Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
File: FQKvcT425SxxhmyKnr2s89him2g.mft (raw, json)
Hash identifier: GxpHsnQe2gwqu4Z+rA3iR/G2DnMn48IVRLCBuGNiA4Y=
Subject key identifier: 17:22:F2:49:7A:A6:ED:5E:FC:76:88:2D:D1:E3:52:2C:FC:05:D4:81
Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Certificate serial: 01976D3DFE5DFE7BFD77C2587AFAC4FB6357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 07:01:08 +0000
Manifest this update: Sat 14 Jun 2025 07:01:08 +0000
Manifest next update: Sun 15 Jun 2025 07:01:08 +0000
Files and hashes: 1: FQKvcT425SxxhmyKnr2s89him2g.crl (hash: /7rwH29wHnclGvbObBIaX/JUL0VHNEExjItZg9MorpE=)
2: tuMifPTkCbCL7ajrwo0EzPnXWPw.roa (hash: jC33EY0cA4p2GJTzlFhrTlf/kii333WPsx2l9xMoLj4=)
3: xrGACS-1hAxmap4Rb-Oc9S070js.roa (hash: mptaEeEJPbcTmStEp7RBmFaS5iUHgb9cGp/H5Fm+PGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:fe:5d:fe:7b:fd:77:c2:58:7a:fa:c4:fb:63:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Validity
Not Before: Jun 14 07:01:08 2025 GMT
Not After : Jun 15 07:01:08 2025 GMT
Subject: CN=1722f2497aa6ed5efc76882dd1e3522cfc05d481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6c:9c:97:bb:85:2b:69:d7:ea:ff:17:87:f1:
d3:c9:29:46:23:bc:b8:d0:3e:01:a1:a4:36:9c:fa:
bc:cf:72:aa:2f:f2:aa:e1:8d:ef:f9:6c:42:98:68:
df:0c:89:7a:28:49:8a:02:e1:b6:6c:5d:14:7e:6a:
91:0b:39:c5:97:8a:d0:d1:55:0e:6c:b5:73:ac:00:
6f:8c:b3:33:e9:75:57:46:b9:aa:77:39:22:f4:ce:
99:30:ca:1c:7f:e9:ef:a4:78:ed:51:b0:56:0b:ed:
5b:24:1a:52:58:55:74:68:cd:31:fc:46:14:95:02:
d0:83:16:15:48:ea:74:35:3b:5d:3f:d8:76:ee:ff:
36:2b:4a:a8:4d:95:17:c4:19:fa:87:5f:23:d0:1a:
bd:dc:88:2b:da:10:8e:35:90:b0:84:8d:38:af:41:
89:e8:2a:2a:b8:51:08:0c:4a:bd:c1:06:3c:19:f4:
67:28:09:24:9b:1c:75:fd:5b:50:68:66:24:48:1b:
35:bc:87:36:57:95:b4:63:79:b6:34:d5:fb:6b:f5:
4a:23:6e:d5:6b:a0:eb:ce:70:46:f0:52:c8:50:d4:
19:b8:0c:0b:f8:4a:db:d4:11:ab:96:78:75:ac:0f:
09:28:44:f1:5a:5b:88:8f:6e:3b:ee:63:86:1c:a6:
35:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:22:F2:49:7A:A6:ED:5E:FC:76:88:2D:D1:E3:52:2C:FC:05:D4:81
X509v3 Authority Key Identifier:
keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ff:e5:01:f3:64:5f:0e:6a:4c:a4:51:bc:08:40:e7:29:c6:
99:b5:a8:08:21:e9:05:2e:2d:7a:b9:d8:e4:8d:e8:df:fc:09:
7b:48:e5:3a:2c:fd:c1:21:84:1c:c6:eb:97:8b:15:a0:0c:63:
5e:14:cb:6d:7d:91:41:84:8d:86:c2:70:d3:d6:19:89:75:03:
52:32:d4:96:49:da:24:04:99:77:89:94:23:a8:dd:5d:f5:65:
45:20:51:d2:78:57:e3:03:c8:5f:65:6c:82:3d:ed:e6:dd:88:
f0:45:e4:30:75:28:99:7f:b0:fd:09:e1:97:47:98:60:ef:cb:
bd:58:f6:f5:bd:dc:be:eb:fc:0e:3b:ee:8d:c0:4a:e2:4b:3c:
b2:7c:0b:a4:5c:b8:93:18:c6:7d:be:70:fb:71:a0:13:1e:da:
e8:98:7a:bf:92:6f:98:ae:b3:3d:f4:bc:3c:9a:ff:28:da:f1:
aa:7c:39:ad:3a:22:1f:aa:22:e8:5d:11:a3:b0:24:47:a3:70:
4a:e5:3d:57:8a:a6:bf:e1:88:a6:cf:5f:73:d3:de:eb:44:4c:
b2:27:df:43:c6:a7:0a:59:80:6b:86:27:3c:c4:f8:29:1f:02:
05:55:5c:c9:13:6d:48:da:68:7c:51:ff:11:fd:76:97:14:b8:
b9:9f:fa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:11:01 2025 by rpki-client