Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
File: FGRN0KgcYwc_LFG8l24R-pxhXFE.mft (raw, json)
Hash identifier: 6AktrHSeAWTmig3CBP7+HE+ww/hZAo5UFxYM3wWN16I=
Subject key identifier: 10:06:18:87:4D:E5:3E:42:2D:89:7F:DB:4C:B2:66:BB:F6:D1:B4:0A
Authority key identifier: 14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
Certificate issuer: /CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Certificate serial: 01976960FCBED528261E6BEF1016C5E5CC59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 13:00:53 +0000
Manifest this update: Fri 13 Jun 2025 13:00:53 +0000
Manifest next update: Sat 14 Jun 2025 13:00:53 +0000
Files and hashes: 1: FGRN0KgcYwc_LFG8l24R-pxhXFE.crl (hash: usfmziQXMHnpFWc65H8zff1PIxOafaLYW6oJLe2h+Kc=)
2: xdBt6mgdPLmEK6zvGwvirp2QCKY.roa (hash: nTAIAin8JLzpAvSGVhNOts7eSHkAmQZF1jcZc7SgaKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:fc:be:d5:28:26:1e:6b:ef:10:16:c5:e5:cc:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Validity
Not Before: Jun 13 13:00:53 2025 GMT
Not After : Jun 14 13:00:53 2025 GMT
Subject: CN=100618874de53e422d897fdb4cb266bbf6d1b40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:a5:35:03:59:05:9d:4f:08:ff:d9:f8:3b:
f3:f3:a5:13:f7:0c:19:11:71:b6:6d:e1:0a:10:e7:
75:56:9f:2e:1b:47:b7:3d:f8:eb:d3:78:71:0f:35:
a1:93:8e:70:50:02:a8:89:b5:14:a4:e0:3b:a9:8d:
f4:eb:f2:88:16:d3:9f:ab:c4:67:8e:ed:5e:2a:f4:
9d:49:c5:5b:2a:2c:fb:e7:57:78:d8:43:e6:b0:d8:
e3:80:b0:b2:0b:1b:8d:ec:7e:61:76:19:2e:7e:8f:
3f:c0:ea:6b:90:b9:44:ce:96:06:da:ad:19:fe:ac:
2f:b6:8d:a8:27:57:23:52:4c:05:56:16:7e:c7:88:
8d:51:ea:e4:2e:af:89:2e:a9:33:ec:f3:51:3b:3c:
58:7c:72:ec:39:18:3a:44:1a:92:8c:55:23:91:7c:
c6:ab:f5:4f:42:13:6f:31:87:0d:f0:2f:ea:60:b2:
df:be:61:ab:e6:c5:aa:84:2a:fd:a7:df:58:d8:9d:
58:5e:df:a5:79:a7:90:4d:97:29:94:be:a2:d4:69:
43:90:71:16:39:da:8c:0c:9e:ef:cd:f5:a1:e6:84:
fa:8c:59:9b:c8:af:f8:2c:e4:99:cc:f8:9b:fe:53:
b7:36:09:da:aa:27:c6:d9:46:ee:5f:c3:9f:37:6d:
b9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:06:18:87:4D:E5:3E:42:2D:89:7F:DB:4C:B2:66:BB:F6:D1:B4:0A
X509v3 Authority Key Identifier:
keyid:14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a8:52:d3:37:37:ca:80:2f:a1:55:cc:17:08:80:03:60:09:
f8:e8:3c:fb:d3:45:fa:12:79:8a:2b:bc:ec:30:60:32:38:cb:
cf:a8:8b:53:93:2d:be:73:01:40:c4:2e:00:7b:96:73:de:f0:
ec:11:43:c4:26:24:f6:a7:92:6f:e9:5b:58:6d:26:9f:cd:df:
0a:52:58:1c:94:fe:f1:c3:14:89:1a:5b:07:b4:f6:37:7e:c8:
c9:f0:4e:6b:cb:ce:6c:f5:4d:2a:0d:f2:22:f9:01:76:a7:49:
b7:f2:3b:c3:68:08:5c:5d:e0:07:fc:d4:a0:d7:18:37:b6:57:
b1:73:6b:10:f6:0a:cc:00:95:1f:54:d0:6b:3a:39:a1:e2:95:
8c:c3:4c:21:ba:07:1c:ca:b0:06:3f:8b:80:ca:4f:06:a7:92:
f3:c9:fa:68:c9:3f:22:a7:7e:85:73:5a:ee:33:97:e9:f8:db:
88:a7:6a:05:b1:97:2d:af:91:f5:df:5a:d0:2a:ae:86:77:e5:
9a:39:33:e8:b6:7d:41:1b:7b:5f:db:83:69:dd:af:d3:33:ff:
00:41:74:4f:b6:82:ca:68:fc:a7:1b:cb:e4:8d:93:5b:cc:81:
21:e6:49:15:17:d5:66:3b:d3:69:6f:aa:57:d3:d8:87:cd:99:
bb:57:b0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:54:28 2025 by rpki-client