Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
File: FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft (raw, json)
Hash identifier: 1JQye1ukYhnA41VLMGrNj/tA+t39U6TYkALl2c29mBo=
Subject key identifier: 9B:CF:06:25:A6:FA:60:A3:78:2C:7E:90:60:45:B5:3E:08:69:3A:33
Authority key identifier: 14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
Certificate issuer: /CN=1495c6f815c70ef1910d37493963445af918ab59
Certificate serial: 01978433478EC9F64776F8FA888C9ABBB888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
Manifest number: 159B
Signing time: Wed 18 Jun 2025 18:00:42 +0000
Manifest this update: Wed 18 Jun 2025 18:00:42 +0000
Manifest next update: Thu 19 Jun 2025 18:00:42 +0000
Files and hashes: 1: FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl (hash: kffLDJE4N5NYTATC6UVKBFy4MZyNhytLEpS32I/IUr8=)
2: pS03aj6wmU86Zu9PqgpTPjvPCgM.roa (hash: aUGGuBTytMASII0PgxjFCUwQN+XTGnbhLsjxVU+JfJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:33:47:8e:c9:f6:47:76:f8:fa:88:8c:9a:bb:b8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1495c6f815c70ef1910d37493963445af918ab59
Validity
Not Before: Jun 18 18:00:42 2025 GMT
Not After : Jun 19 18:00:42 2025 GMT
Subject: CN=9bcf0625a6fa60a3782c7e906045b53e08693a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:cb:98:bb:21:23:62:e9:9b:89:86:06:9b:
1c:16:c9:9f:77:ea:e8:1c:e1:ec:da:48:7d:28:97:
a7:02:15:96:3b:98:de:cf:ca:a1:6f:cc:1f:da:cb:
fb:77:f4:c3:2a:c9:e1:39:f2:b2:e6:01:82:f2:53:
07:93:19:67:3d:50:21:7e:93:62:95:f2:bf:fa:d3:
7d:18:53:fa:3b:86:a7:8d:6b:82:0d:e8:72:71:5f:
3c:f4:86:06:e9:db:18:67:51:b1:9a:17:e2:c9:9c:
ab:72:44:16:d1:f6:13:b3:02:d2:5b:19:c2:97:a1:
24:44:6e:90:d1:30:fd:16:84:fd:35:10:b5:7e:ab:
1a:58:29:a4:dd:01:25:85:b4:59:03:6a:4b:ea:23:
01:53:b1:e0:a0:00:a6:ec:d8:a2:67:c2:e6:98:5c:
55:25:eb:89:3f:ad:db:91:aa:2d:c4:44:6c:bf:e0:
b4:2e:50:71:8e:f2:7a:f7:41:db:8d:5c:24:9f:bc:
4e:ca:e5:76:9e:66:5a:bc:0d:3e:fe:6d:5d:7f:ce:
53:dc:99:a4:70:34:9c:9f:ea:e1:2f:08:26:88:f6:
e2:59:1d:40:0a:7a:64:90:8a:e3:e6:08:a8:82:08:
61:43:45:6e:e0:3f:70:7a:4b:1d:9e:77:40:da:f7:
ce:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CF:06:25:A6:FA:60:A3:78:2C:7E:90:60:45:B5:3E:08:69:3A:33
X509v3 Authority Key Identifier:
keyid:14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:64:7a:95:51:15:79:7e:95:57:9b:2c:5c:6a:ac:9d:08:c0:
