Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
File: FpNzegFGnJUBHWlzklZZFgRdOiA.mft (raw, json)
Hash identifier: XNaIZyq3v9u3zJNl/NeJgKt5xic8cRe3ge0jb842bKQ=
Subject key identifier: 1B:F5:CC:07:57:9B:61:5B:BA:CF:A5:08:2A:48:69:E0:9E:26:17:83
Authority key identifier: 16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20
Certificate issuer: /CN=1693737a01469c95011d697392565916045d3a20
Certificate serial: 01974D7BA5B24C5A7BB6F92627348B532811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
Manifest number: 0264
Signing time: Sun 08 Jun 2025 03:00:38 +0000
Manifest this update: Sun 08 Jun 2025 03:00:38 +0000
Manifest next update: Mon 09 Jun 2025 03:00:38 +0000
Files and hashes: 1: FpNzegFGnJUBHWlzklZZFgRdOiA.crl (hash: xOzPdUxa+4t9oqtIpW7aLu8I1Jhz1Qt/BQRYWTPpw1Q=)
2: mgFhpVWpKKOAS9kS1Whb-f8EjPw.roa (hash: b1ojmUR/j/a0k5umyT93sSV7c2lVJTgs9RA7eYuyM+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:a5:b2:4c:5a:7b:b6:f9:26:27:34:8b:53:28:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1693737a01469c95011d697392565916045d3a20
Validity
Not Before: Jun 8 03:00:38 2025 GMT
Not After : Jun 9 03:00:38 2025 GMT
Subject: CN=1bf5cc07579b615bbacfa5082a4869e09e261783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:75:14:cd:6e:87:83:15:d6:98:7d:eb:52:
ed:e5:4c:5d:d2:ea:ae:f9:20:1c:90:90:53:b2:fa:
be:19:0e:9c:02:6a:e8:24:5b:61:23:44:4d:39:b0:
17:ac:89:78:28:4e:e1:f3:73:53:9d:79:b9:71:a2:
d6:e8:8e:86:ab:60:fa:61:32:66:7b:f3:57:c2:2b:
50:02:52:54:b2:8e:46:eb:f7:fe:3e:40:9f:75:15:
f3:d7:da:80:3b:96:48:8a:ca:02:1c:03:05:1f:e2:
e9:fa:c7:9c:2d:d9:07:7c:87:92:22:0c:91:94:20:
e1:57:d2:f5:7f:7f:5b:0d:0c:24:8b:1a:05:f7:f7:
eb:40:38:e5:b9:7e:1a:89:4e:1b:d5:0f:78:da:b9:
86:75:fd:5e:8d:af:84:8b:bc:9f:d4:a5:58:81:5f:
90:52:62:93:bb:6c:ee:32:29:a1:c0:f9:4f:dd:63:
28:5a:a2:64:4d:a8:1d:cc:2a:31:a6:29:c7:99:6a:
fa:c3:ea:38:7f:63:a8:15:01:a3:19:c1:4f:e9:f8:
ca:44:db:c8:e9:93:dd:6f:ef:80:29:0c:6d:de:89:
bb:06:ef:7b:53:64:9f:da:54:70:32:53:71:75:35:
9f:d6:a4:53:aa:6d:fb:36:06:49:08:f1:6c:bb:74:
30:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F5:CC:07:57:9B:61:5B:BA:CF:A5:08:2A:48:69:E0:9E:26:17:83
X509v3 Authority Key Identifier:
keyid:16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:60:6f:4c:40:dc:fb:0c:65:19:72:ca:d8:02:19:eb:9c:3d:
fe:1c:50:0f:6f:fc:ed:13:28:1a:64:cc:12:4c:28:d8:67:1e:
2c:4f:e4:2a:91:51:2f:2a:40:10:30:b7:0e:2b:f9:9f:8b:8a:
ab:0b:7c:51:42:46:12:ea:80:f4:73:d0:fa:db:1c:82:89:ec:
72:86:6b:d4:15:5f:8f:18:c4:99:20:77:bf:7b:77:07:91:44:
04:34:bb:4a:00:0e:ac:42:0d:f9:52:f8:42:59:5a:81:c8:a9:
ca:15:a0:32:58:f4:b7:97:36:50:ce:06:93:4d:54:f6:ef:01:
fb:4c:d8:97:18:34:27:e2:3a:75:b1:0f:f2:d6:c3:0f:12:7c:
c0:93:e2:4a:18:7d:88:27:96:a5:c8:37:4a:bd:2a:00:97:5e:
11:02:bc:fd:26:cb:df:f6:61:fa:05:ea:42:a9:c5:a3:a3:94:
a2:c7:a6:49:16:9d:5f:4e:ab:79:cc:7c:e2:cc:2c:05:6f:14:
5e:5c:8d:7e:5e:40:f6:d4:d8:05:6e:fd:d5:10:29:fd:90:f0:
f3:fa:d8:12:e4:43:00:e5:88:26:a0:1d:22:0d:37:b8:c2:c6:
34:e5:fc:09:ac:fb:79:9b:44:04:06:86:97:a7:04:10:f3:34:
ce:2d:d2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:35:08 2025 by rpki-client