Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
File: FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft (raw, json)
Hash identifier: 3OVOh3M8QE0dKz7t9xc8TLEYZrlymXiY2ANuZExDxbE=
Subject key identifier: 99:40:A9:AE:8A:FA:F0:9F:33:FC:90:E6:3F:DA:EF:4A:34:20:42:EB
Authority key identifier: 16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
Certificate issuer: /CN=16914c51d031411c1340171593603163c3d4a08e
Certificate serial: 01976EBDF87027240BD8C077BE60FB103652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
Manifest number: 0242
Signing time: Sat 14 Jun 2025 14:00:33 +0000
Manifest this update: Sat 14 Jun 2025 14:00:33 +0000
Manifest next update: Sun 15 Jun 2025 14:00:33 +0000
Files and hashes: 1: 8ERPvpxKfVBfAUigys2-PiTFfqA.roa (hash: KAiZ9xkRQ32j6xO0jLEnhDznPnUl1zJBNWjMk46qfE0=)
2: FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl (hash: djxEIC/7WSknw2dNqfhjH51XXvOXLIhvXRapA/gTM6E=)
3: gJVc1ED6fXAztZrZVaBt7sRVw7s.roa (hash: NuxZCt7HFtHNaqj3vrIg4m4RXf+ibNz9HPakUOz5CxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:f8:70:27:24:0b:d8:c0:77:be:60:fb:10:36:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16914c51d031411c1340171593603163c3d4a08e
Validity
Not Before: Jun 14 14:00:33 2025 GMT
Not After : Jun 15 14:00:33 2025 GMT
Subject: CN=9940a9ae8afaf09f33fc90e63fdaef4a342042eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:32:b5:25:60:1f:7d:cb:ca:b2:2a:4e:78:ae:
4a:fc:ba:f1:22:4d:60:24:1e:42:46:f8:3f:f0:79:
8b:47:33:e0:ca:d3:3e:0e:1e:8e:f2:ce:70:ff:c1:
9b:6a:06:53:5d:e5:eb:8b:60:02:a5:a9:65:da:af:
4f:6c:a1:08:a7:f6:38:b6:56:5c:cf:16:bd:be:0a:
9d:65:07:03:cf:51:f2:d6:3b:3c:28:45:cf:6e:a9:
4b:e3:23:05:2b:70:19:9a:18:80:67:f0:4f:cd:69:
4f:38:bb:bb:52:f4:77:2f:d3:77:db:16:74:61:a8:
a6:f1:b0:73:bb:a6:a1:41:d5:41:9f:6e:ac:7f:9b:
ea:13:cb:72:3d:bb:0f:41:66:7c:46:0c:cf:75:71:
e6:9a:56:dc:e1:d5:18:b4:12:3e:42:b6:dd:1a:ce:
f5:5e:ad:01:71:3e:0d:f2:85:ee:e2:fe:d2:1a:4d:
e0:68:23:1f:63:cd:5f:54:7f:ac:25:ac:a8:1f:fb:
d0:06:1c:ea:29:7f:66:63:4c:ef:aa:84:dc:1f:4f:
55:f8:f2:f9:04:87:9c:c0:7f:63:45:66:06:34:46:
e1:7b:a6:01:db:e4:70:5c:6f:06:24:fd:09:16:92:
6d:af:04:86:0b:a5:72:3c:db:45:46:5a:b6:c7:cd:
36:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:40:A9:AE:8A:FA:F0:9F:33:FC:90:E6:3F:DA:EF:4A:34:20:42:EB
X509v3 Authority Key Identifier:
keyid:16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9b:1e:3d:d8:08:40:ed:d8:71:8d:6a:cf:98:d9:65:1d:76:
78:00:20:81:f3:6a:00:c1:06:22:b6:1c:3c:92:37:5b:de:48:
bf:b1:39:4b:88:87:2d:99:c2:9e:32:24:a9:69:b0:63:92:a1:
94:92:d5:22:57:2d:7d:65:3d:c6:f2:09:fd:3b:35:6d:14:1e:
5d:4a:76:80:78:8f:18:17:0d:14:26:c1:5b:fa:4d:91:fa:69:
ce:fc:17:7d:8d:ad:c1:08:f8:91:a5:f7:90:26:09:f6:c3:96:
1b:c3:52:22:9e:a0:82:df:92:1f:79:2f:2f:61:9f:21:fa:59:
18:93:f4:a4:29:a0:47:2d:b3:7b:91:c4:97:97:cd:af:c3:df:
41:c3:8e:cc:9f:7b:42:c8:6c:76:99:65:51:8d:41:a9:dc:5b:
53:83:1e:14:ce:f9:02:25:da:3f:a7:fd:a2:a6:1b:8e:1b:3c:
4e:6c:c1:aa:14:7e:fa:f3:ef:d7:11:48:02:1d:c6:10:55:b5:
80:5d:e5:02:e9:fc:34:b4:1a:87:84:4b:a7:14:ba:0a:d7:3e:
51:81:bf:de:67:49:49:85:9d:f4:f9:6f:98:81:cc:b2:50:48:
a1:c7:33:c5:b4:c0:26:cb:50:60:5a:35:c9:41:b0:3b:e8:58:
bc:37:87:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:30:28 2025 by rpki-client