Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
File: FL85E5txDE9yN-39iFGGVa85wyM.mft (raw, json)
Hash identifier: xxhyCKROy0JYnLrkhsxafpmDZURBfGvMFyudnCcjQBg=
Subject key identifier: C4:FC:04:30:F3:52:22:89:C4:F8:A5:74:9C:80:91:54:50:E3:A8:AA
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Certificate issuer: /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial: 0197458B316758CAC3F74FA9715DC636C99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
Manifest number: 0B71
Signing time: Fri 06 Jun 2025 14:00:39 +0000
Manifest this update: Fri 06 Jun 2025 14:00:39 +0000
Manifest next update: Sat 07 Jun 2025 14:00:39 +0000
Files and hashes: 1: FL85E5txDE9yN-39iFGGVa85wyM.crl (hash: dyAfPDNuam4YGE7XJIUBq84tgJ8sjzNwA5yLdSyW4ec=)
2: T8jVRfNtgOkoesNchTYMyWBMejA.roa (hash: odUOdpKN+tr75AiaB4U/yYO30gvxGiZ+PPW0U2k0wWk=)
3: _oI5hyBnCt55tCVsP54xRvG07cg.roa (hash: siBfTW9OHIW7tDQ3Efjyi7KuTusgOUvikxuMwP5Dkrs=)
4: h09V_pfLhbG06t0gQbFrPM7mXKs.roa (hash: 5yQRSQYWk0Fc992YjmOb7t6zzDvUZZ6yh9Kn/c45gMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:31:67:58:ca:c3:f7:4f:a9:71:5d:c6:36:c9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
Validity
Not Before: Jun 6 14:00:39 2025 GMT
Not After : Jun 7 14:00:39 2025 GMT
Subject: CN=c4fc0430f3522289c4f8a5749c80915450e3a8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9e:10:c7:91:2f:a2:11:29:4e:b5:e0:5e:ad:
3a:64:92:e3:53:c2:ed:51:47:ab:71:61:e5:19:e1:
2f:f3:b6:d4:f3:99:c9:31:21:d4:ed:fd:54:67:82:
34:2b:cb:5f:58:15:e6:21:07:58:5a:79:be:30:a0:
b0:99:9f:b8:df:b3:b8:b0:53:bc:ed:cf:95:cf:12:
86:c6:98:07:26:6c:69:e8:ed:93:74:a4:02:6d:b5:
7a:58:2f:7f:00:b8:f0:f7:15:1d:be:c6:8d:2c:ce:
6e:bb:7d:51:3a:5c:50:c9:a5:e7:a2:68:34:29:0e:
0b:14:4b:7d:87:f7:0f:ee:c2:a4:30:35:d3:f5:9f:
5c:69:59:36:59:66:7d:03:df:f6:37:e5:46:ae:70:
fe:98:6f:46:f5:cb:8e:4b:70:77:26:1f:c0:90:b2:
1a:49:65:3c:6c:08:b0:38:27:86:68:95:39:77:01:
bd:46:3d:f9:0c:d7:47:a7:8b:6b:5b:3d:24:83:1b:
a9:3e:c5:dc:2a:7c:9c:49:77:a4:39:06:a7:41:e4:
34:ae:ad:51:65:7c:c5:cb:47:23:76:87:17:ad:db:
c1:b5:6f:c6:11:12:21:b5:64:da:31:ed:66:f3:87:
55:64:29:ab:40:f7:33:ad:dd:e1:5b:57:2b:c9:a8:
9c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FC:04:30:F3:52:22:89:C4:F8:A5:74:9C:80:91:54:50:E3:A8:AA
X509v3 Authority Key Identifier:
keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:93:b4:fd:6a:00:94:9c:cf:da:51:3f:29:d7:c3:cd:6b:69:
15:07:54:a9:99:4e:4c:1d:41:de:39:bf:a1:e4:55:4e:77:c4:
a3:18:e8:69:e7:a4:43:8f:e0:d1:86:da:2b:13:ac:b7:17:2a:
9a:fb:3c:0a:3f:c7:0c:80:a5:94:e3:ea:3c:f2:9a:a6:97:cb:
31:a7:5c:9c:16:7f:94:18:98:3e:ff:ab:5d:27:d0:52:41:5a:
c1:0b:11:b5:cb:ca:ad:ff:07:96:99:98:90:35:99:1c:36:9e:
f3:da:bb:a4:6b:5d:c0:12:c3:89:a3:fe:a3:c9:46:60:f1:ed:
31:40:f4:83:73:3b:b1:ad:5f:98:69:7f:a4:bd:70:63:43:2f:
0d:4c:81:14:6c:af:82:0a:7a:b4:a3:3f:2c:dd:a9:23:dc:63:
c1:29:a0:39:ca:c6:9e:9a:87:f5:a8:3e:68:6f:90:c3:1b:57:
3e:65:f3:90:0c:52:e9:15:e9:1a:59:e1:d9:69:b6:74:52:9d:
23:54:20:d3:5d:28:d7:66:ff:8b:3c:7c:3a:98:4b:53:9c:e1:
22:2e:26:64:e4:e6:a2:2a:ab:07:d0:92:53:01:d0:33:86:eb:
18:40:7c:65:8c:49:4a:bb:3e:c1:92:b6:93:e1:53:4f:02:3d:
57:d8:b6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:44:41 2025 by rpki-client