Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
File: FpedN9oBar0TJ5JwulXWs8KWBXg.mft (raw, json)
Hash identifier: B5WU+qIWUYumbAsB02vwgmiRsP8Uwzb8g/RzfFYS9Xw=
Subject key identifier: C9:C1:AA:C0:47:4D:41:AB:95:55:D5:55:E0:09:98:14:06:16:17:98
Authority key identifier: 16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
Certificate issuer: /CN=16979d37da016abd13279270ba55d6b3c2960578
Certificate serial: 01974A43B362DCF60AA761AF2349D381DF11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
Manifest number: 1458
Signing time: Sat 07 Jun 2025 12:00:40 +0000
Manifest this update: Sat 07 Jun 2025 12:00:40 +0000
Manifest next update: Sun 08 Jun 2025 12:00:40 +0000
Files and hashes: 1: FpedN9oBar0TJ5JwulXWs8KWBXg.crl (hash: 7hYj3txdl4+K6ebFg0ZIenmiiWrz4mlAE0p60NBsVXo=)
2: PPUYZlg6H0XwL9T7p9j25_C1QJ0.roa (hash: ocscl0Gbeg5aCVZzJomKYL7Dzdpg0U688ymNmvZ0gWI=)
3: b62zrr5wzYN2MOAEsHfWSMG7FHQ.roa (hash: QoQnJbFutWiN0bVjBSQujyBlpWiG4wn++jIZ23iyHu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:b3:62:dc:f6:0a:a7:61:af:23:49:d3:81:df:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16979d37da016abd13279270ba55d6b3c2960578
Validity
Not Before: Jun 7 12:00:40 2025 GMT
Not After : Jun 8 12:00:40 2025 GMT
Subject: CN=c9c1aac0474d41ab9555d555e009981406161798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b9:e1:92:53:d1:16:6b:5a:fd:e5:9b:f9:bc:
44:03:0e:1c:3a:1c:5c:be:da:61:2f:e2:80:de:29:
f0:a8:5f:88:0e:0b:f0:ad:ec:7a:65:d9:2f:ae:11:
a5:33:3f:5c:16:d0:7c:ee:dc:66:27:75:77:98:3a:
68:f3:03:f2:b8:37:3a:8c:d5:a4:fe:91:15:a2:93:
55:33:89:7e:71:7e:4a:4b:a4:7f:d7:26:5e:18:be:
6a:13:44:77:67:19:54:11:2f:48:31:ef:85:43:45:
3c:a4:19:45:e2:87:26:6e:5c:d0:65:26:66:82:d9:
f6:f2:4b:ec:27:18:5e:1b:4c:17:7e:19:ec:87:cd:
58:47:4f:1a:e4:11:a2:e5:6c:64:99:ae:fe:6a:e9:
69:8f:b4:1c:79:37:96:79:38:14:b9:71:cd:92:d5:
cc:f9:65:95:24:c8:99:80:ae:69:a7:08:0b:1f:bb:
90:6f:c8:4e:d8:3e:7e:33:38:cb:2e:05:c0:7d:25:
a9:f3:c8:d2:1d:51:81:ee:77:76:e2:7d:2e:63:2c:
f8:5f:da:cb:9f:a1:5c:98:9b:b3:1f:a2:a9:d2:58:
f8:e5:af:21:0c:36:5e:f4:d9:90:b2:1b:f4:d5:aa:
89:33:9a:e4:06:36:4a:6f:bc:59:9f:34:51:0f:b3:
03:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C1:AA:C0:47:4D:41:AB:95:55:D5:55:E0:09:98:14:06:16:17:98
X509v3 Authority Key Identifier:
keyid:16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:64:ae:f2:33:ff:79:e7:f6:2a:3c:e5:89:85:cb:ca:e3:90:
0d:39:40:77:bf:34:47:2e:dd:82:56:62:99:52:10:47:19:47:
49:3f:04:c5:9a:89:37:17:69:49:0f:09:b7:98:c6:1c:19:6b:
09:77:3e:6f:b4:1d:9a:d1:df:25:68:ce:70:6d:fd:bd:0a:4e:
a2:92:b7:5d:b5:fe:6a:c2:3d:bc:2e:7a:9a:ed:29:8d:0a:fe:
48:28:41:ed:b8:63:71:67:67:09:59:33:a7:56:ca:ef:8d:e8:
1e:0e:07:f2:83:5f:8b:91:d6:bb:8d:e4:3f:de:73:ca:64:9d:
26:2c:fd:39:0c:14:bb:02:69:a1:84:29:de:36:4b:b9:7f:99:
62:55:2c:88:c8:4d:6c:7e:d8:15:44:e4:01:5c:dc:f3:29:bf:
93:8a:c9:d5:dd:1c:af:9f:4c:b1:7a:05:2d:cc:d9:30:5d:aa:
25:f4:e1:47:52:e3:47:96:71:f0:34:fb:af:7b:ca:0c:9d:f9:
fc:40:80:ff:0d:a4:cf:55:2a:07:cb:2f:7e:ca:20:1f:ec:cb:
26:71:35:f4:78:b6:dd:91:a8:09:e9:ba:1a:1d:fb:d7:f6:6d:
bf:59:22:a0:1e:d6:ad:2c:a5:5a:61:85:62:82:56:76:bb:47:
59:bb:99:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:50:49 2025 by rpki-client