Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
File: FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft (raw, json)
Hash identifier: swwR4ObfukxCprk9TKo7bN4+yNZRTlwb0T+TNSUrIS0=
Subject key identifier: 53:82:FD:D2:90:13:6F:D5:B2:B5:16:0F:C3:B7:88:3B:E9:FD:F6:2F
Authority key identifier: 15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
Certificate issuer: /CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Certificate serial: 01974BC483FA8D3BF0FC3D993B190AD7E12C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
Manifest number: 11F0
Signing time: Sat 07 Jun 2025 19:00:59 +0000
Manifest this update: Sat 07 Jun 2025 19:00:59 +0000
Manifest next update: Sun 08 Jun 2025 19:00:59 +0000
Files and hashes: 1: FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl (hash: ec/tsS3SvjuItseoesOE3IVFX+UtJYSKqZGd4kWFFys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:83:fa:8d:3b:f0:fc:3d:99:3b:19:0a:d7:e1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Validity
Not Before: Jun 7 19:00:59 2025 GMT
Not After : Jun 8 19:00:59 2025 GMT
Subject: CN=5382fdd290136fd5b2b5160fc3b7883be9fdf62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:ae:1b:9b:9d:2c:31:6c:03:78:09:98:d2:
6f:ae:f4:34:a9:33:32:16:52:5c:ea:64:68:1c:ae:
ce:c3:cb:71:ed:ad:8d:36:a0:8e:69:0e:6a:3f:e5:
01:91:76:cf:8a:9d:25:66:76:ee:4b:52:92:e3:d8:
fe:ec:ac:97:6c:9b:ec:ce:83:7a:1d:b7:34:b8:61:
c0:63:00:dd:db:cc:f7:e0:e0:ff:a4:8a:3b:ee:41:
d3:dc:7a:21:ba:50:22:a7:49:5d:0a:d3:f9:37:6e:
65:37:c4:e6:62:38:47:cc:b7:22:6e:fc:99:1d:06:
12:ba:d2:84:c3:37:e0:01:f8:05:2f:a8:6b:c6:a1:
e0:1b:3e:09:b6:15:2f:80:e0:30:5a:30:f5:29:7f:
62:25:2e:48:de:56:e8:5e:c1:a4:d6:b1:f0:4a:3b:
0c:1d:48:93:31:11:b3:b8:a5:ad:dd:5d:75:9a:c5:
f9:a9:01:08:4c:13:23:ee:53:e4:60:70:8d:f6:d8:
cf:33:d5:ea:f2:cf:12:a8:d2:f2:7a:77:73:53:ed:
db:26:26:01:1e:b1:f4:d4:f6:c3:8e:19:b0:d2:4b:
28:a1:ae:65:f1:e9:6d:ce:29:6a:81:dc:e0:68:a4:
89:7a:d9:25:b3:ed:44:1e:c7:0d:05:fc:70:34:ab:
4b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:82:FD:D2:90:13:6F:D5:B2:B5:16:0F:C3:B7:88:3B:E9:FD:F6:2F
X509v3 Authority Key Identifier:
keyid:15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:37:71:84:58:d5:98:cc:c6:49:5b:46:ee:6c:77:1f:eb:e3:
10:55:ab:27:d3:72:a5:6f:47:9b:c8:19:c1:29:58:f1:7a:6d:
1c:ff:b5:f0:4b:5e:96:d3:85:b0:21:08:da:c0:5e:ed:a3:ce:
19:4a:3e:d0:92:34:5d:23:79:2a:6a:82:5a:29:be:48:20:16:
27:e4:61:29:83:49:b9:87:52:34:eb:4b:c9:15:ae:28:be:bf:
4c:5f:5c:ea:06:24:94:a8:74:0d:c6:3c:76:06:3f:56:75:6f:
07:59:b7:3a:7b:96:88:e9:ed:e9:98:8b:f3:3d:da:3c:91:8c:
d1:2f:ff:53:50:6d:54:c9:c5:1d:bf:5b:81:f1:28:b3:35:9b:
4a:d7:61:81:25:61:1d:a3:c6:3f:da:85:4e:ab:33:ec:5f:a6:
32:df:4a:65:cf:4d:22:ee:93:a4:c3:df:14:3e:99:ed:3c:48:
72:71:83:02:2e:bc:ca:37:6d:4c:1c:d2:f6:2c:d5:3e:1f:85:
0f:d0:95:8a:4d:c0:56:db:70:08:a0:10:07:e0:79:84:38:b3:
c7:6b:43:6c:92:34:66:98:16:cb:aa:53:fa:06:0c:19:77:f9:
09:0b:04:f9:03:03:93:0f:83:71:5c:b5:99:0c:23:a3:44:7f:
83:98:3a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:19:24 2025 by rpki-client