Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
File: Fi14JJtyG00s6M9t_PvEQiITrJ0.mft (raw, json)
Hash identifier: NdvwmB1r5U/1+ebagqOBMecYsufPc9DjU/q8UPzhYHk=
Subject key identifier: A5:4B:91:1D:8D:CD:68:14:CC:FD:6E:A2:10:35:28:74:42:FE:F5:BC
Authority key identifier: 16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D
Certificate issuer: /CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
Certificate serial: 01974855517995573633BEC03FDAEF1552A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 03:00:40 +0000
Manifest this update: Sat 07 Jun 2025 03:00:40 +0000
Manifest next update: Sun 08 Jun 2025 03:00:40 +0000
Files and hashes: 1: 1-OxGWMnguhulz6f31kCb1mmRHrM.roa (hash: SvBOg3Xrt3LXP7jg7xDbyxKXVwwahdO0dORGRkeHvnw=)
2: Fi14JJtyG00s6M9t_PvEQiITrJ0.crl (hash: dtUVvNBmJByvjXUf9SnlMQuz0iNX+VOQzP7dAoMG6dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:51:79:95:57:36:33:be:c0:3f:da:ef:15:52:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
Validity
Not Before: Jun 7 03:00:40 2025 GMT
Not After : Jun 8 03:00:40 2025 GMT
Subject: CN=a54b911d8dcd6814ccfd6ea21035287442fef5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e7:b1:a0:a0:e6:c1:eb:d5:0e:10:9f:a8:a2:
73:af:50:27:a5:52:e1:a1:f9:d6:01:cd:f9:52:49:
29:bc:2a:49:17:eb:79:02:fd:c6:7b:6b:75:3f:53:
98:43:05:16:c7:e2:e8:ee:da:98:80:da:75:13:8e:
95:ac:1f:8f:58:56:9d:0a:c9:2a:2c:0a:4e:40:76:
6c:17:c3:ca:d9:75:56:9f:de:ee:94:94:ae:cd:f9:
72:49:8b:c5:05:ef:74:da:b1:c4:78:14:4c:4a:82:
81:db:6d:fe:74:0c:7c:7d:52:9c:a2:bb:d6:0a:1c:
d4:70:cc:e8:c9:93:ad:95:cc:d0:23:ba:71:47:63:
6d:2a:67:05:33:10:76:ba:45:01:5d:39:b3:63:d9:
6f:9d:1f:c1:a6:cf:85:46:5f:f3:5e:9e:e0:3b:1b:
1f:88:81:bf:84:ad:75:87:69:65:6b:6f:31:8f:da:
8d:ce:a5:41:5f:72:92:bc:8e:c3:20:10:e4:df:f8:
7b:e0:a6:71:40:d2:99:b0:b5:9b:68:ea:fc:c9:6e:
6c:82:4b:c7:89:0e:fa:45:ae:73:0c:a3:ed:42:90:
40:e1:68:80:b4:60:2b:70:58:dc:72:51:30:67:f2:
3f:19:08:33:b5:db:42:90:e9:d3:19:59:8d:3d:7a:
49:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4B:91:1D:8D:CD:68:14:CC:FD:6E:A2:10:35:28:74:42:FE:F5:BC
X509v3 Authority Key Identifier:
keyid:16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4a:5c:ee:30:fd:fa:f3:a8:8e:ab:e1:04:a4:bf:8f:18:2c:
91:9b:66:21:37:01:ea:a0:a2:eb:0d:9d:b2:ec:7f:48:aa:b1:
de:8c:af:f6:2e:95:6f:24:32:a2:d0:09:7b:08:5a:02:eb:a6:
70:11:bf:f6:0a:88:db:76:8f:53:65:8b:24:9b:9a:95:27:c4:
33:dc:c3:9d:87:3b:d5:b3:70:88:77:9c:93:b0:cb:3a:a4:b4:
74:c2:35:e0:ae:95:a7:e7:84:95:dd:72:de:b3:40:40:a7:a1:
53:c6:b4:63:36:70:44:f7:8a:4a:9d:22:23:f0:85:eb:22:50:
1d:d0:95:61:04:1b:e8:bd:3e:70:7c:1b:ce:16:1e:06:61:88:
2f:e5:96:53:15:2c:52:e9:31:95:ba:ad:d8:3a:83:63:3d:bc:
ad:50:6d:c7:ba:1d:46:2a:99:a8:6c:46:ca:94:86:90:74:83:
dd:46:c1:77:ba:d6:60:9a:c0:ca:2c:e4:e0:de:53:fb:bd:92:
fb:20:ce:8b:f7:2a:ce:34:f9:f4:95:76:45:4d:c3:ba:a9:fd:
38:5c:95:bc:aa:82:86:45:b7:3c:b7:92:c8:f2:4a:5c:03:f9:
3c:d5:64:08:42:34:3a:65:0c:fb:c6:d7:a4:7b:6a:67:ad:eb:
f1:54:ea:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:29:43 2025 by rpki-client