Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
File: FqMhIVpNNe0imLBzlx20CIZP02I.mft (raw, json)
Hash identifier: DOXq5DX+wgYjuFwT5fEHXFUv9+WE242LwPXbKd/LPQI=
Subject key identifier: 78:A8:44:B9:8A:FF:CA:1B:CE:43:D5:0E:CE:CD:7D:12:61:A9:1A:B8
Authority key identifier: 16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62
Certificate issuer: /CN=16a321215a4d35ed2298b073971db408864fd362
Certificate serial: 01974968543E4C42F01C3FDFB6B0EA7D7E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
Manifest number: 0DA5
Signing time: Sat 07 Jun 2025 08:01:03 +0000
Manifest this update: Sat 07 Jun 2025 08:01:03 +0000
Manifest next update: Sun 08 Jun 2025 08:01:03 +0000
Files and hashes: 1: FqMhIVpNNe0imLBzlx20CIZP02I.crl (hash: zQIHNzbLDrik+Thc8bQHxOy4QVxLloYTQyY2IthVR+8=)
2: q9FXpjO7WYpYF_PuEvxdIBNk31U.roa (hash: eU80FRwYJKXcKKPdsKCtTdJX7dfta5v66z6KC/V+tqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:54:3e:4c:42:f0:1c:3f:df:b6:b0:ea:7d:7e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a321215a4d35ed2298b073971db408864fd362
Validity
Not Before: Jun 7 08:01:03 2025 GMT
Not After : Jun 8 08:01:03 2025 GMT
Subject: CN=78a844b98affca1bce43d50ececd7d1261a91ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:31:dd:1f:49:a1:8c:00:86:02:18:57:ac:
69:0c:25:f1:ab:82:d4:97:92:07:bc:2b:7c:e9:4d:
30:26:ac:65:72:e9:bd:e5:ce:cb:b6:0d:70:0a:55:
ea:4b:56:5a:ca:35:d8:27:b4:60:54:ed:09:35:37:
f1:5b:a0:78:4b:34:8c:25:a3:c8:20:13:3e:9b:ea:
0a:94:fa:79:5a:bb:93:51:c3:1c:90:34:99:3b:1e:
77:d6:fb:cb:d1:28:9e:51:37:9d:76:68:43:a3:db:
88:36:c9:21:50:b2:4e:02:7e:72:41:a3:c1:d3:72:
07:ef:71:79:5e:1f:67:f0:62:a9:2f:d5:10:79:8e:
96:58:7c:03:04:3d:d5:c2:4c:59:e7:1d:37:27:25:
51:a1:13:80:a1:26:13:d0:01:d4:f3:dc:25:8d:16:
68:ba:fb:70:53:76:67:a9:54:62:9e:f4:6c:44:6e:
37:90:64:59:f5:d4:e1:4f:c8:63:62:0b:90:ed:f5:
d1:b0:be:74:75:4f:4d:8c:9b:af:05:0f:84:bf:80:
ee:98:7a:c5:d9:06:95:42:12:f9:bb:b8:ab:c2:79:
a2:28:50:8c:ab:df:73:11:a6:28:68:d2:51:6a:4b:
7f:d1:09:b1:6d:02:f9:f9:25:9f:e1:28:b5:e0:26:
a2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A8:44:B9:8A:FF:CA:1B:CE:43:D5:0E:CE:CD:7D:12:61:A9:1A:B8
X509v3 Authority Key Identifier:
keyid:16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f6:10:da:42:22:92:ae:a7:88:d9:8b:91:1d:60:9b:ab:f3:
dd:5b:89:83:cc:93:31:86:48:2d:95:c2:56:aa:1c:31:62:7c:
82:39:aa:4b:21:be:7a:e3:61:07:4f:df:3c:6e:29:f1:d2:8b:
99:b3:31:4d:56:d0:e2:3e:e8:23:57:b0:aa:43:d2:e9:38:b3:
8a:33:8d:63:36:26:62:33:8b:e5:91:79:50:c4:80:d1:0c:0e:
be:c8:75:bc:a2:25:e7:e4:84:f4:0b:6d:09:13:56:62:ca:35:
dc:56:f9:ee:24:dc:34:37:78:70:8a:9a:5d:48:2e:2d:a5:bc:
f9:27:04:51:ee:6f:73:af:43:d3:5a:69:88:5b:ba:3b:8c:84:
22:98:20:4c:b2:ba:4a:e2:1d:3b:5b:b2:4d:d4:03:0c:e0:ac:
3b:ff:40:c1:f9:26:73:4d:52:e0:1d:b1:1f:76:8a:be:cd:79:
da:69:66:31:8b:77:db:5a:eb:4b:c8:40:ab:64:e6:65:19:5c:
d9:26:89:bc:65:96:09:95:2a:aa:09:14:1a:2b:15:1d:db:52:
06:f2:ef:09:dc:ea:2b:e4:d2:6c:c2:35:74:74:2b:fe:4b:84:
47:dd:7b:1c:b9:39:f2:59:d4:7f:b8:54:e4:cb:7a:72:99:7b:
d5:02:c5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:14 2025 by rpki-client