Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
File: FJD8Fzgt1gZqOOQjutstihjRwEU.mft (raw, json)
Hash identifier: 7GxQKIXPix3uUcpfO4B2KEqJ+4Q4w1yaQWHsP2ynvak=
Subject key identifier: 47:74:21:8A:58:9F:AA:4E:62:98:15:DC:A0:95:57:FC:8A:C0:58:F7
Authority key identifier: 14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
Certificate issuer: /CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Certificate serial: 01974C692FA93A5C21E70235E95645CC9FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
Manifest number: 1300
Signing time: Sat 07 Jun 2025 22:00:51 +0000
Manifest this update: Sat 07 Jun 2025 22:00:51 +0000
Manifest next update: Sun 08 Jun 2025 22:00:51 +0000
Files and hashes: 1: FJD8Fzgt1gZqOOQjutstihjRwEU.crl (hash: rlVH50cBRRdKmT7DsYf3S90dGHOQbz7vNqgkquAssHs=)
2: GBpd_CXuB-9kNsxFo6gk--Reihk.roa (hash: g01Wtwi7iT3bkjePjiBnddon67j1RhvdGQsrObyK/EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:2f:a9:3a:5c:21:e7:02:35:e9:56:45:cc:9f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Validity
Not Before: Jun 7 22:00:51 2025 GMT
Not After : Jun 8 22:00:51 2025 GMT
Subject: CN=4774218a589faa4e629815dca09557fc8ac058f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a5:20:6c:53:e3:45:a4:69:41:98:b9:c2:c3:
a1:27:56:98:e3:73:af:e8:3b:28:3d:96:bf:68:ce:
fc:4a:2e:fd:a3:3a:5a:43:34:a1:a9:f7:1d:2f:5a:
05:64:53:e7:d8:e6:28:90:d4:4d:0f:80:75:2a:9f:
bc:1e:eb:0b:5e:49:05:2e:b7:29:bc:66:82:4e:12:
e6:51:ac:17:57:84:0e:71:9f:64:57:09:3b:02:bc:
39:92:d1:1f:df:d9:36:2a:ea:8f:b4:45:b1:8b:7f:
97:68:da:ff:f8:35:9e:19:7e:53:34:3e:38:64:d1:
5d:94:46:81:19:9b:e4:58:3e:6c:d2:30:ee:be:44:
35:51:05:b4:d8:95:66:79:41:80:9c:07:34:88:52:
d8:7c:3f:b9:aa:54:1e:16:d1:b4:8b:b7:0c:e5:84:
56:29:de:40:4e:f4:24:73:3d:bf:f8:c4:e7:05:5f:
c6:98:63:7e:82:63:79:2c:99:11:70:4b:69:13:40:
65:b2:27:b1:17:f8:e8:f8:41:b4:3e:6e:3b:41:23:
4d:0d:04:29:94:80:2c:18:55:bb:08:18:45:94:70:
0e:94:e0:75:1f:00:15:f8:a2:85:33:d2:20:bd:94:
b9:61:3c:2f:cf:d9:39:d2:0a:65:c3:75:f2:9b:7e:
6e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:74:21:8A:58:9F:AA:4E:62:98:15:DC:A0:95:57:FC:8A:C0:58:F7
X509v3 Authority Key Identifier:
keyid:14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:83:1c:c6:6f:f4:2e:c7:81:99:e8:c6:ff:b2:1f:4a:df:1c:
d2:cc:62:7d:8a:5a:b7:a4:0f:b4:d3:1e:5a:53:65:46:f9:b3:
30:df:0f:83:c3:8a:ef:ce:b3:37:17:fd:ef:a7:f6:2d:fe:b9:
cf:6d:e2:61:d5:f3:ff:b9:c8:d0:5f:03:58:17:13:2c:09:8d:
37:0c:0a:34:06:cb:09:94:9d:8e:cd:19:a5:7e:e6:67:0d:56:
07:78:a1:de:7c:63:ea:91:d7:73:83:1b:b6:c2:6d:52:56:a3:
9c:41:15:02:a8:f5:3c:e3:1d:a5:02:3a:3f:08:c1:eb:00:75:
37:ee:70:f2:b8:16:52:a9:2a:e8:29:36:69:63:ab:8b:4d:aa:
6f:2c:f0:ad:92:fc:88:ff:44:71:6e:b9:66:ea:70:43:a4:c8:
c7:ff:77:69:fd:2a:a2:21:20:4f:24:74:8c:35:85:b7:58:2a:
e0:e8:11:32:b4:85:96:81:09:e5:68:4e:fd:b4:69:23:13:8e:
c7:1d:9d:f6:1a:d7:30:bd:25:f5:0b:3a:b5:52:29:20:eb:08:
c5:5e:0c:ff:be:96:1e:f9:ca:43:3b:5d:4b:ee:bd:50:0c:0c:
9f:c3:aa:a9:8c:97:c1:6d:99:86:9d:22:e9:71:df:0f:77:be:
46:ef:20:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:45:13 2025 by rpki-client