Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
File: Fm9ncLp34DLn59HXMtl1AkHhGfk.mft (raw, json)
Hash identifier: 0HQ4KB0MjR8HQ7uUxETMvkWNnlnepMlOcwfzjJYxOp4=
Subject key identifier: 85:DB:45:E7:76:E4:CD:A8:7B:C6:FA:FE:7A:53:83:4D:3D:CC:A4:B0
Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
Certificate issuer: /CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Certificate serial: 019770E3A9FA04D0E1E095BD0D8EA7168B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
Manifest number: 03C3
Signing time: Sun 15 Jun 2025 00:00:57 +0000
Manifest this update: Sun 15 Jun 2025 00:00:57 +0000
Manifest next update: Mon 16 Jun 2025 00:00:57 +0000
Files and hashes: 1: Fm9ncLp34DLn59HXMtl1AkHhGfk.crl (hash: PT2oY1Tz8mjtg959HgsgeV96tsdt8GZnLGJzQdUcqCA=)
2: pzlWJjQzQzoCKZbR26xCajPlSDU.roa (hash: 61Hu+9N0msg0OltqRJ2+tDJ9j89XxxQKSANBLiUSU78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:a9:fa:04:d0:e1:e0:95:bd:0d:8e:a7:16:8b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Validity
Not Before: Jun 15 00:00:57 2025 GMT
Not After : Jun 16 00:00:57 2025 GMT
Subject: CN=85db45e776e4cda87bc6fafe7a53834d3dcca4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:fe:f8:6c:45:c2:f2:4d:b8:bd:56:9e:86:
29:8b:95:7d:01:e4:8b:08:f3:b1:bc:8d:fd:ca:dc:
6b:3a:19:42:f6:89:ee:9e:ad:ed:4c:00:e5:fc:df:
2f:f4:eb:61:68:fd:ea:e0:e0:bb:de:55:b0:9e:98:
c5:fe:34:0f:7f:50:5f:ce:f1:5f:61:35:d0:3c:6c:
ae:c7:e4:82:3b:62:3f:bf:58:f2:a9:b9:8c:0f:a2:
87:f1:ad:8e:70:f8:41:1d:db:ac:53:d3:b6:3d:b6:
94:fe:f5:57:d1:80:30:96:28:39:d0:97:48:b9:8e:
3c:10:9a:00:70:e6:01:00:32:f4:1b:82:f5:cf:99:
48:4c:2d:1e:50:fe:47:9d:ca:bd:76:c4:7a:ab:d5:
15:f3:f1:59:17:2c:0d:e2:38:e5:8c:65:58:8e:db:
c8:89:6e:6d:a1:eb:19:29:99:3c:fd:53:24:14:27:
34:a3:00:a9:7f:25:0e:90:5b:6b:32:33:9b:05:80:
11:24:2c:a1:71:dd:68:19:79:db:f4:6f:17:b0:c8:
05:bf:43:f0:eb:40:ad:17:a7:be:f0:08:f5:81:61:
07:02:bb:c0:3a:6b:a6:02:fc:d2:91:f6:d3:0d:a4:
32:ad:28:f6:4a:32:db:6a:6b:09:0e:90:b6:76:91:
ec:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DB:45:E7:76:E4:CD:A8:7B:C6:FA:FE:7A:53:83:4D:3D:CC:A4:B0
X509v3 Authority Key Identifier:
keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5d:5e:d9:05:ed:c0:f8:17:5d:44:35:6b:0a:b4:ec:ba:b0:
49:87:15:71:06:17:ed:65:19:9e:2b:a3:3e:dd:3b:2b:b8:33:
9c:c7:6d:f9:6e:02:f6:43:aa:0f:aa:0f:92:55:05:30:72:cb:
49:70:a6:3c:42:ab:e9:fe:08:70:fe:98:d4:09:ea:ce:fa:59:
e9:80:79:3d:88:b3:2d:90:7e:f2:ce:7b:af:12:f7:f8:f0:a0:
1a:66:d3:11:51:b4:26:12:9d:8a:b5:b1:9f:e9:cb:c8:fd:8a:
4e:e3:4e:eb:30:c6:fd:21:f3:15:34:99:b1:e6:10:f8:4a:dd:
c5:d0:15:d4:36:ff:eb:d7:c3:9e:4c:29:65:08:16:66:28:cf:
04:6d:71:55:11:a1:31:24:61:0b:b0:9b:5d:d8:6a:6a:ec:56:
d2:c3:d2:ae:d7:a4:8b:8c:f1:da:05:b0:d0:48:9a:e8:05:b0:
38:d4:34:fe:80:90:c7:0b:7b:72:b1:59:fc:26:d3:4d:6c:ab:
b0:42:c6:ff:9c:dc:c9:d0:d1:8a:96:49:35:30:16:df:ff:8a:
df:df:ce:67:6f:9b:1c:c9:d4:bc:d3:b9:d6:66:bd:ba:3b:4a:
2d:36:93:17:67:82:87:f1:bc:cd:84:65:b6:05:28:50:5e:c8:
19:87:94:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:16:41 2025 by rpki-client