AF:CB:EC:CB
X509v3 Authority Key Identifier:
keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:28:ef:4b:ff:00:7c:78:74:dc:f4:54:99:48:7b:ac:97:e7:
46:7a:f6:96:e5:bb:10:78:b3:32:59:30:d0:72:f2:05:22:80:
49:c8:de:d4:66:7c:de:78:8e:42:bf:e0:2c:8c:03:bc:a3:91:
46:f9:18:fd:73:b9:84:f1:7a:e4:69:e4:50:f9:b8:57:6e:43:
b9:87:f8:3a:f3:2e:44:ef:44:56:da:72:46:e2:4d:bb:35:de:
ac:a5:e9:3b:3e:25:f3:d1:75:18:46:09:a9:ed:94:3f:63:a0:
e6:fc:f5:59:c1:55:e0:a8:62:da:85:0f:32:64:59:81:3c:7b:
98:34:94:2c:c3:90:f7:09:88:87:3f:5d:52:5b:e3:db:23:15:
fd:0b:82:df:aa:e1:fe:dd:69:fe:e7:5f:d2:92:61:07:f5:d7:
47:7b:1d:c0:60:b5:be:04:53:f1:09:d9:2b:bb:e3:a8:da:bc:
c9:df:78:e3:45:c6:47:94:52:54:50:9b:2c:58:09:18:5b:4f:
b2:f4:f4:38:52:cd:58:c4:27:35:84:b6:ee:c1:81:44:c5:78:
c4:80:8e:42:27:1c:4a:0e:e9:09:64:69:85:45:3f:32:0c:e3:
b2:f8:36:ac:8b:b2:16:1e:18:09:dc:b9:42:fa:1c:6a:6c:11:
56:06:e7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:02:08 2025 by rpki-client