Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
File: FpCXDdu3YZzIIYbdtTbrTomF0t4.mft (raw, json)
Hash identifier: f3s0vB3BJz4izOrl5j5uaqFQI39yafqhI8Med0AyFnc=
Subject key identifier: CC:88:2B:DA:6C:1E:B1:29:8C:D9:5A:34:A0:D3:CE:20:09:1F:93:E8
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Certificate issuer: /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial: 01976C61EB5E093460EEA1A45527587C1288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
Manifest number: 1594
Signing time: Sat 14 Jun 2025 03:00:45 +0000
Manifest this update: Sat 14 Jun 2025 03:00:45 +0000
Manifest next update: Sun 15 Jun 2025 03:00:45 +0000
Files and hashes: 1: FLzhahX1RfEQksVef8HwMw5EmEI.roa (hash: 3r/+kxvTsJcUwXkCOUAwIQMliVjMUukx9o6NgfAcfNk=)
2: FpCXDdu3YZzIIYbdtTbrTomF0t4.crl (hash: WwMT4bOiUaDqSNgXD3ybJAWxDCaf6yC1xjerKYzsDM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:eb:5e:09:34:60:ee:a1:a4:55:27:58:7c:12:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Validity
Not Before: Jun 14 03:00:45 2025 GMT
Not After : Jun 15 03:00:45 2025 GMT
Subject: CN=cc882bda6c1eb1298cd95a34a0d3ce20091f93e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:11:f4:43:89:48:0b:76:5d:f5:d8:cc:ee:
f2:27:db:04:5f:59:bf:be:9c:54:22:44:08:e8:eb:
2d:22:db:eb:a4:6e:a0:2c:8d:2f:29:38:ab:3c:88:
cf:d3:79:94:f2:15:53:6d:12:91:36:b8:c3:99:d0:
58:ca:de:83:96:dd:60:bc:43:46:97:51:8e:2f:d6:
86:41:3f:a8:7c:31:ad:8a:19:af:26:51:13:13:a1:
f4:0d:85:06:5f:74:d5:d6:7a:a7:c5:13:ad:08:23:
38:21:3b:38:61:66:c5:62:c1:ae:cf:a9:85:52:78:
dd:65:a8:3a:19:80:d3:dc:fc:df:2c:55:95:a2:bc:
24:c5:5d:dd:bd:05:ca:cc:e0:39:c4:6b:db:4e:fb:
63:5c:97:bf:45:58:96:23:f5:1c:e4:05:4e:25:3e:
e2:cf:0c:72:6c:9a:42:7d:f8:23:67:10:b2:34:6a:
a3:a0:2c:cd:5e:06:45:50:d1:d4:d0:99:6e:dd:70:
21:52:10:7f:09:3a:b8:c0:0c:90:3a:31:2c:88:03:
9a:13:fa:3f:36:aa:95:c3:2e:a9:ff:7a:79:df:8b:
ff:ad:3d:e8:51:92:7f:a6:33:1f:69:fe:5f:a0:7a:
2e:31:fb:55:b1:50:72:89:01:d9:ca:ca:38:90:c2:
91:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:88:2B:DA:6C:1E:B1:29:8C:D9:5A:34:A0:D3:CE:20:09:1F:93:E8
X509v3 Authority Key Identifier:
keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3f:bd:10:bc:a2:1c:e7:1f:a9:3b:3c:de:10:1d:f8:f5:d5:
7c:f1:db:14:84:e1:26:91:f7:db:53:33:44:1a:3c:e0:d7:0d:
b2:4b:d3:df:4e:de:df:0c:eb:f4:c9:5a:53:cb:86:77:f7:12:
1c:3b:3d:4a:01:64:97:72:9c:64:ac:e6:eb:e0:1a:a1:e4:96:
cc:8d:9f:22:37:67:23:a2:b6:f0:22:81:7d:4a:26:d3:78:31:
1f:12:17:51:a4:19:f9:04:1d:22:0c:20:19:e1:a0:19:bc:d4:
0f:4d:a1:a0:73:4b:5f:24:ac:32:62:76:8c:0e:09:62:c4:30:
c3:5b:51:1b:eb:cf:63:c0:cd:63:bf:4e:fb:97:2c:8c:f6:9f:
88:d1:df:9f:a7:10:2b:a0:3d:77:e5:01:e3:a1:71:fb:86:56:
ed:be:d9:ad:08:c8:dd:e2:56:37:e5:84:19:e7:ff:d3:7d:38:
42:fc:b0:81:88:b3:94:84:d4:fd:8d:c0:c5:f6:59:35:69:e7:
d7:58:9a:6b:08:59:47:9a:2f:20:31:cf:c5:c6:e0:8c:7e:02:
8d:d5:4a:99:24:9f:cf:dd:9c:a5:78:06:26:7c:cc:c6:46:ea:
e3:01:fe:d9:80:aa:e4:ae:45:52:0e:a3:b8:79:98:80:b1:35:
87:33:25:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:51:55 2025 by rpki-client