Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
File: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft (raw, json)
Hash identifier: mvOR2HRMeCDL9DC3Zq/Pz8LTuee2PDaXKdKKB8zRw6A=
Subject key identifier: B3:39:D3:AA:14:32:52:99:0F:85:6F:72:B7:B3:1B:18:F2:54:4A:11
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial: 019776776A01DC61FE61093361C64C9BB4E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
Manifest number: 1599
Signing time: Mon 16 Jun 2025 02:00:26 +0000
Manifest this update: Mon 16 Jun 2025 02:00:26 +0000
Manifest next update: Tue 17 Jun 2025 02:00:26 +0000
Files and hashes: 1: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl (hash: fOjTXjVyNZvFMlf63rZKbo9bMkT6oUb2hwdpQtJJKcQ=)
2: O5ilAJzp4Fiady6OzW8y6F-h2tk.roa (hash: 5NXhQBooraxn6sup0YPIQ8njZP6A7m2bDKaKDs+Nqts=)
3: QwSiPMgCrnV_t6yAUHlhkg3u_jM.roa (hash: hYyVlbmE/pf2k4j7NJjebHsv7m2YlTW7LKuiiP6VfuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:77:6a:01:dc:61:fe:61:09:33:61:c6:4c:9b:b4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
Validity
Not Before: Jun 16 02:00:26 2025 GMT
Not After : Jun 17 02:00:26 2025 GMT
Subject: CN=b339d3aa143252990f856f72b7b31b18f2544a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:6c:9f:5b:b7:bb:0a:ad:4b:f1:dc:5c:17:
07:4a:fd:43:af:d0:33:26:66:d4:dc:6f:97:b5:26:
f9:43:cc:6a:04:39:cb:ef:c9:5a:ab:52:00:11:a0:
76:f9:e4:ee:70:72:b9:02:0a:fb:f1:63:a6:eb:61:
09:8a:de:1d:30:37:73:11:25:12:a7:c3:92:b7:3e:
d5:1c:25:9a:31:55:37:cd:81:9a:f3:44:60:ae:e2:
51:7b:64:4b:4d:34:93:e8:8f:ae:e0:80:d6:c5:7f:
a8:54:a9:b9:aa:93:fe:35:c5:74:45:ec:d9:c1:f3:
69:8e:77:a5:c9:fa:d4:9a:d6:2f:29:a8:df:ac:ac:
3e:fd:3f:b7:d3:71:6b:c2:07:88:68:ee:c6:18:fe:
ea:f9:2a:58:3e:95:d1:9b:0e:42:0a:8e:bc:80:5e:
00:fc:c3:1f:b3:b5:04:38:3d:15:10:85:7c:b6:f3:
42:4c:0a:3d:86:cd:00:b9:84:ff:0a:b2:3f:c8:d3:
e5:b7:c4:3e:a2:2d:82:5c:b8:9e:fd:52:0c:6d:64:
1a:a7:0c:cf:84:07:8e:2e:53:97:ef:e5:7d:52:90:
5e:39:6c:ef:9c:2d:07:82:08:54:37:6a:62:cd:7a:
91:11:4e:60:e2:03:c9:80:19:7a:23:e9:17:b3:48:
29:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:39:D3:AA:14:32:52:99:0F:85:6F:72:B7:B3:1B:18:F2:54:4A:11
X509v3 Authority Key Identifier:
keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a1:42:01:a9:bf:46:82:6d:e0:e2:9e:14:ca:ea:36:fe:1f:
39:36:cf:93:47:82:f7:04:33:d4:14:6f:20:f5:1b:fe:93:ac:
e6:85:20:bd:72:2b:14:de:f5:8e:b2:78:04:e2:94:2d:6f:83:
f4:a8:3a:55:d2:c1:af:08:fc:2a:71:ad:2b:01:11:67:0c:fb:
bf:b9:a8:b0:41:00:48:7b:da:8b:d8:d0:40:17:4a:b8:2c:92:
e0:d7:e6:c2:c9:22:88:70:08:ce:16:b8:4f:06:72:e9:b3:d7:
20:61:e1:89:9f:09:83:1f:7a:e7:40:71:80:92:96:ea:56:96:
d0:c5:e9:8b:53:f0:89:0f:12:9a:a4:f2:58:c0:16:4c:1d:b0:
b9:76:ad:8e:ab:6c:4f:8a:b9:82:2e:07:af:55:f7:11:8f:61:
08:16:6b:9c:31:3b:69:58:52:2b:e8:f2:1d:ad:80:ab:42:53:
2c:35:24:95:d6:21:37:5f:78:e7:25:85:6e:6a:b6:f2:76:bc:
3e:9a:79:9f:88:67:3f:61:56:4d:69:e5:e0:9e:b5:a9:19:b9:
4a:97:46:d8:f3:2b:7b:3c:d8:a4:fd:f9:ee:75:66:60:e4:36:
75:cb:5b:ab:ae:03:fe:de:e7:e6:fc:9d:98:3e:b0:3f:2e:d6:
0a:e1:24:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:14:48 2025 by rpki-client