Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
File: FoYA36ydPRp15mMNaXEC8vITLEg.mft (raw, json)
Hash identifier: FTC2IrZKQ27nDlYW+UuLI6m0qjzgBQ0S9hsbbVwbH+M=
Subject key identifier: A2:0A:B1:51:35:A9:54:41:67:6B:99:60:AF:32:09:49:3F:3D:DE:9E
Authority key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
Certificate issuer: /CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Certificate serial: 0197722D229EBBD105DAC47FFDF42FD0B6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
Manifest number: 159E
Signing time: Sun 15 Jun 2025 06:00:49 +0000
Manifest this update: Sun 15 Jun 2025 06:00:49 +0000
Manifest next update: Mon 16 Jun 2025 06:00:49 +0000
Files and hashes: 1: FoYA36ydPRp15mMNaXEC8vITLEg.crl (hash: 8XqppHSNyTv3O/zc7AklS2TC1RvWCTZZJpxhTWQR+X0=)
2: UUcKOryc_ykhvD7v1VUPE00sScs.roa (hash: dAexA2neb3HcfI1bNYdykFIadotQ4NdMRRVIE6QTBe4=)
3: q7sVZrLDAVZQekWMRkAvaSDSl9g.roa (hash: RRTQ5jExs41DvyGCsYtTzal7l6KRuDTnah7ylDN5VEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2d:22:9e:bb:d1:05:da:c4:7f:fd:f4:2f:d0:b6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Validity
Not Before: Jun 15 06:00:49 2025 GMT
Not After : Jun 16 06:00:49 2025 GMT
Subject: CN=a20ab15135a95441676b9960af3209493f3dde9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:24:3c:30:f8:19:8c:4c:b0:17:5c:f7:4a:
68:06:47:05:c3:62:46:bb:6c:30:3a:17:a0:86:8d:
19:68:1d:91:04:21:65:54:3c:57:17:1c:54:bd:c3:
d8:d0:bf:08:ec:ed:cd:2c:d4:cb:47:2c:55:46:0f:
2f:15:67:a3:4e:f4:13:d6:8f:e6:7e:9f:3a:bc:3f:
08:1b:93:39:38:37:5b:49:44:b4:ae:73:8c:79:0a:
b6:32:86:72:cd:39:ca:a5:80:6d:9b:d0:8d:79:78:
58:f5:1f:09:60:59:fe:ff:bb:15:dc:8a:b2:21:59:
4d:c8:4f:a0:56:7a:55:84:df:2e:80:92:30:49:98:
ed:f9:9d:05:7a:38:59:9d:ae:28:28:ba:09:c3:86:
6a:41:ff:0d:f0:d0:c3:5f:6e:2c:62:93:34:20:7f:
17:8a:8f:7b:7f:c0:ae:8b:e9:0d:d7:2e:af:79:3a:
f9:68:c4:33:5a:e4:75:45:75:27:c8:27:6c:0b:f2:
0a:d9:22:74:c8:49:d8:53:05:0b:27:ab:41:68:40:
a3:30:8d:90:e8:74:8e:bf:47:0d:7f:42:e8:06:ea:
e0:27:43:7f:6a:79:ae:3a:e3:df:d2:fc:48:3a:8a:
29:a0:62:c1:cb:b5:5e:71:a9:53:c4:ed:ec:7a:c4:
aa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0A:B1:51:35:A9:54:41:67:6B:99:60:AF:32:09:49:3F:3D:DE:9E
X509v3 Authority Key Identifier:
keyid:16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:08:eb:51:1f:47:e3:f6:91:57:61:13:4d:da:f3:27:d0:89:
5f:8a:db:7a:22:5f:87:a2:0c:72:82:79:d7:d3:6e:96:6d:44:
2b:57:7b:33:d4:7f:6f:b9:65:70:f5:f6:b9:4a:a1:8d:b0:2a:
0c:86:cc:cc:fc:f2:0b:30:9b:10:54:b2:7c:0c:86:4e:56:83:
de:74:bc:20:d7:0c:b5:0b:66:2c:fd:09:75:e9:5e:05:74:65:
b8:9c:3f:af:e7:02:85:6b:01:34:9d:c0:29:74:34:19:f3:31:
63:98:af:36:2e:82:19:d6:b7:4f:06:e0:cb:a4:e0:4f:94:fa:
9e:2b:1d:95:36:41:f6:1c:1c:49:a9:f2:22:4a:a2:1a:dc:2e:
e9:40:65:ef:46:61:b6:12:54:26:16:cd:58:73:d1:9c:ed:e7:
2c:d4:34:af:fd:95:b3:6d:cc:c4:ad:ca:3f:16:f9:5a:55:df:
ba:aa:a3:42:43:f4:d7:cd:0f:77:9d:e6:c2:6e:0c:2d:b2:63:
ba:88:39:0a:b5:cb:76:82:51:ba:48:14:d0:a5:88:e4:b1:e2:
df:1f:54:56:d1:c3:5c:14:7d:8e:65:55:52:23:34:9f:4b:4f:
45:d1:40:5a:93:24:a7:1e:d2:6c:68:1c:4e:a2:e9:8b:db:4e:
5c:89:72:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:33:30 2025 by rpki-client