Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
File: FQmDQfJrtURkBQe9iAqZp-eiNdA.mft (raw, json)
Hash identifier: bKy0S7tJ85ytxIiLT8S192H3x1INjv+PXxiVHjQxGXM=
Subject key identifier: 0B:72:81:A7:21:40:F0:66:21:D2:7B:E3:3E:90:5C:F6:50:AE:90:87
Authority key identifier: 15:09:83:41:F2:6B:B5:44:64:05:07:BD:88:0A:99:A7:E7:A2:35:D0
Certificate issuer: /CN=15098341f26bb544640507bd880a99a7e7a235d0
Certificate serial: 01976DAB57E730FFAE85140AF85B48AE7C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
Manifest number: 151E
Signing time: Sat 14 Jun 2025 09:00:34 +0000
Manifest this update: Sat 14 Jun 2025 09:00:34 +0000
Manifest next update: Sun 15 Jun 2025 09:00:34 +0000
Files and hashes: 1: FQmDQfJrtURkBQe9iAqZp-eiNdA.crl (hash: BA8KqAwIri17ZOMP6T8pTmJUrNZa4vKpC5xK0AW1TIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:57:e7:30:ff:ae:85:14:0a:f8:5b:48:ae:7c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15098341f26bb544640507bd880a99a7e7a235d0
Validity
Not Before: Jun 14 09:00:34 2025 GMT
Not After : Jun 15 09:00:34 2025 GMT
Subject: CN=0b7281a72140f06621d27be33e905cf650ae9087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f4:23:d0:db:e8:1b:79:0a:33:69:db:34:1d:
80:53:7c:df:5a:00:a6:ef:57:65:7b:6f:c4:6c:06:
0a:65:24:2c:bc:5b:36:c3:aa:80:f4:37:7a:38:11:
33:f8:b9:99:60:a4:40:78:74:50:78:e4:12:e4:04:
5b:7b:d5:97:4d:1d:dd:31:91:af:dc:ee:37:d0:22:
64:03:25:31:d6:9f:83:77:ef:be:59:14:74:9d:34:
df:a0:07:a5:5f:3a:3f:f4:60:77:b6:d0:e5:52:a0:
2a:fa:ce:1a:31:3a:5d:75:fc:65:a8:d8:0d:bc:cd:
f5:11:1f:ec:b9:c9:23:57:40:7b:7b:1b:f3:23:32:
e3:5f:ce:17:37:55:a0:07:84:b2:31:88:90:9a:62:
be:3c:6f:cc:ad:64:2f:8f:99:10:6a:8b:1e:c1:3a:
e6:3a:b0:24:81:3a:ec:96:53:a5:a4:12:22:f5:30:
3a:f8:9f:02:dc:24:48:b5:2b:74:ed:5a:43:c8:7d:
88:86:2b:43:72:40:cf:00:e0:12:e2:d8:b6:00:b9:
3a:ba:4b:70:32:89:ed:a1:b8:43:b9:fe:ac:0e:d4:
6c:bd:1d:f9:aa:f2:30:ba:56:74:e7:c9:d1:21:3e:
ad:18:55:9c:5c:76:0e:1c:ee:94:48:1d:b8:6e:1d:
b9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:72:81:A7:21:40:F0:66:21:D2:7B:E3:3E:90:5C:F6:50:AE:90:87
X509v3 Authority Key Identifier:
keyid:15:09:83:41:F2:6B:B5:44:64:05:07:BD:88:0A:99:A7:E7:A2:35:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a5:89:0f:4c:6c:16:be:c5:6f:c9:b2:c9:dc:76:2c:ee:c9:
be:87:0a:78:93:79:b0:3f:44:b4:d8:4d:fb:9b:be:8c:6e:f1:
de:12:9c:f4:59:74:08:3e:08:07:6f:bf:39:27:52:2b:a9:b6:
29:87:8d:4b:b2:c9:11:49:88:85:ab:09:b7:26:be:2d:8b:29:
dd:7c:98:d2:26:cb:1e:87:2e:78:72:ff:d2:b7:a3:6c:d8:36:
48:07:ee:df:4b:4c:77:18:aa:82:1c:f5:51:c6:f8:74:8a:87:
3a:80:ed:84:53:82:a2:0d:bc:25:ea:e4:54:42:03:27:4f:af:
07:27:11:f3:ab:77:e6:0f:cc:f4:65:4f:eb:4c:12:fa:e2:ed:
ad:14:79:3f:6c:8e:df:0a:42:b5:be:5d:25:e4:5c:f0:83:be:
d7:cf:a5:ef:6f:ce:43:d4:ae:7f:e2:b2:70:0d:89:d3:5c:04:
d8:d0:01:2a:f2:11:03:5e:04:85:18:9a:3b:66:24:78:6c:96:
b4:bb:64:61:36:16:fb:09:6e:a2:57:8d:8f:5b:83:8a:71:f0:
12:0d:e9:ae:13:11:75:40:1d:e0:95:ce:f8:70:c5:ec:6f:85:
3a:d6:0a:55:45:ee:f2:22:f7:13:71:c1:bc:a7:f3:eb:0f:c3:
22:9b:f1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:57:31 2025 by rpki-client