Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
File: FzTbXEHnEbc9jynawS6bg2TNH70.mft (raw, json)
Hash identifier: SbLCtfdiK/JSVGONb67F8OGmdNqoUfro+v8I7Xwm8KI=
Subject key identifier: 5C:78:2D:15:82:FA:30:E0:FE:E7:5B:31:81:91:71:C0:76:48:C7:CD
Authority key identifier: 17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
Certificate issuer: /CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Certificate serial: 01975422DF54DF2F08C09B8C7CA1EA133774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
Manifest number: 1512
Signing time: Mon 09 Jun 2025 10:01:00 +0000
Manifest this update: Mon 09 Jun 2025 10:01:00 +0000
Manifest next update: Tue 10 Jun 2025 10:01:00 +0000
Files and hashes: 1: FzTbXEHnEbc9jynawS6bg2TNH70.crl (hash: QAFM1+5oOzO+O9a/LoiI006Tq9a2ZgyqleEwhiSp67w=)
2: _ryT7JJRyl2zbDlcHLiieOVaWDE.roa (hash: aYopHcEKoiKmgUw0u7ZqiunqjMA1+tPcCa/wAYiX86g=)
3: cmxdqS626N731JSDXMkhCrtA4_Q.roa (hash: LRekbyCIvJRl2MojJwg69VWuVHL2U6Aun+QU7GJY++E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:df:54:df:2f:08:c0:9b:8c:7c:a1:ea:13:37:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Validity
Not Before: Jun 9 10:01:00 2025 GMT
Not After : Jun 10 10:01:00 2025 GMT
Subject: CN=5c782d1582fa30e0fee75b31819171c07648c7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:03:ab:8f:ef:79:14:b0:9f:35:98:6b:2a:
98:15:43:b3:a5:2f:50:11:97:20:70:06:f3:b2:db:
63:11:4e:2c:16:19:d8:e8:17:c6:48:de:ae:1c:4c:
bf:12:32:46:b5:17:08:bb:fc:59:f3:44:9d:db:51:
0d:91:f4:50:7c:7b:e0:1c:f0:8a:a3:52:f1:07:ed:
0b:54:9c:cd:fc:b7:90:b0:f0:f6:9d:f7:ca:6c:82:
8a:8f:e6:ef:36:a3:93:a0:bc:91:14:2c:c8:47:8a:
1a:7b:13:5d:7a:b9:a2:93:50:42:9c:8a:b6:48:e0:
5d:1e:7e:0f:57:6b:b5:de:3d:d3:14:ce:3c:cb:64:
d8:a2:61:47:27:d9:d1:e1:4d:02:fe:2f:db:2b:2f:
56:ae:50:04:31:7a:15:8f:ca:3a:80:22:92:b7:d6:
48:fb:58:77:dc:4f:7a:45:69:50:fc:3a:84:ac:e8:
72:67:ec:8c:69:1c:b1:ff:34:6a:68:d5:7a:4c:63:
38:52:63:66:34:63:6d:79:63:65:b4:59:41:62:34:
2d:97:87:5b:f8:2c:f6:46:43:db:21:08:d3:6f:5a:
79:11:11:51:48:f6:56:17:e4:74:b9:63:04:a8:65:
bd:53:48:d7:f1:a2:3a:73:28:fb:5a:69:6b:51:90:
79:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:78:2D:15:82:FA:30:E0:FE:E7:5B:31:81:91:71:C0:76:48:C7:CD
X509v3 Authority Key Identifier:
keyid:17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:25:5f:18:b7:0f:6f:fd:96:a2:70:dc:de:d8:5e:e3:b8:6b:
61:95:7a:85:1e:9d:e1:b6:86:4c:c1:dd:d8:d2:d9:6c:7d:94:
eb:7f:91:9c:66:76:39:a8:7f:95:b7:c3:ce:9d:40:85:15:26:
f7:9c:b3:e8:95:1c:66:c4:ba:f1:67:7e:80:7a:9c:28:93:85:
8c:24:25:dc:fa:16:45:89:ce:3a:e0:6d:46:53:57:94:fe:bf:
f3:e7:c0:27:01:ab:9b:62:cf:5f:a0:67:d5:0f:db:83:83:fa:
ff:91:17:65:63:ec:07:6a:a6:50:62:36:ae:aa:0e:86:9f:58:
9a:6a:94:75:6a:cc:13:f6:c1:0e:c4:30:b3:f6:23:8a:58:f4:
3f:a1:4e:54:36:e7:98:d9:05:15:46:57:7e:99:57:b8:12:6d:
fc:33:77:f8:8c:98:fd:06:14:f3:13:ac:2d:59:91:0b:3f:e6:
77:37:28:31:4c:0c:d3:f8:a4:69:15:2d:4a:ed:24:1f:e1:c8:
dd:aa:5a:6c:41:51:2a:f3:fc:df:0f:a6:48:b9:ba:10:f2:37:
62:24:f9:a8:e7:2b:b3:e1:c1:87:ee:ae:25:12:2d:42:5a:80:
0d:9d:7f:7d:96:5f:ed:71:62:c9:68:f9:73:d6:c4:55:a2:ba:
51:1a:65:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:28:54 2025 by rpki-client