Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft
File: FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft (raw, json)
Hash identifier: cC2iePSi5Icc6TuJPqn0OBcKwnsKHHHt82iHrby/jJw=
Subject key identifier: 9F:08:28:A6:8A:CD:98:04:52:2D:D4:28:A9:2E:63:CC:DB:FF:FF:EA
Authority key identifier: 16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED
Certificate issuer: /CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed
Certificate serial: 0197684E4DB3C7761E375EF7A521E9A50680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 08:00:51 +0000
Manifest this update: Fri 13 Jun 2025 08:00:51 +0000
Manifest next update: Sat 14 Jun 2025 08:00:51 +0000
Files and hashes: 1: FgkgY6Kn3GCeK2-cwNrwTx6Yue0.crl (hash: X1EzKxXqegV1OO3JwTPxM0nrAFxfAsNU/Y2WoCmeDFA=)
2: Tz0-GH9GTxNnsSYKPK-Ng0bqHFU.roa (hash: 6KAfAR9FK4FJFxLsDkhMRqDlSfVSMvMOJuzMsurfhN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:4d:b3:c7:76:1e:37:5e:f7:a5:21:e9:a5:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed
Validity
Not Before: Jun 13 08:00:51 2025 GMT
Not After : Jun 14 08:00:51 2025 GMT
Subject: CN=9f0828a68acd9804522dd428a92e63ccdbffffea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ca:14:91:ff:c4:6a:82:9e:5e:55:1e:a4:01:
93:04:e5:01:e8:cc:05:24:03:d8:3b:05:f2:59:7f:
73:44:12:51:13:be:64:37:b0:c0:d3:18:d5:2d:68:
a4:7a:9a:3f:5c:3d:68:b7:40:74:42:af:6b:21:71:
c3:34:f1:0a:0c:bf:3e:d9:be:37:b4:02:5b:91:c5:
f1:0b:08:1a:9f:1d:5a:5f:29:97:ea:e7:11:b4:c5:
37:b9:50:18:96:fe:2b:94:b8:18:7a:e6:c0:42:9d:
6c:4a:87:e7:25:3e:81:af:6e:80:91:9c:38:ea:56:
64:e2:fb:dc:08:aa:67:56:57:e3:28:86:c5:d1:06:
94:72:60:e5:41:ff:e3:18:19:37:31:48:ca:12:23:
4e:c7:c2:55:d2:7f:7f:ed:73:29:b2:f9:5c:36:92:
a8:e3:f7:bc:99:2a:17:fe:f7:61:d5:11:9e:01:e1:
fd:9d:d6:3f:1e:65:a4:d9:82:aa:5d:54:10:1a:4e:
b8:3c:24:d6:37:99:ac:d7:66:2a:f1:b9:99:a9:d9:
3f:63:a8:5d:72:e9:1e:26:ec:ea:66:5c:ee:0d:70:
00:8e:4b:56:7c:44:ac:94:f4:55:a5:8b:e9:69:77:
49:14:b1:8a:0a:f3:ee:cc:9e:6b:fd:17:5f:0f:59:
1b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:08:28:A6:8A:CD:98:04:52:2D:D4:28:A9:2E:63:CC:DB:FF:FF:EA
X509v3 Authority Key Identifier:
keyid:16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3b:5b:38:d5:c5:ba:61:53:43:2e:35:b9:dc:d7:d3:be:2d:
01:eb:7f:ed:b9:be:23:b8:00:1d:f4:b8:f4:74:70:4f:7e:4f:
5e:1f:76:a8:af:fb:b9:de:06:6b:4a:aa:14:14:c5:1e:6d:8b:
5a:2c:25:1d:aa:e0:9b:d2:dc:86:d6:de:07:00:04:62:a0:11:
b3:c6:98:a7:67:c5:10:e1:ec:fd:5e:f3:fa:11:e3:8d:7d:6f:
53:42:58:3e:6d:e2:02:9e:38:89:0e:5f:0e:91:a6:83:36:8b:
1e:66:ee:79:40:e0:c6:39:e0:5a:b3:3c:7b:66:2c:d6:22:69:
bc:ef:9c:36:71:b2:bb:8f:d1:14:91:6d:b2:b0:d0:ea:a0:42:
88:76:56:38:2b:a3:1f:d7:c4:4b:43:b4:90:85:f0:e5:fc:af:
b5:e0:e9:44:c3:5f:9f:74:b4:6b:84:b2:dd:89:ea:70:85:3a:
40:b8:ff:06:b1:56:35:a5:58:12:81:78:ba:ed:55:d1:39:21:
c9:ef:8a:d5:c1:38:43:6a:4e:0e:3b:dd:e0:c1:4d:51:e5:8c:
f5:d7:14:56:ad:c0:7c:69:17:c1:2b:19:b8:68:af:26:15:95:
2a:2a:9f:17:fb:01:ef:1e:c0:c2:02:8a:87:7a:8f:ea:8e:33:
a4:38:f2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:32 2025 by rpki-client