Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
File: FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json)
Hash identifier: mPyM9Rn/KnqnCNO+TOVEYTnarZdXJV45DfJmZ/eTGVg=
Subject key identifier: D6:4C:D2:8A:AC:F2:F7:EA:45:90:4E:7D:D2:49:9B:24:60:E8:E8:34
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial: 01976960D0196B8FF2F9914270CF237D41E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
Manifest number: 0CF0
Signing time: Fri 13 Jun 2025 13:00:41 +0000
Manifest this update: Fri 13 Jun 2025 13:00:41 +0000
Manifest next update: Sat 14 Jun 2025 13:00:41 +0000
Files and hashes: 1: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: AC7UT5H3s3SdQ6sshDLZ5jpftNBWuGKYpPC7E8kSz04=)
2: NuC1DvR6dkAnmNkZTXn3GrNysHw.roa (hash: uCl9YesbV1jR2lkUdesbTXgdlfoQbL9A8g8vjrWrFMg=)
3: ouo267dSlLznMI9vKQqz-AZYNWg.roa (hash: zlSoo8P2oxNbKGPhoJCcuB1Nm21ZI/szjt14xojWUSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:d0:19:6b:8f:f2:f9:91:42:70:cf:23:7d:41:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
Validity
Not Before: Jun 13 13:00:41 2025 GMT
Not After : Jun 14 13:00:41 2025 GMT
Subject: CN=d64cd28aacf2f7ea45904e7dd2499b2460e8e834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8c:cf:73:09:24:13:d2:ff:ee:58:d9:37:5f:
36:c3:40:44:6e:0f:4a:0c:6f:75:4b:c7:e7:5d:60:
64:34:c7:5b:22:a0:94:76:69:e1:f1:58:a3:45:73:
01:ba:6b:79:d9:f1:1c:01:67:be:9c:45:65:b6:8d:
7d:92:56:73:79:ec:e9:55:08:e1:d7:06:c0:0d:c7:
23:f9:fb:15:26:76:0b:8a:dc:fc:07:cb:22:9c:56:
44:0f:65:d5:b8:ec:08:65:8f:dc:e3:f0:be:69:24:
53:56:20:4d:a4:38:7e:03:6c:b3:46:10:48:5e:ca:
25:ac:65:c1:8f:d3:da:3e:3b:69:02:60:14:5c:de:
ee:1e:36:9a:27:f2:71:70:17:80:2b:47:7d:f4:23:
cd:a6:38:90:da:79:95:c5:3b:54:f1:e2:bb:02:b7:
30:b8:21:24:30:32:b0:d7:eb:fd:9f:75:28:d6:9a:
aa:82:1b:21:17:97:b9:16:fb:62:dd:56:8d:f0:43:
de:93:df:f3:99:93:b2:2b:0f:2b:c8:24:bb:59:70:
48:46:50:3e:1a:e0:fe:51:af:0a:6b:71:82:77:8d:
fc:2b:01:df:27:b5:d9:24:96:0c:1c:6e:4b:d7:0e:
bb:cf:05:29:fd:ed:ce:0b:5c:2b:57:d9:68:de:77:
f8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4C:D2:8A:AC:F2:F7:EA:45:90:4E:7D:D2:49:9B:24:60:E8:E8:34
X509v3 Authority Key Identifier:
keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0e:54:6c:ed:58:92:23:58:c2:21:7b:33:67:e0:15:c8:5e:
d0:a5:57:11:e1:c1:3d:ac:df:7e:13:24:bd:38:48:ba:e6:d0:
f3:85:45:f5:72:38:34:db:62:de:c2:de:fd:ee:3b:d0:1b:24:
4c:5d:97:39:46:8b:d8:48:24:fb:dd:3a:54:46:99:53:94:73:
17:1f:4b:52:2c:89:95:c9:ad:f2:a5:21:f9:91:30:9c:24:74:
a6:49:9f:df:c7:04:8d:ef:34:c1:a0:f3:9f:8f:78:a6:e6:e1:
a2:03:4e:48:d4:d8:84:30:e6:ef:8e:1d:db:7d:52:2f:6b:ac:
3b:2d:3e:10:bf:df:45:81:10:e1:41:b8:c3:4b:2a:f6:e8:bd:
d2:98:68:85:10:12:4b:a2:c3:9e:ad:33:e2:db:6d:3c:7e:ae:
96:b0:37:0b:ff:40:50:dc:34:e9:a0:a0:d5:03:d0:d3:37:e1:
c0:b8:c0:4d:20:7d:b9:fa:19:91:6c:1f:60:eb:4d:3e:5e:d4:
ce:35:09:86:bf:b7:a1:1b:9a:cc:9a:ef:1e:0a:50:bc:66:d1:
77:2b:70:e0:50:a1:ac:4e:97:31:38:0f:16:87:fd:25:96:ad:
ee:5b:61:c0:d9:1e:82:c2:ba:c3:3e:27:10:1e:b3:51:76:4b:
f9:5c:04:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:04 2025 by rpki-client