Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
File: FT0HLM7wC_Rk1mDb0F2todoz0sg.mft (raw, json)
Hash identifier: MuIgsumUgmU+70dkiIgl2yucyr/Ml9pGNgWF79V6N3Q=
Subject key identifier: B4:BF:99:B8:C6:A4:05:86:E8:1C:B9:F6:70:5A:32:4A:57:48:EA:5C
Authority key identifier: 15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
Certificate issuer: /CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Certificate serial: 019748FA74DF04135BEC22CFE86A28323079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
Manifest number: 07A3
Signing time: Sat 07 Jun 2025 06:01:02 +0000
Manifest this update: Sat 07 Jun 2025 06:01:02 +0000
Manifest next update: Sun 08 Jun 2025 06:01:02 +0000
Files and hashes: 1: F0iKq1ijjGBYajSFmQyhreXVAQY.roa (hash: m8/L5cr+uaNLauEK1OLTPn18oa9yVQaLyP+GQwyUFcE=)
2: FT0HLM7wC_Rk1mDb0F2todoz0sg.crl (hash: NLED7HiOKe/jJ7j9Aae8wZgxgtwp8teGasH3HNrc2bs=)
3: _2lRv88Gb4s0UGVaP2Mgmxw3ML8.roa (hash: kqmxs4EHa2TZhRmR5+4BZAkd9MXd2Id3FkNPJK6jmmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:74:df:04:13:5b:ec:22:cf:e8:6a:28:32:30:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Validity
Not Before: Jun 7 06:01:02 2025 GMT
Not After : Jun 8 06:01:02 2025 GMT
Subject: CN=b4bf99b8c6a40586e81cb9f6705a324a5748ea5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:32:9c:87:97:28:2f:f6:58:38:35:5f:d9:fb:
34:95:61:87:e8:ae:65:4a:3f:9c:4c:f9:e5:a8:31:
d0:e8:0e:23:74:f9:45:ea:a1:c1:37:d9:50:bc:93:
3d:7e:d9:02:ad:ba:a3:65:ac:17:aa:cf:01:ef:da:
24:37:c6:32:bd:fd:78:3c:b3:59:73:04:25:e7:5f:
cb:c1:b8:bc:1b:e8:ce:99:4b:02:ea:51:03:81:77:
9f:bb:fb:03:eb:fa:05:92:7b:f0:f4:5d:a3:5e:43:
32:60:6f:14:aa:ff:ba:81:fa:28:ed:a0:06:d4:60:
54:1a:87:de:55:53:89:59:28:d0:ac:ec:02:8d:be:
4a:5b:00:47:ad:ab:3d:41:ee:f0:94:a2:a0:6d:ec:
31:76:3a:7e:ac:3d:28:b5:a4:35:4a:2c:71:2b:d8:
e0:2f:9c:d9:91:2f:54:ba:92:fa:56:cc:1d:0f:22:
29:03:b6:74:30:88:fa:cb:74:64:c8:77:a4:fa:5d:
3b:44:4c:0d:f0:7e:76:11:82:87:f2:63:e5:33:64:
e6:f4:e5:8b:70:95:9b:b6:46:0c:eb:67:e2:b8:d3:
3b:fb:20:d8:c6:cf:fe:69:de:ff:15:c8:91:9b:8d:
a8:f9:4d:c5:ed:01:a3:35:b6:b3:95:26:09:1d:0c:
a3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BF:99:B8:C6:A4:05:86:E8:1C:B9:F6:70:5A:32:4A:57:48:EA:5C
X509v3 Authority Key Identifier:
keyid:15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9f:95:fe:31:18:b6:6a:17:e4:d9:a5:30:19:3e:c6:03:da:
37:3d:f2:8c:f1:21:92:d9:a9:ee:e5:1c:cb:a9:61:ec:ea:5f:
ed:54:68:80:3a:dc:94:0c:2e:8e:20:10:15:ed:7b:8d:cb:9c:
f2:00:b0:31:28:b6:5a:64:79:2b:0f:83:4b:fd:6e:f1:71:6e:
87:be:b1:b3:41:d2:9c:6d:d0:56:de:f6:ff:88:48:47:b4:dd:
98:b2:7d:60:cc:a9:b9:1f:e6:43:10:f5:58:8b:74:3d:89:78:
73:cc:11:7e:c7:f0:3d:c4:9b:fc:be:1d:80:8b:6f:ff:f9:4b:
81:a4:41:92:f9:b5:38:fd:eb:44:cb:f1:c4:d4:8e:63:30:a8:
d2:81:99:4b:54:38:19:93:9e:d3:56:18:d0:0e:47:36:93:a9:
03:61:5c:f9:a5:17:9b:4f:45:a4:d1:c7:e2:1f:f1:bf:bb:76:
7b:02:27:81:d7:af:93:be:30:38:f2:95:83:73:72:7d:01:08:
6b:bb:08:3d:ef:64:25:26:e6:e9:81:25:6b:e8:33:99:f4:b9:
3b:a9:9a:2a:c2:e6:3a:e6:d5:50:b7:79:41:4f:6a:5e:fe:c6:
45:0c:9c:45:e1:52:34:9f:01:98:11:c4:64:c9:89:77:22:b7:
cb:3a:9f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:15 2025 by rpki-client