Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
File: FCaOTC4CUzDfJv1ATK4PavJszCM.mft (raw, json)
Hash identifier: m/Y6Jrd5ndWB6nj1ykwPMxLArGLixELXCqQyML3CCF0=
Subject key identifier: 48:B0:94:28:23:CF:E7:4F:E2:47:09:96:72:6D:DA:50:0A:50:DE:6E
Authority key identifier: 14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
Certificate issuer: /CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Certificate serial: 0197884751AFFA3DD98B4A62D3E36B5BDB18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
Manifest number: 0DDC
Signing time: Thu 19 Jun 2025 13:01:04 +0000
Manifest this update: Thu 19 Jun 2025 13:01:04 +0000
Manifest next update: Fri 20 Jun 2025 13:01:04 +0000
Files and hashes: 1: FCaOTC4CUzDfJv1ATK4PavJszCM.crl (hash: Y2UMfT3ugNgXZZRSjWMu17BGSnaSADMRAAGhnOz8ZZo=)
2: u0DOKBtKEXfOYPXrhlfb2Ryk4Zc.roa (hash: VOn09+bdFNjvpl/Gu+Ha0G2LvOgVJGvmVcF7NTjr9S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:47:51:af:fa:3d:d9:8b:4a:62:d3:e3:6b:5b:db:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Validity
Not Before: Jun 19 13:01:04 2025 GMT
Not After : Jun 20 13:01:04 2025 GMT
Subject: CN=48b0942823cfe74fe2470996726dda500a50de6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:f1:04:aa:1c:96:42:0e:72:ed:38:d8:d5:
e4:9d:9c:e7:7f:74:80:44:60:fc:1b:c0:1f:bf:77:
2f:78:67:22:4e:9f:e3:74:22:a7:05:6d:22:d2:e7:
25:52:5c:fb:d0:b3:fd:20:6b:77:f4:51:9b:55:e9:
77:0f:96:2d:be:33:54:02:96:45:9a:3a:99:4e:75:
d3:76:fe:25:42:34:38:04:70:b3:bd:0c:3c:52:10:
ed:f2:6f:e4:f7:31:c2:c2:6f:08:d3:17:b0:3e:0a:
8c:a1:f7:25:10:8f:97:23:9c:8d:f5:92:0e:e4:82:
ab:83:c3:12:fe:f3:f9:19:15:77:8b:9b:de:5d:32:
48:5e:f4:5a:e4:4f:d7:6e:1f:7c:bd:d5:05:92:4a:
00:47:43:49:57:14:df:37:ac:7a:40:81:30:63:ea:
4c:cf:09:b1:37:88:6b:48:6d:57:5e:d8:dc:d9:18:
13:47:2d:10:35:50:75:1f:d5:81:30:ee:71:92:d9:
46:1f:b0:db:f0:e6:20:9e:e5:d8:88:81:a7:e9:56:
20:40:4c:5d:8d:c5:cc:d2:cf:a2:6f:07:ac:23:87:
ec:a2:1d:73:0f:f6:83:12:e8:7f:56:d3:95:f9:44:
4d:34:39:5a:04:32:a8:0f:06:10:5c:06:7b:76:2d:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B0:94:28:23:CF:E7:4F:E2:47:09:96:72:6D:DA:50:0A:50:DE:6E
X509v3 Authority Key Identifier:
keyid:14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c1:2a:b6:48:5c:87:8a:dd:de:4f:9f:27:9f:55:09:74:a0:
e0:92:84:a7:dd:7d:9d:f9:d9:9b:50:35:07:ef:e7:81:43:98:
0e:a3:87:33:b8:05:8a:04:bf:5c:a6:0d:66:46:17:b1:95:48:
26:c1:3a:b6:18:ca:ee:e0:4f:19:d3:54:3e:5c:ca:8c:48:3c:
5d:e4:c3:fe:0d:65:5b:24:c3:0f:3a:b0:ba:2e:51:48:3e:24:
3c:eb:15:ef:54:99:0e:9b:04:e9:46:be:a3:4c:df:e7:32:d7:
16:02:c4:54:f6:c9:ba:f7:35:49:97:ac:6e:19:2d:17:44:19:
14:84:0a:3f:64:3c:9b:f4:60:31:38:8d:c3:e4:d3:a7:e9:db:
96:3d:3e:a6:5b:ea:25:a2:8a:13:d5:33:60:ee:c3:5d:d3:3c:
1b:64:d9:07:63:c1:97:1d:19:3e:f1:6b:85:87:fa:9c:48:7a:
bc:38:9a:95:c7:d7:a3:20:b4:5b:57:54:18:cc:99:5f:f4:6e:
f8:5d:55:27:8d:55:1c:e2:8e:7f:54:a5:39:07:a3:0d:88:e6:
bc:c5:a4:36:8c:57:a6:64:f7:36:9d:78:d8:9e:f4:d3:50:45:
b9:fe:9f:b2:dc:c8:31:96:53:30:b0:14:f4:72:f2:e7:32:e0:
5a:b8:6d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 19:13:12 2025 by rpki-client