Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
File: FQKvcT425SxxhmyKnr2s89him2g.mft (raw, json)
Hash identifier: AifH50GpRZ8Hh/7yU3huIsng7fujibUqzFrkdKa7Wtw=
Subject key identifier: 78:6E:12:D5:94:C1:DF:B7:00:ED:AB:68:7F:7C:FB:DF:66:5B:A0:CD
Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Certificate serial: 01974E57B282A122B561161EBC6720971B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 07:00:59 +0000
Manifest this update: Sun 08 Jun 2025 07:00:59 +0000
Manifest next update: Mon 09 Jun 2025 07:00:59 +0000
Files and hashes: 1: FQKvcT425SxxhmyKnr2s89him2g.crl (hash: fiO7Wduo2oNLP9saQucDhsyJmqEDRiNTmAEZFxtnsmw=)
2: tuMifPTkCbCL7ajrwo0EzPnXWPw.roa (hash: jC33EY0cA4p2GJTzlFhrTlf/kii333WPsx2l9xMoLj4=)
3: xrGACS-1hAxmap4Rb-Oc9S070js.roa (hash: mptaEeEJPbcTmStEp7RBmFaS5iUHgb9cGp/H5Fm+PGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:b2:82:a1:22:b5:61:16:1e:bc:67:20:97:1b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Validity
Not Before: Jun 8 07:00:59 2025 GMT
Not After : Jun 9 07:00:59 2025 GMT
Subject: CN=786e12d594c1dfb700edab687f7cfbdf665ba0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:eb:5c:30:96:eb:cf:64:27:50:be:8d:b3:9c:
5b:0f:de:85:f4:9e:71:00:f4:73:25:60:af:54:96:
9d:6b:93:52:ce:31:0f:5d:09:c7:f3:cf:87:10:c7:
d9:9a:fc:93:aa:61:d3:5f:89:bb:a4:97:71:d2:02:
9b:8c:1f:f1:3b:e4:8f:3e:7f:9a:25:f9:48:31:17:
7e:11:e8:76:01:3a:88:d1:9c:37:f7:45:71:34:a0:
c9:2e:fd:a7:50:ad:8c:06:96:d4:70:7d:8f:7a:67:
a3:80:e1:12:cd:25:ec:16:ba:c1:e1:d0:7f:c1:2e:
aa:4b:63:71:87:30:bf:a9:51:f3:9a:55:c9:77:31:
df:b1:2f:f2:03:d6:dd:8a:57:dd:5d:fa:70:e9:6b:
42:1f:6a:46:9e:a2:35:b9:43:24:7e:ca:ac:29:16:
cb:c6:07:d1:05:16:bc:0f:49:01:c7:8c:94:57:48:
fa:f9:c1:96:b0:29:37:70:8a:ba:5b:7e:51:fd:5e:
13:f2:6c:a3:dc:b2:27:dd:5c:60:99:b2:e3:61:43:
a2:9e:86:dd:49:6a:5d:3b:b2:e6:3b:6b:08:b4:1e:
b6:2b:c2:e5:66:43:63:80:68:3c:59:16:2b:b1:c6:
90:86:b5:83:75:1e:e1:85:5d:93:5a:fd:c3:97:13:
de:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6E:12:D5:94:C1:DF:B7:00:ED:AB:68:7F:7C:FB:DF:66:5B:A0:CD
X509v3 Authority Key Identifier:
keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:20:07:48:30:81:75:d4:d5:59:d5:c1:6a:c1:bb:c8:d2:6a:
53:ce:4e:27:5d:13:e4:96:6b:db:77:50:6a:28:71:17:0c:4b:
4c:23:21:9a:48:0f:bd:d9:72:21:87:47:d2:d5:12:07:16:d1:
28:6a:37:2a:0e:c9:16:cf:38:45:d8:d7:9f:ab:4e:7a:fc:37:
fd:d5:7f:0d:cb:1b:ce:2b:dd:fe:56:79:1b:83:cb:8c:57:02:
0d:2a:f8:55:12:b6:f7:04:1b:2d:c4:ab:87:c9:37:35:b4:66:
fb:09:d6:91:2e:ad:47:d7:e6:0a:b1:9a:b7:fd:66:a4:e2:72:
de:3f:15:58:b0:9a:d2:b9:58:59:f5:be:32:1a:dd:9c:6d:ca:
88:67:fe:9e:ae:55:e5:59:96:32:ce:72:af:43:fa:06:c0:fc:
2e:05:39:ed:26:ce:28:3b:81:c5:65:c8:e1:a3:8c:20:9f:98:
e3:99:c5:2b:5d:3f:33:34:88:b1:e2:9c:65:16:d9:e4:02:e5:
0f:0e:1e:aa:01:27:9e:ba:63:80:67:84:5d:5a:eb:56:86:c6:
07:06:d6:ad:29:6c:21:ea:8c:02:96:95:5c:a2:6a:33:f4:fb:
e4:34:d5:d6:1c:80:8b:33:b2:75:38:e4:dd:65:70:14:db:33:
f2:e2:30:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:45:09 2025 by rpki-client