Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
File: FW8E_FyodTFasLhUtkUGsJyZjpo.mft (raw, json)
Hash identifier: NyhUEB5EV1ju/B9gBrDPJoJmuhmLTb/whZCJEriccZA=
Subject key identifier: 87:0F:EE:47:E3:12:B0:C8:53:37:03:88:6A:5E:D2:0D:F0:07:5D:27
Authority key identifier: 15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A
Certificate issuer: /CN=156f04fc5ca875315ab0b854b64506b09c998e9a
Certificate serial: 01976AE14312332B1B2E5B36C5001B9599D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 20:00:36 +0000
Manifest this update: Fri 13 Jun 2025 20:00:36 +0000
Manifest next update: Sat 14 Jun 2025 20:00:36 +0000
Files and hashes: 1: 74FiFUUCcsV_j506QvqvuUKXA1c.roa (hash: apRm/FJ7fgKknAqYO8bdqiAphQJLpxJucgrm/glKMKk=)
2: FW8E_FyodTFasLhUtkUGsJyZjpo.crl (hash: oMirb8ne9H9jUKbT3ieDQTmmwGD/9Sn0z2ZGhbPcjSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:e1:43:12:33:2b:1b:2e:5b:36:c5:00:1b:95:99:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156f04fc5ca875315ab0b854b64506b09c998e9a
Validity
Not Before: Jun 13 20:00:36 2025 GMT
Not After : Jun 14 20:00:36 2025 GMT
Subject: CN=870fee47e312b0c8533703886a5ed20df0075d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:86:c1:f4:3b:16:e0:d8:e6:75:77:57:a3:
68:71:af:95:35:0c:c9:f6:9e:c9:8b:e9:d3:57:ab:
fc:a2:de:e4:3f:7c:e2:db:72:b9:41:1b:5a:f7:57:
0c:cc:95:4c:7f:55:c5:0c:6d:a0:7e:cf:06:0f:0f:
40:f4:56:f5:73:db:1a:eb:2f:9a:70:69:4f:68:a3:
a9:5e:d5:06:1e:17:f0:95:96:70:44:11:06:1e:00:
13:1d:78:f2:47:ec:b2:53:5f:70:3e:48:52:46:5a:
2d:50:6b:a9:26:9c:2f:a0:98:4f:d4:29:39:a4:70:
a5:3c:14:01:2e:97:49:a3:c3:d4:8d:d9:67:c9:d2:
a1:ec:73:46:00:72:44:6e:f5:c4:95:cb:7b:2a:db:
d3:64:a2:65:23:b5:6c:0b:26:bb:f9:8a:24:6d:4f:
c6:b2:57:ef:b2:a6:12:b4:99:a6:e1:08:e3:4e:3c:
e7:a1:1f:a8:6e:dc:04:b0:46:93:07:92:64:b5:df:
a1:43:00:ed:15:2f:ba:92:4c:84:e2:5c:b4:77:5f:
0d:4e:c5:8d:23:40:38:a7:90:dd:e4:04:53:19:da:
bf:e5:bf:64:1d:d4:cc:db:49:d0:31:96:54:9c:81:
1d:2d:49:d0:bc:0d:1a:91:b4:4a:ed:e9:75:e1:42:
b5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0F:EE:47:E3:12:B0:C8:53:37:03:88:6A:5E:D2:0D:F0:07:5D:27
X509v3 Authority Key Identifier:
keyid:15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:72:3d:cd:fc:f3:ef:17:bf:25:14:af:0e:3a:35:8b:ae:b6:
0e:3a:0f:61:34:10:f0:ac:56:f2:1f:a2:ef:0e:ce:0c:62:2f:
c9:37:ed:75:cb:bf:cb:3f:c7:46:98:30:a2:be:6d:3d:8a:59:
81:ee:e6:76:f3:d7:f0:e2:58:3a:ea:3a:b4:bc:ea:89:5e:d6:
46:84:c2:af:14:86:b2:44:fc:e3:df:e6:84:d3:f9:77:bd:4a:
21:8a:fa:2d:d6:cd:f4:c0:f0:20:84:54:79:0b:3c:b6:2d:8f:
0c:e4:39:a9:1e:0f:c5:28:49:77:e8:75:1c:85:b4:7b:5b:5d:
85:5b:84:c6:55:0c:d0:8b:cf:c6:2f:1f:c3:e3:5f:73:37:a8:
3d:76:16:0d:78:90:9f:83:de:b7:7f:5a:5f:54:fe:f6:63:e5:
24:57:82:df:40:a2:7d:24:58:cb:93:2b:da:d7:5b:f4:fb:a0:
f4:0f:3a:88:ba:d9:a9:96:d2:75:17:d2:8e:b4:c8:9d:76:b2:
7d:58:42:13:8e:2f:9c:ce:e3:75:7d:74:2b:c2:fa:d0:65:57:
01:50:48:ae:e1:19:c1:95:d0:57:eb:85:f8:3d:f0:db:10:4d:
d0:6c:7b:2c:2a:01:81:23:78:7b:9d:3d:37:3b:ce:a5:a1:93:
d3:82:cf:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:05:09 2025 by rpki-client