Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier: NjzXZ6qQc52ts5fXOmwhdCnf9r6ttAfp9HanmdwgUQw=
Subject key identifier: A0:74:C9:68:5B:EB:5F:12:08:F4:6F:1B:C5:EC:A3:98:E6:EE:B4:A9
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial: 019750466F9D949A220000D98DBFBFEA7A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number: 0A37
Signing time: Sun 08 Jun 2025 16:01:22 +0000
Manifest this update: Sun 08 Jun 2025 16:01:22 +0000
Manifest next update: Mon 09 Jun 2025 16:01:22 +0000
Files and hashes: 1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: DP95E5VwVdYkLXysqwQjFAghLrFi6TQtYh1n5crlZhc=)
2: VZ-kHDApXcDT9_2kTleGC7kcJA4.roa (hash: 8N2QqFM6UOQbHR5Tx8BGVp4hMQ1auv8Qt97IgnTaVI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:6f:9d:94:9a:22:00:00:d9:8d:bf:bf:ea:7a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
Validity
Not Before: Jun 8 16:01:22 2025 GMT
Not After : Jun 9 16:01:22 2025 GMT
Subject: CN=a074c9685beb5f1208f46f1bc5eca398e6eeb4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:81:fd:79:d6:8d:29:fc:73:ea:94:26:24:
c3:03:e8:ab:b6:06:a1:44:48:3a:e6:83:16:cc:ed:
15:dd:f3:da:c8:d8:42:aa:95:c4:f2:5a:0b:26:bb:
50:d6:a2:9e:6c:ce:33:00:d9:8e:47:3c:06:1d:9f:
f5:fe:d3:d4:42:a3:68:72:ba:18:e6:21:b8:30:65:
4a:09:7c:86:19:08:83:38:65:b7:ae:44:d2:ca:d9:
73:88:38:e7:38:62:31:05:34:08:a2:77:c6:5a:49:
87:10:63:be:30:3e:57:d2:b2:33:f2:89:e8:dd:1e:
d4:0f:a6:48:79:84:30:5b:be:64:6b:75:ec:fb:c8:
dc:22:74:69:42:9a:06:90:1f:ac:75:4f:f9:c3:74:
62:c2:47:e8:04:de:58:f2:5b:84:a1:12:fa:f4:c5:
6d:1d:ec:c4:38:d7:d3:34:9f:5c:3c:26:90:e2:06:
d7:8b:77:5a:16:44:12:39:63:5a:79:69:60:5a:72:
49:12:8c:3e:83:cd:d0:12:3d:b4:e3:62:ee:71:19:
9e:93:8f:6c:e6:d6:95:35:0c:96:90:e9:28:63:c9:
37:09:5d:29:28:2c:8c:d9:a1:51:02:de:4f:5d:bc:
ad:04:f5:b0:26:dc:37:f2:47:d0:f4:44:6b:17:00:
06:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:74:C9:68:5B:EB:5F:12:08:F4:6F:1B:C5:EC:A3:98:E6:EE:B4:A9
X509v3 Authority Key Identifier:
keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b2:c2:c2:25:fb:5c:51:e5:14:8d:86:4a:3b:4f:6a:5f:ba:
cd:df:92:b2:c7:f2:80:46:6e:f1:25:56:b7:8f:85:d1:aa:e2:
3c:f2:60:18:52:17:06:6a:91:44:f6:fd:09:c6:8a:0b:2e:89:
b2:e9:fd:03:5f:c9:94:d7:3e:50:06:ca:87:cf:dc:fc:aa:b9:
59:12:f7:50:0d:7f:bd:6f:d7:a3:c4:36:3e:08:67:73:93:26:
de:11:f4:df:d1:70:c1:d7:ec:42:de:9f:5f:27:d3:79:5d:69:
c4:64:f4:27:0e:ea:2e:d1:5a:cf:dd:06:98:9b:a0:98:fa:98:
26:95:26:a4:5b:31:ec:d6:7d:01:11:4f:97:13:f5:82:f6:49:
32:8b:dd:df:07:e9:d6:f6:8d:b3:41:dc:8b:cd:5e:5d:b5:3d:
8b:12:a6:2c:88:ca:94:0b:e9:96:88:3a:a2:49:1c:d3:8a:72:
02:39:c5:fc:62:10:50:f6:db:67:01:3a:dc:ad:03:c8:e8:0b:
36:8b:9f:8c:a3:39:bc:33:04:7e:5e:61:d2:41:10:bb:23:ce:
5d:d5:2b:59:97:cc:95:b6:3f:2d:a2:e4:12:ca:ae:d0:91:ad:
2b:67:29:d0:b4:d4:5e:93:0d:7b:48:64:9f:8b:31:e1:48:c9:
f0:a4:7e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:18:04 2025 by rpki-client