Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
File: FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft (raw, json)
Hash identifier: S9iEHsaQ1vnAjqQlmGoTPrPgXwDDbd/iBWjP3H7uA7I=
Subject key identifier: AC:F0:1C:AF:BF:53:B5:25:6F:1B:D6:91:D5:6C:B0:CA:D1:9D:CB:F2
Authority key identifier: 16:8A:91:9A:4A:46:3F:3C:A2:BB:A5:44:25:50:FC:24:7D:A9:0C:AE
Certificate issuer: /CN=168a919a4a463f3ca2bba5442550fc247da90cae
Certificate serial: 01976997CE9EC6331360440A08EB77E79F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
Manifest number: AD
Signing time: Fri 13 Jun 2025 14:00:45 +0000
Manifest this update: Fri 13 Jun 2025 14:00:45 +0000
Manifest next update: Sat 14 Jun 2025 14:00:45 +0000
Files and hashes: 1: FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl (hash: CjoPhvkPim1jg20nmkPwDyCzxPFTvcDZJ6lqTqDLzh0=)
2: ve2iEFS7yneK4NHtoTNszVB8cZo.roa (hash: g/XvhTcgORHoQzc25n1ZqGUd92LVhhds69w5ITmpr4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:ce:9e:c6:33:13:60:44:0a:08:eb:77:e7:9f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168a919a4a463f3ca2bba5442550fc247da90cae
Validity
Not Before: Jun 13 14:00:45 2025 GMT
Not After : Jun 14 14:00:45 2025 GMT
Subject: CN=acf01cafbf53b5256f1bd691d56cb0cad19dcbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7e:bc:66:93:36:9b:e7:5e:7f:19:99:e0:6a:
e8:cd:15:04:0b:4e:2e:bd:b7:51:8f:9d:d0:fa:d6:
30:fa:a0:c5:95:89:32:65:b1:64:ac:7a:2a:55:dd:
c8:d3:e5:67:ae:94:e2:d8:06:86:b0:3e:fb:a5:97:
83:e6:ba:89:fd:1e:93:3e:83:35:03:35:5d:2f:31:
70:21:c3:bd:c2:8e:4c:ea:23:2d:08:12:5d:cd:b5:
4b:ab:7c:a5:7c:d9:5d:d8:e3:fd:07:16:ff:09:e7:
a5:4d:4e:bb:61:fa:52:d7:47:f5:37:96:f5:a3:66:
5a:74:2a:48:0f:84:c4:cb:88:13:01:f6:5a:08:f2:
0f:dd:09:5d:57:aa:32:9a:7f:6a:09:b6:c3:0d:7f:
49:e3:e7:12:19:8e:dd:39:99:b7:58:02:6d:5c:1f:
7d:5c:8f:13:ce:45:f3:f3:4a:80:37:7e:29:4a:4a:
0c:67:4b:0a:d5:eb:61:dd:c9:59:fb:25:d5:fc:8d:
89:cd:08:2d:17:bc:7c:ed:5c:49:27:a2:ea:9e:7b:
48:ba:b6:74:a4:58:06:1a:f7:1c:63:b2:8b:96:a4:
3d:3f:56:03:aa:b1:68:f2:02:6b:36:77:06:4b:c5:
bb:76:69:12:5a:38:8f:bb:87:63:35:03:f7:08:41:
a2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F0:1C:AF:BF:53:B5:25:6F:1B:D6:91:D5:6C:B0:CA:D1:9D:CB:F2
X509v3 Authority Key Identifier:
keyid:16:8A:91:9A:4A:46:3F:3C:A2:BB:A5:44:25:50:FC:24:7D:A9:0C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0e:da:a1:a7:fe:90:51:da:90:31:e7:ad:58:f2:7d:ff:e8:
7c:a0:5a:12:4c:af:a8:33:3c:89:61:1f:73:60:e2:b3:25:66:
93:cf:96:d9:ba:3c:ee:4a:5f:60:b5:85:64:ab:e7:5d:75:83:
9c:01:f6:b4:d0:2e:05:89:67:21:a2:17:63:81:a6:f9:3b:81:
04:e9:50:3a:35:f8:fc:4c:ef:75:02:d3:96:38:92:8d:7e:e5:
f5:36:b3:16:84:d8:0c:ef:0a:2c:8f:f9:8b:1b:14:42:e7:47:
c0:a1:d7:e8:6d:07:5a:d0:ee:c8:8b:0c:03:72:e1:da:e7:0c:
00:53:77:6a:10:e1:7b:aa:1d:1a:54:cb:a2:a3:bb:87:e8:4b:
e2:b3:9f:f3:b7:be:fd:c7:9e:54:4c:9e:d9:9b:29:dc:f9:a8:
f7:a9:00:c4:d0:59:2f:29:a3:43:62:32:c6:36:9e:95:98:b4:
00:b3:36:54:74:96:57:80:7d:40:21:1c:8e:ba:f2:6a:ac:12:
b4:93:dd:70:ff:38:e4:fb:c5:d7:49:73:54:58:4b:a6:32:eb:
49:98:89:9a:43:39:3b:4e:41:85:ac:09:a1:40:da:22:b6:1b:
45:87:79:b5:6e:51:a0:46:97:41:b1:27:4d:b8:c7:ae:8a:7e:
43:c4:f9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:27 2025 by rpki-client