Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
File: FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft (raw, json)
Hash identifier: l9NzrlwHSHErfqEsq+l8rxVFVkiBrU6n9KmXdiPB34w=
Subject key identifier: BA:C6:4F:6A:73:1B:42:41:37:15:30:1E:16:44:39:28:60:8C:9C:86
Authority key identifier: 14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41
Certificate issuer: /CN=147341d30575144be32cd7c8e3ebd4c6329a3141
Certificate serial: 019897804DC6A978A0348EF337E6ABFD528E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
Manifest number: 13A5
Signing time: Mon 11 Aug 2025 05:00:24 +0000
Manifest this update: Mon 11 Aug 2025 05:00:24 +0000
Manifest next update: Tue 12 Aug 2025 05:00:24 +0000
Files and hashes: 1: FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl (hash: a2dk4iOO3p+HQa4odzszUflaGTeXIllCAFtIt44Bw1Q=)
2: _0Ovr-P6Apyo_tveovy4IKn6bqU.roa (hash: ocYJ6sP+UnlpINi5qB4yLeRqouA2cf9W4NHegtvwt7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:4d:c6:a9:78:a0:34:8e:f3:37:e6:ab:fd:52:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=147341d30575144be32cd7c8e3ebd4c6329a3141
Validity
Not Before: Aug 11 05:00:24 2025 GMT
Not After : Aug 12 05:00:24 2025 GMT
Subject: CN=bac64f6a731b42413715301e16443928608c9c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:7c:0c:80:6f:47:11:64:8a:4e:dc:84:1f:
4e:68:a0:cc:d5:c2:af:0c:1a:e4:28:10:47:25:66:
e9:b2:93:fe:7e:1b:f0:f6:09:8c:eb:01:56:c9:2a:
04:9b:81:aa:2d:36:6c:ab:07:fa:3f:a2:46:a7:06:
85:72:8d:ff:3e:8e:53:60:c1:0c:c5:18:b9:cb:89:
b9:a2:14:c3:02:a8:ea:4d:20:4f:e1:64:7a:57:46:
5f:f7:a6:70:9c:1d:47:92:e9:77:f4:2b:51:d4:20:
2a:09:e3:ba:4a:41:77:ce:57:89:4a:50:ad:33:d1:
06:b4:5f:a1:7d:bf:1c:96:6a:9e:8b:20:40:15:28:
48:37:27:5d:c8:48:a4:2c:86:6d:3a:bd:2b:4d:9c:
2b:29:ce:b4:42:d0:5f:c9:6d:52:93:f0:75:b1:e2:
ba:3c:ff:e2:3e:e9:a1:8b:45:2e:49:ec:c0:cf:64:
e1:bf:ce:ec:2e:ad:c6:df:ed:1d:ee:13:e6:6f:e6:
e7:1e:a4:7b:3a:c8:57:c7:9c:ea:eb:ff:fc:a4:a4:
5a:5c:3f:c0:ec:fd:cb:8d:84:ae:8f:60:9c:00:eb:
f6:5a:6a:5c:64:03:1f:8a:16:34:82:40:16:46:7b:
89:3f:cd:69:92:56:5c:10:3b:51:13:5f:2b:92:a7:
56:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C6:4F:6A:73:1B:42:41:37:15:30:1E:16:44:39:28:60:8C:9C:86
X509v3 Authority Key Identifier:
keyid:14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f8:66:8d:78:5c:91:5a:d5:f9:10:95:dc:16:6e:17:17:e4:
06:96:0b:92:13:79:ca:ff:ff:b6:05:9d:af:76:fa:4f:2c:2f:
7e:3e:4e:b5:44:c1:0d:7d:c9:f8:04:51:d3:b1:5e:98:56:03:
03:99:58:37:8d:86:6a:2f:5e:5f:47:ce:ee:ee:9e:ee:6f:b8:
6d:b2:fd:9c:03:aa:3f:d9:be:9e:24:fa:38:76:cc:bc:cd:0b:
36:52:84:f8:3a:1d:06:93:5d:78:89:97:8d:68:9f:e6:86:85:
99:85:c0:b3:29:93:82:fe:e7:f3:b5:70:19:19:6a:56:4f:23:
5f:28:47:1b:41:66:98:d5:d8:70:7b:a5:0c:d1:61:a4:4f:d6:
c5:d8:76:6d:9b:69:ed:d9:47:78:4c:6f:b0:d0:90:37:2c:8c:
74:66:23:f0:2b:9f:75:b9:22:9b:5d:3e:bb:f6:fd:8a:aa:24:
72:0e:05:d7:40:df:29:8f:de:ca:09:e1:d8:4d:e6:17:49:bf:
f0:75:fb:f3:a2:78:0f:7f:1e:6f:b3:89:44:60:5b:4d:df:23:
cb:44:be:db:e2:4c:0a:3a:0f:ce:de:1d:d6:67:7b:dc:08:88:
16:c4:c4:07:ed:2a:52:75:70:34:43:93:2f:a1:b0:b7:4f:b9:
2f:36:3a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:31:05 2025 by rpki-client