Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
File: FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json)
Hash identifier: KbUXoLjUhMRHyui54k7+HJ8hLtk/5XxuMiwV1IEsWQQ=
Subject key identifier: 50:44:A0:F6:DE:B9:27:90:D6:E0:0C:2F:BE:9E:A5:A8:48:59:71:34
Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Certificate serial: 019776E52A3317C6F9FC3B76E5616B8F4BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
Manifest number: 1528
Signing time: Mon 16 Jun 2025 04:00:19 +0000
Manifest this update: Mon 16 Jun 2025 04:00:19 +0000
Manifest next update: Tue 17 Jun 2025 04:00:19 +0000
Files and hashes: 1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: 1wk9CA/SuHVXjsvH3DYV7fXI1QE7oYYd3w7WLS6Attk=)
2: ThMXbqzx9UxsJ7TnPmcwU32vPLA.roa (hash: 4NEDCtF2sgEdEat+pt3nEdPQAXszdJX/0mX9HFFwmgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:2a:33:17:c6:f9:fc:3b:76:e5:61:6b:8f:4b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Validity
Not Before: Jun 16 04:00:19 2025 GMT
Not After : Jun 17 04:00:19 2025 GMT
Subject: CN=5044a0f6deb92790d6e00c2fbe9ea5a848597134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:9e:12:3f:0d:4a:f2:35:11:ff:33:83:cc:
ed:7b:b3:69:67:30:4e:72:5c:47:0a:ac:51:e6:d7:
0c:3e:15:bb:ac:d0:96:c9:fd:a5:b2:7d:00:4c:cb:
91:63:23:f8:c7:48:ba:24:e0:f7:d6:df:63:4f:1e:
e2:53:09:b2:37:ec:60:f8:4f:87:61:58:b2:1b:a0:
7c:fa:fc:3d:c5:37:12:60:d2:4b:b3:0a:f5:f1:1a:
18:89:fe:87:78:09:65:ca:e5:c5:6b:b6:9d:43:fb:
17:83:fb:40:1d:be:87:22:26:0f:bf:e7:80:c4:50:
7d:77:21:70:2c:34:c2:28:fe:d3:03:56:50:09:3f:
84:d3:9b:32:29:9a:8e:36:92:df:22:b4:84:b7:66:
e6:35:04:c6:a4:fd:cf:b1:f2:4e:9d:29:31:06:6a:
eb:c4:57:16:b7:15:5d:2a:5f:18:3b:44:70:64:0e:
62:cb:96:17:37:a2:28:6a:09:9e:e5:f9:a7:3c:95:
49:81:f6:97:53:4e:55:a9:83:eb:75:46:a4:be:3e:
1e:24:29:22:f5:9c:30:55:8a:c0:3c:f9:9c:dd:17:
72:18:4c:37:83:97:eb:11:8a:2e:c7:ea:db:6d:99:
2e:41:1a:ab:eb:0b:f2:eb:a1:61:5b:19:d4:d3:eb:
9a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:44:A0:F6:DE:B9:27:90:D6:E0:0C:2F:BE:9E:A5:A8:48:59:71:34
X509v3 Authority Key Identifier:
keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ca:83:fb:b7:64:91:72:eb:c4:64:83:ea:e3:11:80:47:7d:
99:b7:89:47:df:d7:b3:df:84:c4:2c:5c:c5:5d:52:2f:1c:11:
78:3c:f3:0f:d2:5d:4a:a9:7b:2c:1f:ee:01:b9:d0:64:07:f4:
e6:eb:05:9d:e6:8e:a0:fa:9f:36:6f:d5:d5:6a:be:6e:e8:ac:
c9:7c:ad:e7:06:1c:37:b4:f2:0e:82:20:b0:83:99:a7:77:05:
d8:fe:bb:30:e8:30:dd:2d:7f:37:19:d0:80:29:41:c5:b0:c3:
a3:86:2c:c9:96:d5:e2:33:2e:ab:bb:43:fe:b9:9d:19:4c:23:
e9:d8:a0:90:e0:9d:71:19:1a:13:56:0d:f1:2b:09:b8:69:14:
93:7a:fc:a3:6b:47:92:7a:b9:41:0a:fb:75:0d:74:12:5b:a9:
36:b5:9f:30:12:fb:83:4d:67:bd:a6:76:1e:57:d8:84:88:84:
9d:d0:22:84:54:c9:4c:79:a7:62:78:27:70:df:67:40:7a:d4:
92:bf:bf:75:da:04:a9:44:7f:e5:d0:23:fa:99:87:a1:cb:64:
c2:78:c0:57:c1:5d:82:6c:74:da:9c:d6:19:75:98:87:a7:20:
9c:5a:e7:e9:f0:a1:9a:f4:e1:64:63:8c:9a:77:17:6a:65:db:
17:28:ee:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:09:37 2025 by rpki-client