Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
File: FqMhIVpNNe0imLBzlx20CIZP02I.mft (raw, json)
Hash identifier: JyiP2byH5644U/9J4Z4G7gFj/6TrgYp4G4wa2EfFKyE=
Subject key identifier: 58:57:83:9B:89:35:29:86:A3:25:10:6B:BC:85:71:3D:21:6C:09:53
Authority key identifier: 16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62
Certificate issuer: /CN=16a321215a4d35ed2298b073971db408864fd362
Certificate serial: 01976C2B305AB0975BDACF3BA23EB3D76140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
Manifest number: 0DB7
Signing time: Sat 14 Jun 2025 02:00:59 +0000
Manifest this update: Sat 14 Jun 2025 02:00:59 +0000
Manifest next update: Sun 15 Jun 2025 02:00:59 +0000
Files and hashes: 1: FqMhIVpNNe0imLBzlx20CIZP02I.crl (hash: z37uoja/bEaR2+UjngnPjfdMMJ6vhkOdoJcFpaRGBa4=)
2: q9FXpjO7WYpYF_PuEvxdIBNk31U.roa (hash: eU80FRwYJKXcKKPdsKCtTdJX7dfta5v66z6KC/V+tqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:30:5a:b0:97:5b:da:cf:3b:a2:3e:b3:d7:61:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a321215a4d35ed2298b073971db408864fd362
Validity
Not Before: Jun 14 02:00:59 2025 GMT
Not After : Jun 15 02:00:59 2025 GMT
Subject: CN=5857839b89352986a325106bbc85713d216c0953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:30:cb:1c:a1:9c:5b:f3:3f:40:1d:a2:30:
64:d1:38:42:e7:01:a2:96:4d:b1:b8:2a:c0:a9:e2:
fb:44:58:79:f0:dd:5d:18:48:96:89:82:32:49:a5:
d8:5f:a0:ad:1f:c8:68:3d:a5:61:6b:7d:ee:0f:55:
17:c1:7e:97:72:f9:c3:b8:7f:d2:60:08:39:78:55:
f7:b9:22:e9:fe:25:50:2a:01:47:f1:e1:74:c1:1b:
fb:ff:6f:ff:f7:99:13:6c:9f:7b:6f:82:78:07:6d:
66:0d:2a:f4:89:09:18:d6:8e:91:72:0e:27:32:60:
a5:a4:a3:a2:b8:eb:f0:6a:aa:d7:99:31:e2:57:43:
61:c0:3d:9c:27:39:c6:01:5c:66:da:63:e8:3d:37:
71:49:bb:44:56:9f:1b:dc:66:b7:b6:fc:47:54:28:
91:91:22:ce:05:0c:c6:a5:e2:36:88:de:0f:1b:22:
2b:1f:14:a3:3f:83:e9:59:7e:31:2a:3e:80:2f:9a:
33:2d:e3:a9:86:aa:66:bf:94:46:71:ed:0c:c9:76:
ca:7d:52:d9:30:95:5b:0d:e2:47:e6:49:30:b6:92:
ce:18:e3:f5:2f:5a:15:2a:36:f4:ad:26:40:d4:a6:
0b:e7:89:c2:fe:75:cd:15:98:d0:55:c1:26:8c:78:
a2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:57:83:9B:89:35:29:86:A3:25:10:6B:BC:85:71:3D:21:6C:09:53
X509v3 Authority Key Identifier:
keyid:16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:22:b8:a9:bc:ab:d1:18:6e:ac:09:92:df:dc:ba:91:6a:2e:
24:ed:a0:96:f5:78:95:0f:51:22:13:da:26:d6:f8:72:47:94:
46:90:14:24:bf:6b:db:bc:59:fa:ab:66:62:7c:90:03:24:e9:
53:3d:b9:11:a7:c5:e9:dd:ac:27:d4:8e:bf:6a:c4:f5:50:64:
04:14:8c:ce:2b:f8:72:41:b8:fc:cd:95:5c:0f:6e:a9:28:1f:
92:c7:72:70:17:01:79:09:c1:10:32:42:22:c7:ef:d3:4f:5a:
11:fd:49:01:ad:c5:2e:aa:db:dd:4a:f6:21:fa:f5:8a:41:08:
d3:34:56:8f:84:4b:42:66:d1:95:a1:09:93:be:42:b4:a8:59:
a2:20:8b:6a:97:cf:44:5f:b8:72:c6:99:df:16:35:d4:d0:ac:
e3:db:24:81:62:31:20:3e:cf:79:62:06:ed:8e:d4:55:6e:b3:
bf:1b:38:34:02:60:15:86:46:42:0e:ea:32:1b:d8:5a:09:5d:
38:67:32:04:cb:ac:27:81:77:80:b2:ad:0d:95:0f:96:62:d3:
03:2e:12:03:0a:70:1b:d0:4d:5c:e9:83:b8:39:08:c7:6b:06:
8e:e7:4b:08:0b:5d:a5:ea:cc:19:38:a1:b0:ae:e0:d2:55:af:
9c:ee:95:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:14:05 2025 by rpki-client