Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
File: FumqrOUCeVhbXFpdjuhWEGhsJsA.mft (raw, json)
Hash identifier: /s0z6k7VZPo7pmcbL7FI3mcUmidsGssER9rhmQi1rbk=
Subject key identifier: F8:5C:C9:03:73:A1:B2:70:C3:3C:E8:13:32:F5:46:D3:25:FA:D3:D8
Authority key identifier: 16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0
Certificate issuer: /CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
Certificate serial: 0197D819BFEF538ADF42F219F14378AABA3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
Manifest number: 15C5
Signing time: Sat 05 Jul 2025 01:00:55 +0000
Manifest this update: Sat 05 Jul 2025 01:00:55 +0000
Manifest next update: Sun 06 Jul 2025 01:00:55 +0000
Files and hashes: 1: FumqrOUCeVhbXFpdjuhWEGhsJsA.crl (hash: KuwGC/LqGmdLdWQBmnSvpjoXQuraUvfhkHA0RDQfmOA=)
2: XHC_hDAqYlIYXrUHwPjCSmuap-w.roa (hash: QCdmiPzQ+fM9D3JEIMjhnM6hVdihEFRjXxcysEmoq04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d8:19:bf:ef:53:8a:df:42:f2:19:f1:43:78:aa:ba:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
Validity
Not Before: Jul 5 01:00:55 2025 GMT
Not After : Jul 6 01:00:55 2025 GMT
Subject: CN=f85cc90373a1b270c33ce81332f546d325fad3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:52:d2:f9:1f:d4:10:85:17:65:f9:f1:88:
cd:a0:3c:56:ea:7c:f5:31:4d:aa:02:f7:86:03:f1:
ae:5b:f3:27:8c:2e:6a:76:82:37:2f:fd:05:b5:23:
25:ae:8c:ea:09:62:0e:29:a6:8a:ed:2a:ea:8f:ef:
01:14:95:69:12:72:3c:77:48:cf:51:ec:9d:f6:79:
4f:c0:6d:ea:26:66:1c:16:1c:38:45:26:56:66:95:
b8:98:86:58:cb:bb:1c:93:86:09:bd:4b:fa:f7:19:
bc:cf:79:17:51:06:bc:49:69:40:ed:47:e6:a2:3d:
3e:a0:da:90:0c:1d:41:23:34:7c:5a:68:22:45:eb:
46:24:5c:1a:3f:2d:51:7b:07:89:8f:89:67:09:da:
be:9b:bf:02:fa:7e:6d:63:1b:00:6f:ca:a4:85:17:
0c:8e:6f:43:25:80:47:2d:82:8a:2a:9e:b0:e6:1a:
60:9d:9c:6f:4d:39:ee:02:30:73:6d:2a:0c:02:a9:
cb:e7:09:bc:33:47:5b:d5:a4:5c:f9:b7:61:1e:1c:
f5:a7:a4:11:f3:11:b2:78:20:f5:f8:ae:df:b2:6c:
57:e4:94:90:1f:d3:c8:65:bd:41:5d:ef:e9:69:d9:
e4:2f:ae:62:48:57:78:fd:d4:b9:2b:73:99:aa:e7:
f4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5C:C9:03:73:A1:B2:70:C3:3C:E8:13:32:F5:46:D3:25:FA:D3:D8
X509v3 Authority Key Identifier:
keyid:16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a5:e1:8e:1e:fb:d1:6f:b2:5e:74:d6:0c:9e:41:cd:f5:59:
72:aa:92:e0:d2:46:c5:6f:ac:38:62:bc:87:08:ef:bb:0a:63:
f6:84:cb:5b:95:e2:88:b4:3b:4e:31:73:d0:40:f9:e7:f3:01:
6b:e4:68:52:39:90:99:08:97:24:d5:e0:66:5b:7c:89:d3:8e:
83:5d:df:10:0a:6e:e1:5d:8c:a5:5f:99:ef:26:de:f9:78:1c:
6f:1d:5f:1a:82:bf:dc:a9:66:51:9c:12:a6:a2:a8:a9:06:6c:
ef:83:b2:f4:fb:0f:48:47:16:a8:b9:d4:9d:49:5e:6c:e2:33:
fb:b7:ad:b0:b7:65:fd:5d:b9:47:87:45:d2:69:c5:3d:01:0b:
c0:e3:62:fd:73:41:76:3c:ef:c4:ef:b6:ff:5b:5e:82:d8:6b:
1e:2e:d3:4a:e4:35:c8:b7:b2:ee:ef:18:27:07:23:80:67:c5:
4a:fd:ce:05:92:92:8c:8d:69:ae:45:45:d6:46:a4:4f:cb:47:
47:c6:f8:df:80:6a:29:77:67:ae:25:f8:18:ce:22:2f:dd:d6:
01:94:6e:eb:52:8c:13:22:4e:05:f3:a3:e6:d7:05:1a:8d:de:
c9:3c:7a:79:93:dc:2a:ea:8f:ca:b3:69:2e:90:70:9b:19:a1:
dc:8d:30:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:12:06 2025 by rpki-client