
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
File: FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft (raw, json)
Hash identifier: iD1srvzJ8/3py0zzibTUUYYT88oHoBmWw8evLamoCGU=
Subject key identifier: 0E:C8:2A:18:41:C4:84:87:B5:F1:A0:1B:06:A7:0A:EC:DD:C3:84:C5
Authority key identifier: 16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
Certificate issuer: /CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Certificate serial: 0197537DF716526EDA25E39843F22D1703B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 07:00:53 +0000
Manifest this update: Mon 09 Jun 2025 07:00:53 +0000
Manifest next update: Tue 10 Jun 2025 07:00:53 +0000
Files and hashes: 1: FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl (hash: 6D5iB8BR8D2+8/kKVf/j8XFsuBo7I2XrodM77C2KG6w=)
2: rXJZFmG2fExX2PgdhmMI1znr1Ys.roa (hash: jLirKW8uoxxjWyg59lIt3L6simlxOfJjoRXDdsPT8aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7d:f7:16:52:6e:da:25:e3:98:43:f2:2d:17:03:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Validity
Not Before: Jun 9 07:00:53 2025 GMT
Not After : Jun 10 07:00:53 2025 GMT
Subject: CN=0ec82a1841c48487b5f1a01b06a70aecddc384c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:fc:9c:13:6a:36:65:63:18:73:a1:f2:0a:
2a:5b:0e:b5:20:58:e9:16:d7:b2:d9:fe:dd:73:ef:
2e:70:19:da:cf:07:84:de:39:b2:ee:8f:dd:a5:e1:
37:57:1b:39:53:1e:06:20:5b:a5:07:12:4f:92:6e:
dc:af:17:c3:2c:3f:ba:44:86:d6:bb:16:a4:5e:f7:
67:a5:4d:e1:c9:9d:01:21:f6:5a:6f:6a:d1:62:e4:
48:4f:9f:f4:f3:76:24:e3:8d:85:15:6a:f9:59:1c:
36:cc:da:4d:20:97:00:55:64:f8:24:59:e5:fe:95:
3e:ca:0a:e0:d1:7e:09:b0:d1:ba:90:22:8d:ec:db:
78:86:b1:64:71:97:a6:1c:4f:ee:fe:58:a6:f1:83:
44:47:68:45:bd:3c:20:2a:da:24:f2:51:67:a2:19:
a3:b9:b0:84:cc:57:f3:20:a7:31:ec:7f:17:2f:37:
d2:df:65:68:81:d9:53:89:b3:f4:f3:57:a4:41:39:
a6:ab:b5:aa:69:aa:29:1a:9f:07:2a:07:d8:3a:96:
13:ab:f5:8a:47:92:96:1b:b1:59:4c:ee:1c:7e:26:
05:f2:4a:d3:4d:d1:be:51:e0:eb:74:ce:9b:66:d8:
ab:90:c4:a0:2a:f0:fc:6d:83:09:87:a0:ab:3e:2a:
ef:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C8:2A:18:41:C4:84:87:B5:F1:A0:1B:06:A7:0A:EC:DD:C3:84:C5
X509v3 Authority Key Identifier:
keyid:16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d9:d3:13:3e:44:88:a1:f3:23:2d:f2:16:7f:39:4c:57:77:
d4:fd:93:58:ea:d2:e1:09:a8:61:75:f2:30:70:57:7d:56:5d:
6f:06:9d:01:97:ed:20:bf:a8:45:78:48:6c:8b:df:bf:2e:69:
6a:2e:4c:16:d2:71:40:09:b6:b9:86:27:99:47:12:c2:ae:c3:
9b:20:ae:5c:3b:d9:dd:10:c7:89:4c:b4:c9:8e:bc:1c:fc:c2:
ff:13:32:c4:12:4e:c6:7b:e1:3a:f7:c6:68:b2:71:9f:4f:69:
f9:57:5f:f0:58:f4:7a:3c:cc:ac:da:e9:92:ec:94:4e:73:64:
c1:57:32:9e:f1:4c:f3:bb:b6:70:3c:ce:01:d2:6d:11:7e:01:
73:03:d5:8a:51:ee:c5:54:67:bb:a0:38:cc:4d:28:af:c4:ac:
c4:70:92:b0:8a:97:10:40:f4:dd:66:0e:09:16:2e:d1:2f:2c:
b6:67:e4:02:0a:36:32:8c:88:2d:4b:99:80:88:02:39:89:f5:
82:b3:bb:ba:60:e8:99:e3:f5:d2:fd:08:b8:01:17:0d:12:f9:
fe:d2:1b:ff:ba:4b:31:57:92:fa:ce:1f:3b:4d:35:56:ba:ce:
bd:4a:d7:9d:4f:e9:9d:36:ed:04:1e:26:8a:d8:b9:44:b2:ff:
3b:5a:c1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:34:14 2025 by rpki-client