Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
File: FnrFIxoNe8WCRZCgsvYh7emEdww.mft (raw, json)
Hash identifier: GIo7dBUPgCCUPp+8ubXahW14Rp0t4sbcMtvLuNJtu4E=
Subject key identifier: BF:73:3D:85:0E:A6:6D:EA:66:09:56:15:AE:ED:2A:79:38:79:6B:1B
Authority key identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
Certificate issuer: /CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Certificate serial: 0197499F1A6FEC13B92DC73F72FF6757328D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
Manifest number: 1041
Signing time: Sat 07 Jun 2025 09:00:53 +0000
Manifest this update: Sat 07 Jun 2025 09:00:53 +0000
Manifest next update: Sun 08 Jun 2025 09:00:53 +0000
Files and hashes: 1: CpHbUv6AMr2IBRTUslkSn14mbAM.roa (hash: hbGa8sRUPNzKoKWW9t46YLOtfBF6LvE9GQwcI4qQDDE=)
2: FnrFIxoNe8WCRZCgsvYh7emEdww.crl (hash: DFx/mnjt7P8jFqi0HGJJxZq9+VlEe837ty92YUrX4gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:1a:6f:ec:13:b9:2d:c7:3f:72:ff:67:57:32:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Validity
Not Before: Jun 7 09:00:53 2025 GMT
Not After : Jun 8 09:00:53 2025 GMT
Subject: CN=bf733d850ea66dea66095615aeed2a7938796b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:96:fc:a1:a2:e3:5f:d8:80:9e:f3:c5:59:
88:62:7f:ae:ec:48:35:3e:ce:4d:e0:a5:5f:89:29:
f6:2c:99:c2:92:f7:65:9a:8b:93:5d:91:49:2a:92:
b7:1d:0a:49:84:bf:5f:71:8e:ec:26:d6:b1:99:42:
1c:8c:07:59:35:95:a6:0d:5e:df:44:e8:2a:66:9a:
25:bc:80:cf:bf:d6:ba:99:af:17:94:06:ba:83:4b:
20:95:23:f3:a7:ee:d6:1f:26:93:5e:43:94:03:03:
4f:10:ce:41:b6:ec:0d:8c:31:82:cc:16:41:39:8b:
62:e7:09:08:98:66:61:91:59:33:c2:75:e1:17:49:
84:4d:29:95:59:02:3d:d1:95:46:cd:ea:53:47:49:
d0:a3:41:2a:32:8e:ba:09:d0:59:1e:b8:9b:28:5d:
26:63:fc:95:a0:1e:17:31:05:13:d5:77:20:98:45:
c0:c2:4d:a9:bc:cd:3b:8e:96:a8:6c:44:94:a0:08:
cd:c6:74:c6:fe:71:e9:2d:a8:b1:fa:5b:20:11:0c:
48:d3:e8:1b:f1:f9:84:22:d8:f7:56:7d:b6:bb:08:
02:b5:88:0f:ef:15:53:b5:ed:b1:23:ac:10:cf:2f:
cb:90:a1:a1:b3:c4:b1:36:7d:9d:48:01:72:cf:6c:
64:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:73:3D:85:0E:A6:6D:EA:66:09:56:15:AE:ED:2A:79:38:79:6B:1B
X509v3 Authority Key Identifier:
keyid:16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e9:25:54:80:c9:1c:38:e7:43:bd:f7:6c:3c:61:1b:9c:28:
15:3f:db:c5:8a:4f:47:cc:f1:22:5b:08:22:75:e8:37:1d:68:
f0:f1:d1:22:b0:80:8a:0f:f6:21:28:1a:80:fb:18:c5:7f:8c:
7a:bc:93:55:39:b5:06:48:81:6b:88:87:ce:39:31:cb:77:2b:
46:69:c3:bd:d7:5a:86:b3:c5:ef:32:f2:4a:1b:3e:8d:73:fe:
73:d4:1f:97:f6:50:bc:cd:b3:8e:da:52:13:bc:65:a2:fa:38:
fe:90:3c:ad:63:09:a7:f0:7c:a7:9b:8c:71:52:19:66:00:fb:
de:19:d0:5c:aa:38:33:a9:58:41:0a:af:d8:56:83:5e:04:6c:
88:11:ac:14:5e:6f:6f:6b:6e:0a:f5:31:f7:39:df:45:15:1d:
6e:98:5b:88:f9:dd:d5:8e:be:1d:30:fa:a2:74:b4:f7:7e:ad:
52:9f:6a:24:d7:05:48:7e:aa:e5:be:bc:cf:10:0d:4a:6c:63:
40:b9:ad:88:5b:85:02:c7:a9:13:7a:da:ed:44:63:f3:56:20:
e4:ad:94:94:b3:6c:22:61:7d:5d:7e:cd:88:aa:ae:23:61:d0:
67:91:54:15:b2:39:58:75:38:4f:8d:c1:93:9f:dd:b3:3d:36:
f8:95:18:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:31:40 2025 by rpki-client