Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier: KPdH7zkQFEIQNNSUPKsPlmTzzlMD/dIgQrD/whzQzdY=
Subject key identifier: 85:FD:42:7D:19:06:39:D5:0C:CA:4F:9F:D7:01:43:34:8B:74:3A:CA
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 01974D0E2F22B821FA75A449AFE9BB242DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 01:01:04 +0000
Manifest this update: Sun 08 Jun 2025 01:01:04 +0000
Manifest next update: Mon 09 Jun 2025 01:01:04 +0000
Files and hashes: 1: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: rV7eIe/VA8yVcPQaj5r6sD9l88P1KbhHM6znlNkzvRg=)
2: WEXs_7mi3mpWOcUG8wP1gKvlFMA.roa (hash: +bGwwC+VYAEY8cjrkr182bmVAbIXzAvAjxcOXwPk5RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:2f:22:b8:21:fa:75:a4:49:af:e9:bb:24:2d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: Jun 8 01:01:04 2025 GMT
Not After : Jun 9 01:01:04 2025 GMT
Subject: CN=85fd427d190639d50cca4f9fd70143348b743aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f8:9f:f1:b9:e5:2f:b9:60:5c:fe:13:ce:ad:
e6:22:a3:30:d8:a4:48:04:50:60:e3:f4:b5:6c:6a:
2a:41:f7:a3:26:35:56:eb:b3:a6:66:0a:c6:dd:83:
5e:b4:67:d9:47:cf:72:f8:db:5e:33:69:09:22:ff:
c2:83:c1:e7:4a:2d:0d:26:26:a2:7d:43:d8:b4:6e:
3e:4f:65:10:d7:a2:8e:06:f2:f6:22:e4:eb:6b:58:
31:1a:55:f2:ee:58:27:54:25:a7:2a:dc:3f:bc:40:
75:66:0b:44:d5:02:5d:a7:ef:c6:3d:69:b7:3d:55:
5c:08:0a:51:30:ed:61:de:2a:2e:4f:88:9b:91:a1:
e2:e6:22:5e:7d:c9:07:74:ac:1d:ab:54:c3:62:be:
c3:c1:dd:41:a8:b0:b3:14:25:25:ea:1c:a8:86:19:
d9:18:8b:c3:20:de:b0:e0:72:e8:a3:8d:3b:c4:d0:
8f:d5:ba:a1:fd:17:74:27:95:56:0b:3d:12:f4:f5:
d5:15:f4:69:f6:4d:04:ef:9d:7c:4b:25:80:ba:47:
64:0a:fa:a6:59:93:11:ea:2d:cb:70:88:36:0d:14:
d9:f3:b6:ae:18:f8:52:b5:5c:ec:39:72:fe:64:69:
a4:a8:be:96:1e:de:c9:61:86:9c:c4:dd:db:ce:55:
3b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FD:42:7D:19:06:39:D5:0C:CA:4F:9F:D7:01:43:34:8B:74:3A:CA
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f9:af:01:97:4f:0c:98:ea:c5:c5:12:2d:d9:27:21:99:58:
95:57:75:6c:52:3e:56:6f:99:8f:9c:5d:71:a2:16:3e:fa:18:
b4:9e:42:f9:ee:54:b8:87:45:b7:b7:21:2f:84:24:72:1a:b6:
84:a9:98:70:27:87:f4:d6:8b:e1:e1:3c:c3:77:5b:53:0d:09:
59:3a:c9:6f:62:ae:43:18:f8:72:23:a6:f8:29:93:71:5d:0a:
c1:29:eb:2e:02:a4:a5:7f:96:7b:83:87:ac:c8:b9:dd:ec:00:
55:c3:58:86:07:be:3e:33:e4:39:ad:4b:e8:5d:d8:1e:69:b2:
80:e6:08:7a:8b:72:95:28:da:b1:b0:8c:9a:f0:ba:9c:ef:f1:
2f:a2:85:b6:30:92:b3:78:c4:7e:2d:bf:04:ac:52:77:79:f8:
fa:75:0e:b3:43:4f:af:b4:67:05:2e:ce:ae:5d:30:a9:4e:22:
90:5d:ea:e3:26:70:db:d6:e3:72:c5:c6:9d:22:fc:4e:b5:94:
1d:45:bf:cd:e5:ec:85:db:46:a2:79:78:26:b1:1a:d0:ac:91:
a0:db:e3:54:2e:41:58:3a:d0:7e:85:88:e8:2a:ee:db:fe:fc:
59:1f:0d:06:70:c0:1c:07:02:cc:0b:f5:88:d3:e1:ce:3f:68:
00:d1:e0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:59:31 2025 by rpki-client