Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
File: FAa0-f1RaOt3gegksUU-mfXmVTw.mft (raw, json)
Hash identifier: eAnO9kYTT706IUIWBnTOZxZxv6fXEoRuwCIyK3SOrW4=
Subject key identifier: 89:D5:DD:F7:70:9A:05:B8:36:98:98:33:8A:03:95:3C:26:11:59:24
Authority key identifier: 14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C
Certificate issuer: /CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c
Certificate serial: 019787D8A1C67772B7D79705C48F700AABB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
Manifest number: 159B
Signing time: Thu 19 Jun 2025 11:00:10 +0000
Manifest this update: Thu 19 Jun 2025 11:00:10 +0000
Manifest next update: Fri 20 Jun 2025 11:00:10 +0000
Files and hashes: 1: FAa0-f1RaOt3gegksUU-mfXmVTw.crl (hash: dFsVz0kTN3wwbfy7SegqoPn5wC1BNHVCmICbXH25BGo=)
2: c3go-15xGcBaQkyMFCkLYeR3zYQ.roa (hash: 4H2iOu8gLLffNi536xCsuCivAwnItfPi2vTZ/W207ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:d8:a1:c6:77:72:b7:d7:97:05:c4:8f:70:0a:ab:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c
Validity
Not Before: Jun 19 11:00:10 2025 GMT
Not After : Jun 20 11:00:10 2025 GMT
Subject: CN=89d5ddf7709a05b8369898338a03953c26115924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:be:cc:51:f2:31:24:c7:81:45:8f:bc:e2:83:
1f:1d:fe:b7:d1:79:71:dd:0d:4a:5a:33:09:3c:fe:
77:3a:57:11:fd:6e:28:6c:0a:85:31:2b:79:a3:ee:
5a:31:cd:00:b6:a1:97:87:64:00:40:6d:60:f9:36:
70:a4:7d:c8:97:bf:9a:37:b5:09:fc:33:cb:e4:ab:
6f:3e:98:72:c7:be:42:2f:fb:59:3f:57:0b:ff:30:
26:df:e0:5c:cc:3b:43:f2:7d:dc:13:57:a1:fc:53:
58:af:ec:34:ba:04:0b:f8:75:ba:e9:dd:59:90:de:
f8:15:5e:3f:a4:a2:36:a1:50:84:23:c1:61:8e:03:
43:aa:bc:14:f8:13:d6:92:7c:b2:a2:a0:5d:37:1e:
1d:5e:57:0a:df:6f:ef:de:be:da:1d:84:73:74:a8:
ec:66:02:6e:ae:46:33:57:61:ee:6d:93:b8:4b:8b:
1e:bf:ef:d1:a1:7e:f9:b2:32:78:dd:de:90:6f:55:
ab:70:59:96:90:88:49:8b:e7:78:f1:4a:9f:a2:14:
74:93:40:c6:66:4d:cf:ab:17:19:a2:5d:20:db:3f:
ec:79:98:a5:83:35:ad:de:6d:38:81:9f:94:21:01:
b5:97:ff:2f:b4:1f:c3:db:8a:91:52:30:b2:87:20:
5d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D5:DD:F7:70:9A:05:B8:36:98:98:33:8A:03:95:3C:26:11:59:24
X509v3 Authority Key Identifier:
keyid:14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9f:3b:c3:73:a2:e7:cf:d3:89:bd:d8:23:76:3a:77:3a:c0:
16:a0:d6:be:71:ff:89:30:66:04:89:44:f9:9e:d0:3b:85:55:
bf:ed:3a:c6:18:b2:08:91:0b:a5:46:c5:5e:a6:f9:20:1e:75:
69:3c:dc:8f:da:03:51:4f:d3:41:09:22:1d:d4:07:c0:1b:88:
97:8c:0f:da:c2:d2:b7:06:10:e8:75:a2:16:ae:d4:45:e6:ee:
9d:4c:96:fb:f3:15:d1:db:95:eb:b5:c8:cd:65:31:65:74:8d:
8e:ea:8b:7e:05:1f:1e:94:27:68:ec:91:90:0b:34:3b:8b:14:
d3:cd:70:d9:15:aa:57:c6:3e:58:b4:4a:e3:48:d6:55:d3:06:
d7:04:50:5d:ca:53:ef:2b:3e:02:d1:9c:fc:47:8b:4e:31:89:
03:a3:fe:5b:7f:09:b8:8f:47:e3:05:16:d8:38:65:ba:10:23:
ba:53:f0:c7:17:83:81:30:17:1e:96:76:0d:5e:55:1d:27:26:
a3:1f:89:d6:5e:ea:fd:f0:7b:d4:67:ce:d1:be:01:4c:0c:4b:
e7:c5:ed:dd:79:f6:49:7a:b0:09:4d:d9:d1:13:2f:97:d6:eb:
54:2e:1a:5d:9d:6e:2e:ba:64:91:08:88:69:99:6b:d8:43:2c:
66:85:40:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 16:41:39 2025 by rpki-client