Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
File: FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft (raw, json)
Hash identifier: bKBhuAJjAmA/20r9orhZRpe+6mZNBV1Z7W9qlJGlSHI=
Subject key identifier: 96:D2:08:7C:EE:BE:37:CB:C2:BC:45:25:AD:85:BC:13:48:5A:F7:56
Authority key identifier: 15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35
Certificate issuer: /CN=15c18a2908cebd9085e01266bb02fb8af2247735
Certificate serial: 01974C320F3779AA9F17B5075AF73D905C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
Manifest number: 33
Signing time: Sat 07 Jun 2025 21:00:38 +0000
Manifest this update: Sat 07 Jun 2025 21:00:38 +0000
Manifest next update: Sun 08 Jun 2025 21:00:38 +0000
Files and hashes: 1: 2KNjtYfkkvpIBPVL-Dk7JZfM4jU.roa (hash: YZgrPPEN8zGqhO8cwF6VGe00Dd89Opm5ALHWcKmIHgM=)
2: FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl (hash: WMsat/CKdn5Yw/Pd7y2LlCrvB/SPhUbWAU98Y2qTFZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:0f:37:79:aa:9f:17:b5:07:5a:f7:3d:90:5c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c18a2908cebd9085e01266bb02fb8af2247735
Validity
Not Before: Jun 7 21:00:38 2025 GMT
Not After : Jun 8 21:00:38 2025 GMT
Subject: CN=96d2087ceebe37cbc2bc4525ad85bc13485af756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:d7:28:ea:d7:79:61:d8:b0:0a:9a:69:4f:
5a:7f:ac:9d:b4:d6:f0:2c:79:7d:b5:da:42:b4:b9:
f6:b7:63:a3:aa:21:cb:6a:41:3c:9b:15:48:2c:14:
9f:a2:4a:4a:de:ba:be:4a:ff:17:68:bc:72:da:d5:
70:02:cd:15:1f:49:50:80:9e:2c:11:88:c6:86:27:
7a:93:91:b9:dd:ea:f0:b0:6d:07:5a:87:ea:21:8e:
f4:b2:15:fc:ea:44:c8:62:00:21:d9:59:fc:d9:32:
66:b7:51:5e:2f:6c:0a:af:47:d7:b8:1c:6f:aa:8d:
19:95:90:ee:5d:a9:72:f7:96:63:b1:0d:48:8f:4c:
39:48:1e:47:cc:a8:d9:38:fa:4e:57:04:28:5b:f9:
35:1c:a1:8f:6a:51:30:db:82:da:0a:27:21:e6:c6:
5d:34:4f:80:1e:e4:e5:d3:e8:d7:1a:f0:11:b6:ca:
93:93:2a:64:5c:69:7c:fe:de:02:9b:34:5c:d8:31:
4b:28:02:05:1a:0f:73:4a:59:04:b4:6b:1c:9d:d6:
70:8c:19:b0:79:d7:f2:95:0e:d5:37:fd:41:53:31:
4e:5a:59:09:ac:a1:e9:c3:68:a0:38:ac:ae:86:e1:
f0:86:6e:bb:bf:11:c3:36:f6:37:fe:ff:8b:38:7e:
3d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D2:08:7C:EE:BE:37:CB:C2:BC:45:25:AD:85:BC:13:48:5A:F7:56
X509v3 Authority Key Identifier:
keyid:15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:db:a4:9d:b2:a6:5e:80:64:d4:7a:b2:0f:bd:cd:30:ab:a5:
11:80:b4:82:01:b2:4a:5c:7b:82:ad:c7:42:e8:69:d0:f4:86:
e1:f8:f3:1e:5d:b1:62:ff:58:5a:30:77:53:84:d4:0f:c4:0d:
fe:2e:86:36:c9:67:d8:94:80:59:98:ae:5f:36:3c:7e:16:23:
f9:0f:6f:ce:83:d6:07:7a:75:e8:60:aa:37:c2:f4:5c:88:76:
c6:1b:e5:03:d2:11:88:b1:96:f6:a4:a1:2f:23:e1:46:47:1a:
6c:7b:5f:81:e1:44:36:4f:d8:a4:f9:ce:58:e8:6f:e4:5d:c9:
e3:6b:32:bb:d6:f8:b3:02:08:5d:74:7f:98:4a:39:11:09:a7:
ea:77:a8:70:b8:5a:17:20:f0:25:a3:9d:97:7c:5f:93:1b:3d:
3a:1e:ca:a9:92:53:98:e3:20:bc:b6:f7:9e:a3:6f:04:53:2a:
a4:7d:cc:02:5d:71:ec:71:50:ab:48:15:da:ad:62:84:9d:9f:
08:62:a7:39:c0:2e:1b:41:55:e2:28:fc:88:20:21:4f:60:69:
09:33:f9:ac:e8:dc:2e:a4:4b:eb:ab:13:fa:e6:41:85:bb:7d:
0f:39:86:44:2e:39:05:a0:74:d8:c2:a0:44:73:b8:5e:fc:2d:
2f:71:24:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:50:25 2025 by rpki-client