Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
File: FgnCTa4-7_y--jemiGZKyTMA71g.mft (raw, json)
Hash identifier: U1UcPjdlYNgKStXxMgpX2vP5Y9y5N5LzqCSGcw11eZg=
Subject key identifier: D8:66:21:3A:40:11:D9:08:AD:D4:70:06:58:70:79:83:36:D6:7E:07
Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
Certificate issuer: /CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Certificate serial: 01974967BC8225123457E7E95A866111A802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
Manifest number: 1453
Signing time: Sat 07 Jun 2025 08:00:24 +0000
Manifest this update: Sat 07 Jun 2025 08:00:24 +0000
Manifest next update: Sun 08 Jun 2025 08:00:24 +0000
Files and hashes: 1: 7b72R8YLb2SHH9MjZo55yK3DpuU.roa (hash: EOM+9zK0YudveaEnl18alhJ+F+Rk/QyUoYSZ9iQgFf4=)
2: FgnCTa4-7_y--jemiGZKyTMA71g.crl (hash: ELH7hksu/RCgJM1f8YwG71yY0diECQKaii2A/Y/+7/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:bc:82:25:12:34:57:e7:e9:5a:86:61:11:a8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Validity
Not Before: Jun 7 08:00:24 2025 GMT
Not After : Jun 8 08:00:24 2025 GMT
Subject: CN=d866213a4011d908add470065870798336d67e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ad:74:da:f6:2c:90:3e:ea:04:de:65:b4:bd:
a7:a1:fc:f1:a3:ae:56:35:bf:10:2b:af:c9:66:d1:
3a:2d:ac:c3:c7:ad:19:64:88:96:c0:e1:a4:4d:08:
34:8c:d5:ee:6d:a5:96:e3:79:e2:4b:da:48:f7:51:
82:4a:e5:5a:b1:da:60:2f:fc:d7:c7:92:f1:2d:df:
db:60:40:31:02:eb:00:85:c1:73:26:61:a6:65:1f:
c9:f3:3b:85:2d:a9:61:58:4b:4c:78:4b:38:99:0d:
e4:3e:51:34:08:c8:b0:71:0f:de:86:92:5f:80:43:
71:58:e5:51:e0:02:88:eb:09:ef:72:ce:ee:7b:79:
7b:e4:f0:d5:10:c4:ba:d6:26:35:5f:f8:37:78:62:
a3:ad:52:a0:6c:7d:17:b3:d8:81:ed:72:01:d8:e6:
06:f0:7f:03:84:79:67:71:d2:0f:82:c4:4f:a7:a8:
e8:80:8a:d4:93:81:6c:a3:9b:02:0b:cb:64:f8:c9:
a4:fc:c1:ef:89:a9:b5:f3:c3:b6:9a:38:8b:63:a4:
06:0f:55:9c:cc:04:43:9e:6f:51:a5:a7:4e:51:6f:
09:48:af:67:62:c4:dc:5b:8c:32:25:09:ee:83:db:
7a:c6:98:18:7e:35:d7:db:4f:7c:1f:cc:14:76:67:
7c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:66:21:3A:40:11:D9:08:AD:D4:70:06:58:70:79:83:36:D6:7E:07
X509v3 Authority Key Identifier:
keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7f:e8:04:db:b6:bc:24:75:37:88:c4:92:35:02:9f:73:99:
41:89:65:8e:9e:36:21:87:69:05:c0:e1:9b:11:8b:9e:bf:22:
db:a2:1a:ea:69:af:f1:7e:9a:85:66:38:31:62:d4:31:3c:01:
8a:31:87:f8:b2:84:0b:7a:0b:35:54:2a:6c:05:64:bb:88:da:
b6:75:e9:a9:75:6c:e6:1d:1c:be:ed:97:71:97:f6:62:67:08:
3c:8f:9a:02:90:40:7a:b6:9e:39:39:c7:65:dd:e0:3d:86:28:
ca:e9:57:d7:da:67:85:9f:30:c7:93:84:c3:68:24:75:5e:f0:
66:51:66:59:97:f8:76:8c:54:8f:43:53:e6:c0:10:56:15:0a:
f4:ff:b4:ce:85:50:3e:3f:e3:d7:79:ac:cd:e3:d8:f3:ef:d4:
f9:11:a6:a2:63:4f:bb:e9:52:da:9d:3c:aa:ae:f7:3f:f8:0c:
29:00:10:1c:5f:c0:5a:c7:87:d8:75:5f:ed:ae:43:4b:ce:7a:
ef:85:19:61:25:5e:1f:40:99:a4:77:ac:78:b1:7e:4a:32:45:
d5:f7:f9:d2:3b:d9:80:06:3f:5f:85:d9:e3:a7:49:82:a1:54:
82:da:76:ce:12:89:40:5e:fb:3c:a4:1b:99:97:d8:80:af:1b:
54:7c:7d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:37:10 2025 by rpki-client