Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
File: _FNNTENDzYmRiWnVbaGFZ0sWY1U.mft (raw, json)
Hash identifier: yH3RZPNdv/Hbuo06xHKKvnrHTQJm0uiLKgtXTGwCzXE=
Subject key identifier: C1:E7:E8:4F:9E:2A:2A:E9:2A:AA:DA:FF:9A:77:7D:64:C3:5A:09:D5
Authority key identifier: FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55
Certificate issuer: /CN=fc534d4c4343cd89918969d56da185674b166355
Certificate serial: 01976884CF1ACD8E996BA5A36D53E2857AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
Manifest number: 0F88
Signing time: Fri 13 Jun 2025 09:00:23 +0000
Manifest this update: Fri 13 Jun 2025 09:00:23 +0000
Manifest next update: Sat 14 Jun 2025 09:00:23 +0000
Files and hashes: 1: _FNNTENDzYmRiWnVbaGFZ0sWY1U.crl (hash: +oEzRBPmVwxAKgV4L1+wjIqG1jb6IK5P6z+P7/igyP4=)
2: bjwBa29o8sLtvq0lB3wmXidRAXM.roa (hash: voja3TwiIQ0KziGC7wSgsvdSwQWHXLdVHcxuiguvZGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:cf:1a:cd:8e:99:6b:a5:a3:6d:53:e2:85:7a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc534d4c4343cd89918969d56da185674b166355
Validity
Not Before: Jun 13 09:00:23 2025 GMT
Not After : Jun 14 09:00:23 2025 GMT
Subject: CN=c1e7e84f9e2a2ae92aaadaff9a777d64c35a09d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:5d:12:bb:be:36:21:9d:68:e6:b6:5f:de:
71:ad:33:60:d5:ac:12:e8:20:9b:0d:4f:55:09:98:
66:5f:ad:34:c7:d7:0f:1b:d0:32:ad:7e:81:3b:d3:
26:2e:3a:18:3b:05:51:de:6f:6d:af:1b:51:d1:46:
8f:ef:63:2f:a5:2d:39:28:31:cd:33:4b:b4:1d:fc:
1d:9a:b3:f1:45:a8:6f:d7:f6:6c:5a:e7:ad:c2:a4:
ee:3d:e6:28:2f:33:3d:61:d6:a8:f0:64:76:af:67:
8c:01:d6:c6:5b:14:20:f4:33:87:d2:cb:79:eb:f3:
5d:e1:ac:4d:16:3a:b2:cc:b0:7e:81:fd:39:c1:13:
84:80:d2:2f:f7:b9:34:d1:75:cf:91:d7:ad:46:51:
8a:8d:47:0c:0d:c3:c4:81:20:10:55:32:ed:78:6e:
c1:7e:3c:cc:bd:91:43:5a:7d:12:b1:40:12:17:92:
22:c9:9e:30:72:11:40:98:12:9b:1e:5b:dd:32:34:
11:5b:58:a3:53:9c:83:8f:a0:73:3d:e0:5a:05:be:
29:90:a3:a4:23:6d:2c:30:3f:4d:fe:64:1e:ef:89:
4e:04:b7:9e:b5:9f:61:5b:ae:0a:60:1a:44:d2:39:
ec:71:e7:a6:39:ba:21:26:70:c4:f9:e4:77:d6:02:
63:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E7:E8:4F:9E:2A:2A:E9:2A:AA:DA:FF:9A:77:7D:64:C3:5A:09:D5
X509v3 Authority Key Identifier:
keyid:FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5b:85:6b:f7:e2:f2:6d:37:51:9d:ea:4a:62:17:68:1b:bc:
ec:77:4d:43:0d:f7:29:73:28:78:7f:f3:e0:6c:27:2e:27:16:
46:53:87:a1:7b:cc:c9:07:39:ce:9c:24:1b:be:8b:db:3d:cd:
19:55:61:0f:08:60:65:3b:33:c2:52:da:f1:43:4c:9e:b9:d8:
60:fd:fb:b2:57:d0:4a:e4:69:49:ed:44:94:5d:a9:9c:ab:2d:
7f:00:1b:ce:16:90:9b:1a:f5:dc:5c:0b:0a:7d:f0:fd:f4:dc:
09:49:7f:1e:ba:06:c1:69:a2:fc:51:5c:59:e7:0c:99:0d:0a:
cc:fb:5b:b5:c7:ec:c1:49:38:42:57:37:79:90:00:c8:30:91:
49:fb:92:d3:17:9b:66:bb:57:f1:2d:c1:7e:88:fd:4e:cd:08:
2b:e8:a0:2d:8e:b9:b8:92:9d:e9:96:10:f0:42:5c:70:53:c0:
04:a3:b0:63:90:af:e3:12:b1:ea:e7:9c:b2:58:da:54:aa:70:
a4:af:64:a3:bd:dc:b7:3e:70:f0:72:f3:be:56:0e:f3:66:d6:
13:0a:83:39:0a:08:12:2c:f9:1c:24:40:c8:c0:23:43:29:6b:
02:a4:ea:60:2e:8a:54:a3:67:8e:e0:dd:70:11:8c:27:48:4f:
f3:ea:5a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:59:32 2025 by rpki-client