e7:0d:6f:47:5d:16:4b:82:75:72:73:f5:bd:c9:f4:2c:a1:ee:
24:97:cf:f9:18:6a:ea:4c:c4:b3:76:5e:39:db:ae:be:cc:de:
0e:f8:5d:21:00:77:ed:db:a9:54:7f:35:be:46:60:26:ef:90:
1e:2d:73:de:6b:34:63:2c:62:f1:2e:35:6e:b2:bf:ab:ee:9d:
f2:02:0d:29:0a:7f:68:c8:7f:f2:b3:88:60:61:bb:c7:70:18:
83:c4:04:5c:7c:ea:23:9f:cc:41:c6:3e:57:90:0b:b7:d9:46:
fd:db:d0:3d:06:f1:40:c4:4b:ab:6c:35:a2:d9:4c:18:38:51:
18:36:a4:82:2f:62:38:10:d8:35:ed:2a:4f:1f:6b:6a:7a:b5:
1e:27:4e:8b:95:bd:9d:32:d5:62:84:65:57:1d:ed:5d:f7:c4:
b3:8e:06:b0:b9:10:38:64:a8:99:42:2e:89:b1:9a:b1:74:f5:
ff:c9:f8:81:08:8d:74:e4:84:da:f7:fb:80:64:ba:04:7c:05:
e5:2d:01:6b:9a:b7:fd:d1:20:21:46:ba:d1:12:ae:12:90:62:
99:38:12:11:e1:01:39:2a:6e:43:6c:c8:69:78:73:5e:1d:bc:
54:4e:49:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeEM0eOyfZHdvj6iIyau7iIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OTVjNmY4MTVjNzBlZjE5MTBkMzc0OTM5NjM0NDVhZjkx
OGFiNTkwHhcNMjUwNjE4MTgwMDQyWhcNMjUwNjE5MTgwMDQyWjAzMTEwLwYDVQQD
Eyg5YmNmMDYyNWE2ZmE2MGEzNzgyYzdlOTA2MDQ1YjUzZTA4NjkzYTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp3LmLshI2Lpm4mGBpscFsmfd+ro
HOHs2kh9KJenAhWWO5jez8qhb8wf2sv7d/TDKsnhOfKy5gGC8lMHkxlnPVAhfpNi
lfK/+tN9GFP6O4anjWuCDehycV889IYG6dsYZ1GxmhfiyZyrckQW0fYTswLSWxnC
l6EkRG6Q0TD9FoT9NRC1fqsaWCmk3QElhbRZA2pL6iMBU7HgoACm7NiiZ8LmmFxV
JeuJP63bkaotxERsv+C0LlBxjvJ690HbjVwkn7xOyuV2nmZavA0+/m1df85T3Jmk
cDScn+rhLwgmiPbiWR1ACnpkkIrj5giogghhQ0Vu4D9weksdnndA2vfOkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvPBiWm+mCjeCx+kGBFtT4IaTozMB8GA1UdIwQY
MBaAFBSVxvgVxw7xkQ03STljRFr5GKtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkpYRy1CWEhEdkdSRFRkSk9XTkVXdmtZcTFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zZWZkYTUtYmU4Zi00ODZkLWIwOGYt
MjUwMDQyMDM2NmZiLzEvRkpYRy1CWEhEdkdSRFRkSk9XTkVXdmtZcTFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zZWZkYTUtYmU4Zi00ODZkLWIwOGYtMjUwMDQyMDM2NmZi
LzEvRkpYRy1CWEhEdkdSRFRkSk9XTkVXdmtZcTFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmR6lVEV
eX6VV5ssXGqsnQjA5w1vR10WS4J1cnP1vcn0LKHuJJfP+Rhq6kzEs3ZeOduuvsze
DvhdIQB37dupVH81vkZgJu+QHi1z3ms0Yyxi8S41brK/q+6d8gINKQp/aMh/8rOI
YGG7x3AYg8QEXHzqI5/MQcY+V5ALt9lG/dvQPQbxQMRLq2w1otlMGDhRGDakgi9i
OBDYNe0qTx9ranq1HidOi5W9nTLVYoRlVx3tXffEs44GsLkQOGSomUIuibGasXT1
/8n4gQiNdOSE2vf7gGS6BHwF5S0Ba5q3/dEgIUa60RKuEpBimTgSEeEBOSpuQ2zI
aXhzXh28VE5JUA==
-----END CERTIFICATE-----
Generated at Thu Jun 19 03:33:08 2025 by rpki-client