Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
File: FqThByM1EnDNjJzGSwlkiOZOIw4.mft (raw, json)
Hash identifier: KqkZk2ftr+x7oAMxDBgKq7SARQuFH6n+UZ11Hs+7lrc=
Subject key identifier: F9:CD:85:26:27:95:8E:CC:04:88:38:8F:5F:03:4A:E9:DD:D9:25:35
Authority key identifier: 16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E
Certificate issuer: /CN=16a4e10723351270cd8c9cc64b096488e64e230e
Certificate serial: 01974779C0F0FA669134D46A0CA27F88B700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
Manifest number: 06EC
Signing time: Fri 06 Jun 2025 23:00:50 +0000
Manifest this update: Fri 06 Jun 2025 23:00:50 +0000
Manifest next update: Sat 07 Jun 2025 23:00:50 +0000
Files and hashes: 1: FqThByM1EnDNjJzGSwlkiOZOIw4.crl (hash: r+smi5IVlY/eFYuP6kMgli/2DQ1SaLuB6+esRCwrlq4=)
2: LHS-1GPmf3JlxOhkC8EvvEXsIio.roa (hash: qJmDzf2hiWRAwgR4H4d0P3HUtRpMHlkEr8kbVnNHB5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:c0:f0:fa:66:91:34:d4:6a:0c:a2:7f:88:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a4e10723351270cd8c9cc64b096488e64e230e
Validity
Not Before: Jun 6 23:00:50 2025 GMT
Not After : Jun 7 23:00:50 2025 GMT
Subject: CN=f9cd852627958ecc0488388f5f034ae9ddd92535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5e:0a:67:cc:06:d5:d0:c8:ce:9c:17:da:14:
f6:a4:a6:f5:c1:4f:60:96:da:45:4c:16:13:a9:43:
19:cf:0e:ba:7a:04:d3:d7:74:13:b7:10:9d:b9:39:
6f:eb:06:35:c9:85:4d:bf:ba:82:a6:db:55:6e:f5:
37:52:e2:e2:03:f9:a0:9e:29:52:a8:94:8b:c4:b4:
b4:12:9f:31:ef:94:66:47:2a:0a:5a:da:69:8b:69:
b4:b2:7a:dd:d9:1f:79:5d:03:ef:5e:6e:dd:3b:54:
bf:9e:fe:79:5e:ed:15:e7:ba:b3:08:0e:a8:e5:de:
e5:3b:a0:8d:0f:87:53:a7:ec:31:92:cc:12:b5:b5:
aa:d9:e9:f3:73:17:d3:cf:0c:09:f7:8d:8a:40:33:
92:c8:6a:70:f9:fe:50:81:7d:1f:09:81:94:72:22:
66:78:64:fa:a2:81:e3:db:6c:d1:57:cc:18:89:bc:
d0:bd:49:ab:93:c0:c3:20:91:b1:7f:b4:16:5a:ef:
09:33:42:4a:af:dc:fc:10:f7:88:fd:1b:c3:da:bd:
83:77:7a:9e:50:99:14:61:3b:64:87:27:0f:0f:b6:
e5:16:58:6f:70:4b:c1:73:56:58:b5:5c:b5:e1:98:
f8:68:cf:b2:fc:70:1e:5c:e6:16:d0:9f:a8:2e:4a:
3b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CD:85:26:27:95:8E:CC:04:88:38:8F:5F:03:4A:E9:DD:D9:25:35
X509v3 Authority Key Identifier:
keyid:16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e7:ec:26:a9:a4:ee:4d:52:85:61:6e:74:8a:cc:0f:bd:68:
53:66:c6:9e:2a:6a:f9:25:8f:d6:19:42:dc:bf:89:bc:5c:e2:
8b:59:5f:5f:34:3d:8d:74:d1:00:96:25:f0:1d:b5:f1:51:eb:
10:af:52:62:89:2e:c5:98:9e:38:30:30:a3:bc:a6:05:d3:56:
87:e6:f6:d0:85:80:a5:2c:7d:47:2e:ec:83:07:e3:94:c5:72:
36:8a:a8:fa:92:82:0d:50:47:93:c5:10:ce:03:21:25:94:ed:
b4:f6:28:ba:c2:a0:68:b2:a8:c6:79:bb:6e:0d:80:6e:42:fa:
43:b0:7f:1c:3a:0f:c4:16:a8:af:8e:01:f4:aa:90:ed:f5:82:
2c:3f:9d:3a:92:9c:83:e0:5a:3e:9f:44:49:04:78:ce:1b:a0:
1b:3b:c8:71:7a:c7:aa:d3:65:5f:bc:07:11:98:93:10:61:a8:
ac:a8:b3:38:89:c8:a6:e9:72:83:a6:36:7e:8f:d5:78:15:14:
41:65:12:49:b0:ec:4d:f7:6c:3a:84:85:94:76:a9:dc:35:77:
27:a9:ae:ff:c9:62:ae:34:fe:e5:33:98:57:ce:ef:84:dc:40:
1a:42:0a:8b:d8:37:54:5b:28:74:d4:e6:a7:89:40:b3:2b:d6:
de:9b:a6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:27:50 2025 by rpki-client