Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
File: FNlKazCSDR96LRUXG1CPkiZkduM.mft (raw, json)
Hash identifier: uAFW7LH5PCNW/WJKq3pd6Iu8c/dA+sUW0eaVCkY+At4=
Subject key identifier: D3:A0:06:69:9B:67:1A:A5:50:F9:FB:4D:58:C1:34:B6:6F:0F:35:FB
Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
Certificate issuer: /CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Certificate serial: 01974BC44168794232AA10AC7836E29CA9C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
Manifest number: 150E
Signing time: Sat 07 Jun 2025 19:00:42 +0000
Manifest this update: Sat 07 Jun 2025 19:00:42 +0000
Manifest next update: Sun 08 Jun 2025 19:00:42 +0000
Files and hashes: 1: FNlKazCSDR96LRUXG1CPkiZkduM.crl (hash: LHZReE9WFDwyToe3XSeW/MQYDce1EYC97r2Sq0bMCBE=)
2: Zlb5bVUIDERXo4xdSGjVMQ8TdNA.roa (hash: stdZJ0N6TnO5P8nlAhBGBijPlJ/mbcLMM3mJJx7zrV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:41:68:79:42:32:aa:10:ac:78:36:e2:9c:a9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Validity
Not Before: Jun 7 19:00:42 2025 GMT
Not After : Jun 8 19:00:42 2025 GMT
Subject: CN=d3a006699b671aa550f9fb4d58c134b66f0f35fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3c:13:dc:a9:7d:09:41:b8:be:8f:06:b2:77:
36:8e:61:dc:00:62:8d:95:1a:a6:cf:ba:c1:40:b7:
c2:eb:77:d6:d7:3d:ca:f8:23:47:55:e7:cc:a3:d7:
70:6a:78:11:7d:24:ed:c4:07:67:af:2d:30:0b:a8:
12:47:41:4b:2b:ad:01:50:72:9b:54:b9:06:86:98:
ab:ca:0f:31:53:9b:7b:36:57:56:9e:7a:7b:84:05:
a6:dd:a3:fe:e3:db:df:fb:79:62:46:26:86:0d:59:
a9:50:ab:bc:42:70:e0:2d:3e:fa:1d:ac:b5:ce:d6:
7f:14:ee:0d:4f:0b:bf:cb:bf:cd:0e:bd:86:43:59:
8f:d6:d7:dd:33:13:bb:22:25:30:72:96:5c:ba:6c:
68:f1:a1:a1:f6:c3:cc:96:78:6d:57:fe:c7:bc:46:
71:06:38:e7:0a:a4:7c:2f:40:79:0b:64:ea:f3:23:
df:42:9d:26:29:46:9a:90:35:f0:31:42:20:df:ae:
11:89:b0:88:b1:f5:f8:f6:6d:74:18:0c:af:da:3f:
76:3d:87:55:ed:04:95:6a:24:33:3a:f1:86:cc:0f:
87:db:d8:f8:1c:3e:81:19:48:f5:d9:87:24:d3:c0:
3d:11:d8:10:3c:2b:ee:d4:87:ae:a6:27:5f:38:2b:
99:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A0:06:69:9B:67:1A:A5:50:F9:FB:4D:58:C1:34:B6:6F:0F:35:FB
X509v3 Authority Key Identifier:
keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ee:57:36:9a:23:c0:3a:c8:d7:ba:f3:c3:1f:59:7f:27:4c:
23:10:33:3d:21:a4:5a:78:5f:36:1b:11:f5:40:2d:d6:c7:d1:
3c:7c:50:7a:1e:f2:69:f6:8a:b9:2f:51:48:f8:14:92:5f:45:
eb:bb:b5:85:10:df:f7:43:6e:c5:a2:a2:3e:ac:5c:d0:a2:a4:
64:5c:3d:ed:d6:3b:8c:3b:2b:f7:05:6e:90:b1:95:ef:c6:10:
7c:05:db:b8:c4:ca:9a:11:74:74:b0:c3:c0:11:06:ea:dd:62:
86:ab:4e:0d:1a:51:be:20:ac:1d:23:fa:c7:5d:9d:ee:e3:d7:
2f:be:95:a7:87:10:30:1e:4a:4d:43:50:cc:45:e4:49:ec:56:
3e:e4:05:0f:d7:1c:e3:f7:bd:1a:bb:c1:ef:35:08:93:22:19:
7f:25:c6:ce:83:cf:fc:43:36:0e:df:0b:26:a2:b8:77:10:12:
b6:6f:bf:89:25:09:0a:04:66:94:0c:82:50:32:97:f8:d1:a5:
bd:f1:b5:e8:fb:7a:36:08:5c:16:f9:30:d5:d2:87:3f:5e:8b:
f2:e5:d0:d6:56:13:2b:2d:39:19:ae:12:3a:09:0a:9d:81:32:
d3:fe:07:48:c9:81:5b:e9:d6:a0:05:eb:a3:2e:51:fc:9d:f4:
02:0b:8f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:54:32 2025 by rpki-client