Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
File: FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft (raw, json)
Hash identifier: XLXHs3Dr0BXCpSxhZ+iGAHOJIfFUfj/B+DzQY8sc5ac=
Subject key identifier: 74:9F:0D:5B:3C:DB:64:5A:B2:F3:A9:21:AF:AC:63:C2:44:78:73:F2
Authority key identifier: 15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
Certificate issuer: /CN=1594f00471e248abe394d521e96cba9630d8520e
Certificate serial: 019751C61A4A48BC53EC131A6E3CE8640451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 23:00:26 +0000
Manifest this update: Sun 08 Jun 2025 23:00:26 +0000
Manifest next update: Mon 09 Jun 2025 23:00:26 +0000
Files and hashes: 1: FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl (hash: EBR6h5FGuP71hYTypJErDRP7S6t8/iID4vB6zp8Zo+w=)
2: gWBn1z5wJ573-A_JCrTWoUMVcwU.roa (hash: eRnLQ0R/etEfmVAViRE9PujI2pbJzVSTqcsk+ucvQDM=)
3: gf-ztZnGBMD3gis8NYuG9N92sfw.roa (hash: ehCASISZ7Fk/s7piTjFKUNtpfPH5xpu2BhLg9f7INf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:1a:4a:48:bc:53:ec:13:1a:6e:3c:e8:64:04:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1594f00471e248abe394d521e96cba9630d8520e
Validity
Not Before: Jun 8 23:00:26 2025 GMT
Not After : Jun 9 23:00:26 2025 GMT
Subject: CN=749f0d5b3cdb645ab2f3a921afac63c2447873f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5c:f2:ee:59:8c:c9:92:56:86:e1:10:2c:ba:
1d:3f:22:f2:d9:3d:bc:eb:e1:56:ac:bf:26:1a:67:
ef:bd:4d:26:8e:22:03:71:23:9f:2f:8b:9a:9c:2b:
fd:66:98:a9:ff:6b:ea:97:55:65:d4:73:a4:8b:6a:
1c:61:3b:60:60:88:3a:90:e3:0f:9d:2e:f2:f4:35:
5f:e6:57:a6:78:7c:4b:0e:8e:24:0f:b5:96:a2:39:
10:98:bf:f7:95:43:4a:39:60:54:7b:c1:ca:1b:1b:
21:a8:8a:01:22:cd:bf:f3:bf:27:e2:42:fd:ae:7a:
06:db:4b:20:45:0e:13:ab:71:37:5b:7b:f0:ff:4b:
91:24:58:2f:fc:53:22:ff:7e:4b:05:c0:ee:00:eb:
cd:95:3d:4c:47:31:5e:2d:d5:e8:b7:91:2a:12:95:
1e:29:64:5c:19:9e:61:08:91:e5:df:07:fc:00:2c:
65:41:e0:20:96:65:0d:94:3b:7e:21:48:af:cf:0f:
79:53:ec:3f:78:f8:da:b3:22:d6:38:21:37:e9:cd:
43:b5:da:fa:bb:7f:23:96:43:c7:62:45:54:bc:29:
e4:1d:da:2b:e2:1f:63:75:c3:41:61:9d:68:db:95:
aa:4d:2a:2d:e0:4b:a9:45:6a:3a:ed:79:7f:21:c5:
24:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9F:0D:5B:3C:DB:64:5A:B2:F3:A9:21:AF:AC:63:C2:44:78:73:F2
X509v3 Authority Key Identifier:
keyid:15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:59:55:69:ad:b9:3a:22:cf:8f:19:cf:29:72:df:31:62:f7:
7c:60:43:99:a9:43:0c:25:98:90:c1:9d:ec:0b:fa:b4:e0:dc:
b4:24:9f:ff:d4:3a:a5:0f:be:22:8e:f9:6b:7e:a6:fd:50:30:
95:4b:d4:bf:14:d3:02:af:59:6a:79:83:0a:dd:bc:0c:65:05:
66:79:b4:d6:32:ed:4b:01:7a:39:ec:10:88:69:d5:c9:f0:4c:
e7:4d:1d:aa:c9:6c:1c:c4:96:c3:53:05:2e:da:1b:ea:09:8f:
4c:03:4e:66:02:e6:f0:8e:34:28:45:b4:e2:4c:3d:db:26:c5:
04:e4:40:05:7f:53:bb:da:79:ae:ef:3c:e5:cc:21:f1:e6:db:
fc:b4:0b:f9:ec:93:3b:d6:00:e7:a7:16:b1:5f:31:f1:9f:7c:
36:54:11:54:c6:20:44:06:24:22:27:8b:17:2a:2e:6a:0e:83:
bf:03:94:d2:4d:a0:6c:f8:e7:9c:46:1f:9f:29:72:e4:e4:f0:
87:88:b4:2c:0b:a0:eb:81:0c:d5:00:5e:ff:a9:43:28:9b:f5:
c0:54:26:b6:c5:4f:86:98:55:77:75:89:af:fb:d3:21:8c:ca:
fd:39:09:dc:06:53:f4:68:2f:02:61:0f:da:b5:80:33:c2:ca:
c5:8c:44:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:26:55 2025 by rpki-client