Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
File: FNQhCjRMmZST5hz53XNWd9OLwF0.mft (raw, json)
Hash identifier: tPNx1BT58unUEh8v8vEj0DXH8WYVR9TkO7rHN5USJ1s=
Subject key identifier: FD:69:CA:67:64:9C:85:1E:EA:3E:E8:46:F1:A9:3E:A3:94:43:3D:69
Authority key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
Certificate issuer: /CN=14d4210a344c999493e61cf9dd735677d38bc05d
Certificate serial: 019751C61513CAE3F90D0A13797888BA54B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
Manifest number: 0704
Signing time: Sun 08 Jun 2025 23:00:25 +0000
Manifest this update: Sun 08 Jun 2025 23:00:25 +0000
Manifest next update: Mon 09 Jun 2025 23:00:25 +0000
Files and hashes: 1: 2MEo2jMoegCH1A6pe5270kRxVBU.roa (hash: YgKMo8+McPuffH8rbU6912C5wY/cPyLb0wIwXbLwGqw=)
2: FNQhCjRMmZST5hz53XNWd9OLwF0.crl (hash: 8IxzTAH18cLZmYLx/l1u2+Doq/vQChEV2bQYwvEcznY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:15:13:ca:e3:f9:0d:0a:13:79:78:88:ba:54:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d4210a344c999493e61cf9dd735677d38bc05d
Validity
Not Before: Jun 8 23:00:25 2025 GMT
Not After : Jun 9 23:00:25 2025 GMT
Subject: CN=fd69ca67649c851eea3ee846f1a93ea394433d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e5:90:dc:ab:16:74:bd:48:64:37:b3:c2:7e:
f6:2f:40:3a:a8:a9:5a:6d:f1:1a:73:ef:cb:ad:cc:
86:4c:db:1b:df:cb:a9:79:4d:a1:74:ab:19:2c:f8:
94:89:da:93:df:e2:d7:65:47:02:99:dd:a8:df:81:
a4:f2:b6:31:d1:7d:b9:ed:9f:88:f2:d4:8d:e6:94:
24:57:09:36:e4:3b:3b:95:05:49:34:13:c6:36:84:
87:68:27:0a:29:46:28:dc:94:e3:6e:c6:88:64:87:
1d:0f:1e:c7:e6:05:93:16:05:b5:91:3c:ca:44:7d:
48:81:84:97:1c:77:f8:d8:2a:e2:bc:8a:67:c9:87:
c7:a3:89:a6:52:e1:d4:db:e6:62:73:d4:3a:aa:b5:
da:14:43:56:6b:6e:25:97:04:8f:dc:9d:06:f1:34:
5b:e5:c6:bf:09:04:f0:66:e8:34:f2:ca:95:7f:0c:
5a:05:61:1e:06:21:bd:00:9c:cd:db:1b:f4:c3:24:
1b:be:24:4c:fa:30:41:d5:4f:1b:8f:83:c1:d9:84:
44:41:31:3a:e2:e3:0e:e3:89:1a:17:5c:84:99:c3:
a5:5f:10:44:40:06:18:cf:39:81:34:60:a3:a4:ac:
9a:54:b7:f1:18:b0:14:a5:0e:fe:46:f9:6e:c6:82:
3d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:69:CA:67:64:9C:85:1E:EA:3E:E8:46:F1:A9:3E:A3:94:43:3D:69
X509v3 Authority Key Identifier:
keyid:14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fd:89:c7:05:71:ea:65:ab:02:82:5c:af:29:91:cd:ad:e4:
ed:2e:7d:2b:b5:48:17:50:78:59:c6:f7:1a:3c:a8:b6:23:65:
3d:09:f7:4c:7f:4f:57:0a:d3:d5:18:b9:1d:75:e5:a2:d9:f9:
a2:5e:16:9c:5e:a4:df:12:58:ce:12:c9:61:c8:d1:4d:3d:19:
05:77:07:94:24:a2:a6:1b:7c:4d:34:58:bf:29:52:14:67:9e:
f0:4c:d3:47:3b:72:23:86:5a:8f:2f:36:d2:cc:6f:c5:3c:81:
cd:cf:1f:56:eb:b4:3e:d5:08:ae:62:e8:19:17:e1:e9:ac:90:
36:23:cd:93:65:27:a9:28:06:d8:df:6d:6e:7f:38:33:f9:1a:
76:2c:3c:cc:46:b2:85:a4:8b:17:bc:2e:4a:83:b2:f0:50:2a:
88:c7:3f:31:72:dc:e8:c2:e2:a2:ad:5d:57:c5:86:a2:c5:ae:
fa:c1:3a:db:95:01:c7:ef:66:00:d3:8a:41:b6:02:5d:8f:24:
56:87:ea:26:9d:91:70:00:a3:bb:ab:ed:be:62:f2:6e:c6:04:
d8:09:37:35:8b:57:5d:3d:29:d0:7a:37:32:3b:d0:14:9b:ee:
75:dc:a5:00:ec:a0:d3:f2:6f:fd:bf:9e:cf:10:15:66:ff:05:
15:d1:56:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:05:14 2025 by rpki-client