Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
File: FzTbXEHnEbc9jynawS6bg2TNH70.mft (raw, json)
Hash identifier: L+vn+u0Jhy82z7ThCGDQVdZvmx6IBiZASNIgZx4n8T0=
Subject key identifier: 6F:62:CA:4B:4C:92:55:1B:4B:B3:6C:FC:D6:AA:E0:D6:22:B3:0E:7A
Authority key identifier: 17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
Certificate issuer: /CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Certificate serial: 01978A3642E98BAB98A1A5A78AE11D415297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
Manifest number: 152E
Signing time: Thu 19 Jun 2025 22:01:41 +0000
Manifest this update: Thu 19 Jun 2025 22:01:41 +0000
Manifest next update: Fri 20 Jun 2025 22:01:41 +0000
Files and hashes: 1: FzTbXEHnEbc9jynawS6bg2TNH70.crl (hash: Yd52OpX7ZtptvizMa147z0WuIdUHAiuhAY1dM1mRGlg=)
2: _ryT7JJRyl2zbDlcHLiieOVaWDE.roa (hash: aYopHcEKoiKmgUw0u7ZqiunqjMA1+tPcCa/wAYiX86g=)
3: cmxdqS626N731JSDXMkhCrtA4_Q.roa (hash: LRekbyCIvJRl2MojJwg69VWuVHL2U6Aun+QU7GJY++E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:36:42:e9:8b:ab:98:a1:a5:a7:8a:e1:1d:41:52:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Validity
Not Before: Jun 19 22:01:41 2025 GMT
Not After : Jun 20 22:01:41 2025 GMT
Subject: CN=6f62ca4b4c92551b4bb36cfcd6aae0d622b30e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fd:26:be:bf:bb:5c:ce:ae:cd:a7:fc:f1:1e:
26:76:de:20:cc:77:ff:3d:0d:18:1e:ee:77:f7:0b:
a3:fb:36:47:3d:52:db:96:1d:e7:dc:18:1d:6e:f2:
51:a8:1f:ed:44:c9:73:67:b4:fb:76:3c:e7:1e:69:
62:0b:2e:82:78:63:99:4e:65:42:4e:b3:d5:72:a4:
f8:c8:e1:de:5e:8b:75:4b:1e:ae:e5:b4:04:64:f6:
ae:7b:8f:e7:9f:56:d1:8b:03:7c:aa:74:16:49:86:
03:cc:f5:3f:9d:65:a7:1f:68:81:c2:5c:0a:5d:80:
7e:40:c9:36:62:6e:e9:67:fb:00:86:09:ec:d1:23:
e9:54:ed:cd:d0:6d:0e:ab:5a:95:49:ac:9c:08:f7:
7a:b3:8a:a8:0c:94:ca:8c:94:25:c5:61:4d:ab:97:
97:ba:55:a7:57:b2:c1:1f:13:24:02:e6:42:c7:24:
18:a2:32:08:ad:9d:16:98:9b:20:b6:d6:1f:06:06:
fd:d9:16:9f:41:96:f5:7b:5c:00:c5:df:2d:c0:3e:
e3:b4:3d:c3:a7:cb:b6:36:42:fb:99:be:1b:8a:a2:
63:4f:43:7d:77:d3:dc:98:7e:b8:df:92:ce:7e:7b:
1e:e6:3a:2b:e0:0e:ff:68:c1:55:64:f3:05:30:51:
9c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:62:CA:4B:4C:92:55:1B:4B:B3:6C:FC:D6:AA:E0:D6:22:B3:0E:7A
X509v3 Authority Key Identifier:
keyid:17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b6:9d:3d:63:19:a9:bf:d2:20:6c:66:28:28:38:18:64:7c:
e5:82:93:90:f8:7e:b3:44:7e:31:d6:91:57:17:26:9b:fc:dc:
95:22:5e:f9:c6:c2:3a:31:ab:3f:c2:fb:c2:04:59:39:bc:e6:
9d:6c:99:ae:74:9a:64:0f:49:d2:84:f6:df:a7:6b:bb:85:4f:
63:a8:96:6f:3e:c7:e4:7c:34:84:1a:46:79:2e:ea:11:95:18:
c4:1f:05:75:65:d7:dc:6f:8a:7c:ae:a8:9e:a9:89:86:04:0c:
e7:48:f5:49:85:90:a6:b8:be:cf:2c:f5:3c:51:8d:6b:29:77:
4c:4a:a6:57:93:be:36:24:8d:1a:11:3d:d8:13:f2:46:26:99:
90:3d:58:4e:9c:2f:1a:83:e6:ce:7f:e0:d5:67:42:b9:c5:90:
ea:35:47:39:39:89:5c:66:b8:88:01:67:8b:e2:40:6d:10:4c:
a7:7d:69:43:84:2b:9d:99:0a:02:66:bc:87:b1:e9:70:6c:23:
e2:9c:b5:93:b9:2c:59:b8:0d:f8:0c:f8:70:5d:18:fa:a9:91:
19:38:66:bf:08:b4:a4:b3:e0:e7:d3:a6:f4:ff:78:6f:3b:54:
83:16:4c:7c:ab:a7:c9:73:a5:01:95:e1:f5:9b:e2:c7:6d:73:
f5:e9:36:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 02:43:03 2025 by rpki-client