Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
File: FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft (raw, json)
Hash identifier: ABuF3E8z9Fv7VbA9WwrOl0GdpCtT4Q89LxPoHqBxsJc=
Subject key identifier: BF:17:B5:35:2D:93:1F:31:2C:DD:92:D4:7F:C6:3F:43:82:F4:C4:7C
Authority key identifier: 14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A
Certificate issuer: /CN=1462a497efe0bc92b7ed92529ebbe39cb19d330a
Certificate serial: 0197470BD16BD64730125509E086AA6557B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
Manifest number: 0973
Signing time: Fri 06 Jun 2025 21:00:46 +0000
Manifest this update: Fri 06 Jun 2025 21:00:46 +0000
Manifest next update: Sat 07 Jun 2025 21:00:46 +0000
Files and hashes: 1: C5kS-eXFEoRGhSGKrj1aky_A-YU.roa (hash: 0Cexvh0L+qwpqym6REc7bvetIUnS6MiKORaDRSgSxQo=)
2: FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl (hash: 2bsLyveIYhfknAlXnj8wDBN2gVYhULAYQI6jVBZRsxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:d1:6b:d6:47:30:12:55:09:e0:86:aa:65:57:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1462a497efe0bc92b7ed92529ebbe39cb19d330a
Validity
Not Before: Jun 6 21:00:46 2025 GMT
Not After : Jun 7 21:00:46 2025 GMT
Subject: CN=bf17b5352d931f312cdd92d47fc63f4382f4c47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:f6:3d:73:17:d5:53:77:ad:61:3e:23:27:
d3:8a:11:9c:d8:97:2a:68:4a:19:08:53:c0:df:27:
75:a3:dd:19:8e:a3:63:2c:b0:eb:1c:d4:22:48:34:
13:8b:8d:60:d0:d6:de:34:96:35:73:21:9b:52:f7:
56:5b:ab:eb:62:31:98:cb:c4:95:fd:bd:1e:81:16:
2e:1c:32:dd:71:13:19:22:20:0a:67:fc:e8:2c:48:
76:8b:33:a4:fc:5e:92:df:33:34:cd:84:58:4f:a2:
2b:05:e7:16:ab:2d:e2:ac:b1:31:04:27:ad:a8:4c:
46:30:7d:29:27:a7:62:5b:05:dc:e6:77:43:51:14:
c6:f8:51:b4:38:3d:c1:47:bc:3b:c0:90:d4:2a:1b:
ba:5d:06:a6:ba:91:95:e7:99:92:08:9e:b2:e3:5b:
62:d8:50:a8:ff:5b:8a:1d:0e:b2:a1:8a:c0:d5:af:
b8:62:cf:5d:f5:f6:83:87:5d:b9:2c:04:68:87:8a:
fa:f6:b1:50:dc:99:73:b7:56:7a:2c:b7:2c:8a:1f:
6f:54:99:b9:9a:e3:70:c2:98:60:12:2b:3c:ca:2d:
d2:28:58:e9:e6:ab:98:d7:87:0f:92:89:9d:f8:c3:
78:3f:a2:bd:5e:e4:3e:85:f0:d4:34:26:88:94:40:
21:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:17:B5:35:2D:93:1F:31:2C:DD:92:D4:7F:C6:3F:43:82:F4:C4:7C
X509v3 Authority Key Identifier:
keyid:14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c5:80:74:b2:2d:c9:f7:a5:6b:ba:36:83:b6:e7:9a:f4:e2:
3c:da:9d:bd:6c:4d:d8:c1:ec:50:9c:ac:51:9d:75:c5:48:bb:
bb:40:ba:e1:45:13:27:3e:c1:40:c8:64:e4:02:ef:02:8c:22:
85:e6:6f:f3:62:fe:d3:dc:25:18:75:7a:70:47:60:7d:0b:7d:
00:94:53:f4:5a:84:ae:c4:36:80:d5:75:f9:81:b7:87:bc:6c:
d7:c7:55:34:57:c2:22:df:45:73:cc:6f:05:d8:a1:88:02:c7:
b3:39:76:b4:fe:fb:9f:4b:43:73:3c:a0:2f:c3:c0:79:7c:4f:
08:05:b5:08:3d:1a:71:41:65:ad:fc:65:82:04:88:3f:11:d5:
21:af:12:e5:09:66:b6:75:d4:38:44:a1:d4:12:58:a9:02:89:
66:00:ff:aa:95:d3:ad:6a:48:b1:f6:a3:85:b4:c6:96:e0:b2:
13:48:73:98:00:dd:a3:73:c8:83:e5:ba:fc:61:51:a2:34:42:
e8:ea:23:17:9f:03:0e:62:d2:8f:a5:be:61:18:e8:c5:95:74:
bc:f9:b5:9d:ec:38:30:a1:46:f3:83:91:4d:5b:ef:33:3a:53:
61:2a:12:a6:fe:be:ad:a9:67:91:68:6f:69:82:a3:b4:cf:3b:
21:a7:e6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:24 2025 by rpki-client